Definition
Qubes OS is a free and open-source, security-oriented operating system for single-user desktop computing. Rather than trying to prevent every software flaw, it assumes that all software contains bugs and that compromise is inevitable, then works to confine and contain the damage. It does this through strong compartmentalization: the system is divided into isolated virtual machines, much as a building is divided into separate rooms.
Compartmentalization with qubes
Qubes uses the Xen hypervisor to run lightweight virtual machines called qubes, each assigned a purpose and trust level. A user might keep work, banking, and untrusted browsing in separate qubes so a compromise in one cannot reach the others. Colored window borders mark each qube's security level so it is visually clear which domain a window belongs to. A small administrative domain, dom0, has no network access and controls the others.
Templates, disposables, and Tor
App qubes share a root filesystem from a Template (Fedora, Debian, or others), which keeps storage efficient and updates centralized. Disposable qubes spin up for a single task and self-destruct on shutdown, useful for opening risky attachments. Qubes also integrates Whonix to route selected qubes through Tor, and offers Split GPG so private keys stay isolated from the applications that use them.
This model appeals to users practicing serious OPSEC who want to isolate key-handling from everyday browsing. It is frequently discussed alongside Whonix, which Qubes ships as an integrated option for anonymized networking.
In Simple Terms
Qubes OS is a free and open-source, security-oriented operating system for single-user desktop computing. Rather than trying to prevent every software flaw, it assumes that…