Error while building hardened-debian-xfce-15.0.0.1.0-2 - no Hardened-Debian.xml

Development
#1

While building hardened-debian-xfce qcow2:

sudo ./whonix_build --flavor hardened-debian-xfce --target qcow2 --build

Build breaks at ./build-steps.d/1150_export-libvirt-xml stage

cp: cannot stat '/home/user/Whonix/packages/whonix-libvirt/usr/share/whonix-libvirt/xml/Hardened-Debian.xml': No such file or directory

Indeed, the file does not exist:

ls Whonix/packages/whonix-libvirt/usr/share/whonix-libvirt/xml/
external_network.xml  Whonix-Custom-Workstation.xml  Whonix-Workstation.xml
internal_network.xml  Whonix-Gateway.xml

Workaround? Can be safely ignored?

1 Like
#2

Yes, very much so.

Itā€™s because there is no xml file for hardened debian yet. Hardened Debian in VMs is still underdeveloped that why itā€™s not ported to KVM yet. (I speculate it wouldnā€™t be hard once it progressed more.) I donā€™t think Hardened Debian KVM builds were attempted before. But due to generic written way of Whonix build script I donā€™t foresee too many issues.

Would you like to provide hardened debian KVM VMs? @HulaHoop

#3

All clear, thanks!

#4

For sure :slight_smile:

1 Like
#5

Please drop at https://github.com/Whonix/whonix-libvirt/tree/master/usr/share/whonix-libvirt/xml when convenient.

I guess it would be quite similar to https://github.com/Whonix/whonix-libvirt/blob/master/usr/share/whonix-libvirt/xml/Whonix-Custom-Workstation.xml except for networking and dunno if something else.

1 Like
#6
1 Like
#7

This is now included in git tag 15.0.0.1.1-developers-only, entirely untested.

might need adjustment for hardened debian.

1 Like
#8

Do hardend debian builds require its own network configuration file? If yes, could you please add /usr/share/whonix-libvirt/xml/Hardened-Debian-Network.xml to whonix-libvirt package? @HulaHoop

https://github.com/Whonix/Whonix/commit/f150da741dff9af0d56227389817225e245b6332

The network XML files

are not appropriate for hardend debian builds. I was wondering to use something like the following:

   if [ "$WHONIX_BUILD_TYPE" = "gateway" ] || [ "$WHONIX_BUILD_TYPE" = "workstation" ]; then
      sudo $SUDO_OPTS cp "$libvirt_source_kvm_file" "$libvirt_target_kvm_file"
      sudo $SUDO_OPTS cp "$libvirt_source_network_file_external" "$libvirt_target_network_file_external"
      sudo $SUDO_OPTS cp "$libvirt_source_network_file_internal" "$libvirt_target_network_file_internal"
   elif [ "$WHONIX_BUILD_TYPE" = "hardened-debian" ]; then
      sudo $SUDO_OPTS cp "$libvirt_source_kvm_file" "$libvirt_target_kvm_file"
   else
      error "Unsupported WHONIX_BUILD_TYPE '$WHONIX_BUILD_TYPE'!"
   fi

But may not be needed. Could be sorted in prepare_release function libvirt_compress anyhow which needs to be updated anyhow for redistributable hardened debian VM support.

#9

No, Iā€™ve configured it to use the existing ā€˜defaultā€™ NAT network. Unless there is an objection to this everything should work as is.

1 Like