censorship circumvention / Tor pluggable transports

Patrick · April 7, 2021, 11:32pm

This wasn’t complete and/or broken later.

Since this is only required for the Tor pluggable transport meek and nothing else, the current implementation of ACW in git master will enable cleranet system DNS on Whonix-Gateway for Whonix-Gateway user debian-tor (and user clearnet) when using meek only.

Currently does not survive reboot in Qubes-Whonix because /etc/resolv.conf is non-persistent in TemplateBased AppVM sys-whonix and due to this:

github.com

Whonix/qubes-whonix/blob/master/etc/qubes/protected-files.d/qubes-whonix.conf#L45


      
          /etc/localtime
          /etc/localtime.anondist
          /etc/localtime.whonix
          /etc/localtime.kicksecure
          
          /etc/timezone
          /etc/timezone.anondist
          /etc/timezone.whonix
          /etc/timezone.kicksecure
          
          ## whonix-gw-network-conf
          ## whonix-ws-network-conf
          ##
          ## The Tor pluggable transport 'meek' requires functional clearnet system DNS.
          ## https://forums.whonix.org/t/censorship-circumvention-tor-pluggable-transports/2601/9
          /etc/resolv.conf
          /etc/resolv.conf.anondist
          /etc/resolv.conf.whonix
          /etc/resolv.conf.kicksecure