GM.
Yesterday I integrated FIPS into Qubes-OS. Here is a short description of what each of them does, and the resulting setup.
FIPS - a permissionless internet.
To get a domain name, you need ask for permission.
To get https, you need to ask for permission.
To get an IP address, (the final boss) you need to ask for permission.
FIPS is a permissionless internet. You use a nostr address instead of an ip address, and through some cool engineering, you get a permissionless internet.
So for example:
http://npub1crpldvy49ef8z34wlacwujnfudy4nd7k96aqdx5wgn6ckztz7z8q9t59ud.fips/
gets you to my web page if you are running FIPS, and you don't need permission, and neither do I.
We just need nostr addresses.
QUBES-OS - the securest OS.
Running agents locally can be a real security issue which is originally why I switched to Qubes-OS. Qubes-OS lets you run several operating systems on one machine, and encloses them in what are called "qubes". You can run whatever OS you want in each qube, all on the same machine, all securely separated and isolated.
You can also route internet THROUGH a qube. So a nice example is setting up your vpn in a qube, and use it like the following:
It forces everything you run in Debian to pass through the vpn qube, else no internet.
You can send multiple OSs through the vpn.
Turns out you can also create a FIPS qube. That is what I did yesterday, and part of my setup now looks something like this:
You can check out FIPS here: https://github.com/jmcorgan/fips
Qubes OS here: https://www.qubes-os.org/
Follow FIPS here:
fips (npub1y0g…00ly)
Follow the FIPS creators here:
jcorgan (npub19wa…8p6k)
Arjen (npub1hw6…65gr)
If you are going to attempt to do this, point your agent to this repo and it should save you some tokens. There were some gotchas that it took a long time for Claude and Codex to figure out.
https://git.laantungir.net/laantungir/fips_setup