Qubes 1.0 released [LWN.net]

Qubes 1.0 released

Posted Sep 6, 2012 1:20 UTC (Thu) by richarson (subscriber, #74226)
In reply to: Qubes 1.0 released by dlang
Parent article: Qubes 1.0 released

Actually, you don't *have* to use one VM per app but you *can* do it if you are sufficiently paranoid and have the resources (memory, mostly).

Check for example:

Cheers

(Log in to post comments)

Qubes 1.0 released

Posted Sep 6, 2012 2:28 UTC (Thu) by dlang (✭ supporter ✭, #313) [Link]

remember the question was which is better.

I agree that a full VM isolation is better than container isolation

However I also say that separating ever app is more secure than only splitting them into different bundles.

If you don't have the resources to run full VM isolation, are you better off with VM isolation in bundles, or full container isolation?

even partial VM isolation will take more resources than container isolation, how much more depends on a lot of factors.