Have cryptsetup installed by default in Whonix

Development
1

I think it’s common enough. Handy when using encrypted USBs.

3

perhaps checking here:

4

A post was split to a new topic: Automatically removed quote of whole previous post.

5

Is that the only package you need for encrypted USBs or are you interested in a GUI?

@nurmagoz please add this request on phabricator.

We have an old thread dedicated to which choice of passmanager to pick. Consensus seems to be out on this for now?

6

That’s what I need and that’s what’s required in order to use the current GUI (the XFCE File Manager) with encrypted USBs. Without cryptsetup, an error regarding cryptsetup appears after entering the passphrase. A less technical user may assume the problem is with the passphrase rather than with a missing package.

7

done:

https://phabricator.whonix.org/T890

EDIT by Patrick:
This forum thread is now uses as ticket.

2 Likes
8

OK should be simple to add in the next release. Meanwhile just install it manually.

2 Likes
9

Should be installed by default on workstation and gateway. Reason for gateway: someone might attach an encrypted usb drive to the gateway (to restore config, backup or something) and expecting the same like in the workstation.

Which anon-meta-package would be a suitable for this cli package?

//cc @Algernon

10

I’d add it to non-qubes-vm-enhancements-cli.

1 Like
11

Algernon:

I’d add it to non-qubes-vm-enhancements-cli.

Not Qubes specific at all? No one would add a USB drive to a Qubes VM
directly?

12
1 Like
13

3 posts were merged into an existing topic: Add Password manager by default

14

3 posts were split to a new topic: cannot access encrypted USB drive with Thunar in Whonix 15

15

Information

ID: 890
PHID: PHID-TASK-g2iqzgr2uduuvnctrobo
Author: TNTBOMBOM
Status at Migration Time: resolved
Priority at Migration Time: Low

Description

That’s what I need and that’s what’s required in order to use the current GUI (the XFCE File Manager) with encrypted USBs. Without cryptsetup, an error regarding cryptsetup appears after entering the passphrase. A less technical user may assume the problem is with the passphrase rather than with a missing package.

http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/have-cryptsetup-installed-by-default-in-whonix/6684/5

Comments

Patrick

2019-01-20 05:04:17 UTC

Patrick

2019-04-06 14:50:14 UTC

16

What are the reasons this hasn’t been done yet? I find it strange that cryptsetup is not installed by default. It can still cause confusing errors like “unknown filesystem”, which is not clear to less technical users.

17

This was done as per this ticket.

18

I don’t see cryptsetup installed on a default whonix-workstation-17 in Qubes OS.

19

This was done for Non-Qubes-Whonix only.

20

What is the purpose of connecting a cryptsetup USB device (presumably) directly to Qubes-Whonix?

Wouldn’t there be a more Qubes native, more secure way to handle this?

21

To access and store encrypted data on the device.

If a USB qube is used, dom0 does not have access to the device, in this case the VM that the device is attached to does the encryption. The cryptsetup binary used for common operations is not available though.

You can still unlock and mount cryptsetup devices using Thunar in Qubes-Whonix (tested just now), so maybe not a problem for most users after all. It’s a very small package though, and pulls few dependencies.

IIRC the USB qube can handle the encryption too, but that’s an unlikely use case.