AIRLOCKOS
Architecture

GUI and input

GNOME, application windows, and keyboard and pointer input across VMs.

Application windows reach GNOME in sys-gui through Qubes GUI transport. sys-gui owns the display GPU; dom0 forwards keyboard and pointer input.

GNOME runs in sys-gui, which drives the display using its assigned GPU. Qubes GUI transport brings application windows onto that desktop while the applications and their files remain in their own VMs.

In the default configuration, dom0 forwards keyboard and pointer events through the Qubes input proxy. Application VMs do not own those input devices.

For more information about using the desktop, see Using Airlock OS.

Networking

Network devices, routing, and firewall rules.

Storage

Shared Nix store, per-VM software, and private data.