build Kicksecure Qubes Template

[adrelanos]

The problem you're addressing (if any)

A Kicksecure Qubes Template is unavailable.

The only way to use Kicksecure in Qubes is Distribution Morphing.

The solution you'd like

Provide a Kicksecure Qubes template that can be installed using:

qvm-template install --enablerepo=qubes-templates-community kicksecure-17

The value to a user, and who that user might be

Easily installable Kicksecure Template that does not come with issue #7447, requires no lengthy distribution morphing instructions, comes security hardened by default.

(Should also come with in-VM kernel enabled by default. (#9570))

Users that indicated interest for a Kicksecure Qubes Template:

• https://forum.qubes-os.org/search?q=kicksecure%20in%3Atitle
• https://github.com/QubesOS/qubes-issues/issues?q=is%3Aissue+kicksecure+in%3Atitle
• https://forums.kicksecure.com/search?q=qubes%20in%3Atitle

Work-in-progress

https://github.com/Kicksecure/qubes-template-kicksecure
Untested.

Related non-duplicates

• create or fork a Linux distribution for default use by App Qubes for better security #9332 (ticket isn't about Kicksecure) (is a ticket about default use of a hardened Template)

Completion criteria checklist

(This section is for developer use only. Please do not modify it.)

[mzpqnxow]

Note: the qusal project has this which might be a helpful reference as well

[adrelanos]

Unrelated.