Qubes OS release 2 available

Interesting stuff, though I constantly get the nagging feeling that security concerns are pushing us collectively toward a library OS design (perhaps like OSv), but through a series of baroque layers (especially once the browser "OS" is taken into consideration). Does the unit of encapsulation really need to be an OS instance?

The *nix syscall interface has gotten too wide to reason about effectively. I'm interested in seeing approaches that experiment with seccomp or KVM to introduce a simplified process model for the vast majority of apps, while still leveraging the performance and hardware compatibility of the Linux kernel.

Qubes will IMHO get more interesting when R3 is released with support for libvirt and KVM. Hardware compatibility, power-aware scheduling, etc., are difficult enough without introducing Xen into the mix, especially on laptops.