Installing the System KUHBs

my-kuhbs-system is a separate hardware-specific trusted catalog. KUHBS core does not install it. The System KUHBS tab merely groups enabled definitions with orders 1–99; it is not a built-in system catalog.

The catalog combines Qubes OS network and device services with the infrastructure needed for updates and backups; every enabled definition still requires an independent review.

Audit every definition, hook, script, device selector, and network assumption before adapting this repository to a computer. Incorrect PCI matches or network settings can disconnect or reassign hardware.

The current separate catalog contains ordered infrastructure:

1. KUHBS Cache (order: 1) — a named DispVM providing apt-cacher-ng and the Qubes UpdatesProxy target.
2. KUHBS Net NIC (order: 2) — a named DispVM that receives matching physical network controllers and provides NetworkManager and qubes-network.
3. KUHBS USB (order: 2) — a no-network named DispVM that receives matching USB controllers and provides the Qubes USB proxy plus backup-storage tools.
4. KUHBS Net VPN (order: 3) — a provider-selectable Mullvad or NordVPN named DispVM with optional DNSCrypt and fail-closed defaults.
5. KUHBS Net Tor (order: 3, optional) — a Whonix-based named DispVM gateway.
6. KUHBS Net Firewall (order: 4) — a persistent AppVM NetVM running Qubes Snitch and backing up its selected rules path.

Create runs lower orders first; equal orders may run concurrently. Remove reverses the order. NIC and USB hooks move matching PCI devices away from ordinary Qubes device VMs and restore them during Remove.

These definitions are infrastructure for other KUHBs. They are not replacements for application definitions and are not a portable default for arbitrary hardware.

Next: Installing Application KUHBs .