How to herd KUHBS like a farmer

Qubes OS and KUHBS Documentation

RTFM. Or just ask your LLM of choice. Tell it to read all of the relevant source code before answering questions.

Before you start

Learn what Qubes OS and KUHBS protect against, where they stop, and why clean rebuilds matter.

Understand KUHB definitions, managed KUHs, the four topologies, lifecycle actions, and backup limits.

Sort the old data you need by application, verify the copy, and keep unnecessary files offline.

Check hardware support, verify the Qubes OS download, and install with safe defaults.

Install KUHBS, open its graphical interface, add a trusted application list, and create your first app setup.

Review, add, and install the hardware-specific System KUHBs your computer needs.

Choose and install application KUHBs, then understand where each application's data persists.

Restore selected Signal, Thunderbird, Office, and KeePassXC data into the right application KUHBs.

Review changes, back up required data, and upgrade the VMs managed by a KUHB.

Mount the backup storage and archive only the persistent paths selected by each KUHB.

Restore selected KUHBS archives onto existing halted targets and verify the restored applications.

Review a newer KUHBS checkout, rerun its dom0 installer, and verify the updated installation.

Run an AI audit against an exact external repository commit, then verify every finding yourself.

Add an audited repository at the reviewed commit and enable only the definitions you need.

Copy a complete KUHB example, change its application settings, and validate the result.