Difference between revisions of "Whonix"

From RCS Wiki
Jump to navigation Jump to search
(Add Whonix-Gateway instructions)
(Merge with Kicksecure)
Tag: New redirect
 
(57 intermediate revisions by the same user not shown)
Line 1: Line 1:
[http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/ Whonix] ([https://www.whonix.org/ clearnet link]) can be installed on the Talos using KVM.
+
#REDIRECT [[Kicksecure and Whonix]]
 
 
== Both Whonix-Gateway and Whonix-Workstation ==
 
 
 
Start with a Debian Stretch ppc64el VM, and launch a root shell.
 
 
 
Install <code>dirmngr</code> (this is required in order to import the Whonix signing key):
 
 
 
apt-get install dirmngr
 
 
 
Import the Whonix signing key ([https://github.com/Whonix/whonix-developer-meta-files/blob/master/README_generic.md#how-to-install-package-name-using-apt-get source]):
 
 
 
apt-key --keyring /etc/apt/trusted.gpg.d/whonix.gpg adv --recv-keys 916B8D99C38EAF5E8ADC7A2A8D66066A2EEACCDA
 
 
 
Add the Whonix package repository ([https://github.com/Whonix/whonix-developer-meta-files/blob/master/README_generic.md#how-to-install-package-name-using-apt-get source]):
 
 
 
<nowiki>echo "deb http://deb.whonix.org stretch main" | tee /etc/apt/sources.list.d/whonix.list</nowiki>
 
 
 
== Whonix-Gateway ==
 
 
 
Unfortunately, Whonix's <code>tor</code> package, which is a required dependency of Whonix-Gateway, is not available for ppc64el.  Debian's <code>stretch-backports</code> repo does have a <code>tor</code> package that works, we just need to edit its metadata to make the package manager happy.  First, we download the <code>tor</code> package and extract it:
 
 
 
<nowiki>echo "deb http://http.debian.net/debian stretch-backports main" | tee /etc/apt/sources.list.d/stretch-backports.list
 
apt-get update
 
apt-get download -t stretch-backports tor
 
mkdir tor_extracted
 
dpkg-deb -R ./tor_*.deb ./tor_extracted</nowiki>
 
 
 
Then, run the following command.  It will fail with a dependency error, note the minimum <code>tor</code> version that it wants.
 
 
 
sudo apt-get install non-qubes-whonix-gateway-kde whonix-gateway-shared-packages-shared-meta whonix-gateway-packages-recommended-cli tor-geoipdb
 
 
 
Then, edit the metadata file:
 
 
 
nano tor_extracted/DEBIAN/control
 
 
 
And replace the Version field with the minimum version you noted earlier.  Then exit <code>nano</code>.
 
 
 
Rebuild the package and install it:
 
 
 
mkdir tor_rebuilt
 
dpkg-deb -b tor_extracted tor_rebuilt
 
apt-get install ./tor_rebuilt/tor*.deb
 
 
 
Now we can install the Whonix packages:
 
 
 
apt-get install non-qubes-whonix-gateway-kde
 
 
 
Shut off the VM.
 
 
 
Set the VM's NIC to use the <code>external</code> Network source.
 
 
 
Add a 2nd NIC to the VM, and set it to use the <code>internal</code> Network source.
 
 
 
Launch the VM again; Whonix-Gateway should be running.
 
 
 
== Whonix-Workstation ==
 
 
 
This one's a lot easier, since Whonix's <code>tor</code> package version isn't a requirement.
 
 
 
Install the Whonix packages:
 
 
 
sudo apt-get update
 
sudo apt-get install non-qubes-whonix-workstation-kde
 
 
 
Shut off the VM.
 
 
 
Set the VM's NIC to use the <code>internal</code> Network source.
 
 
 
Launch the VM again; Whonix-Workstation should be running.
 

Latest revision as of 07:24, 26 April 2025