sys-i2p for qubes os

[eepman]

How would one setup a sys-i2p for qubes os? Qubes currently has a sys-whonix qube, which routes through Tor network, each and every qube that uses it as its "net qube". How would its i2p version would look like?

For starters, how would one restrict each and every internet connection of the debian-12-xfce inside Qubes OS except the connections that i2pd daemon creates and manages? I am thinking that would give a watertight internet connection which ONLY connects to other i2p peers. In this case, any other deamon and program wouldn't be able to ping/connect to the clearnet addresses, IPs.

In Linux, can one firewall each and every daemon/process/user/program, except for the i2pd user and the i2pd daemon process? Does this make any sense?

Here's the clearnet qubes os forum thread for this also: https://forum.qubes-os.org/t/request-fo ... uide/24822