HOWTO run a tor-relay in qubes-whonix?

[jeanne.leach]

I’ve searched both Qubes and Whonix documentation, but so far no result.

I run Qubes with the whonix-gw/ws implementation, and I would like to run a tor-relay. So:
How should I set up a tor-node that runs inside whonix? And should it run in gw or ws-vm?

[entr0py]

I don’t think this is documented yet.

You would need to adapt the Virtualbox instructions for Qubes.

1. edit torrc: https://www.torproject.org/docs/tor-doc-relay.html.en
2. forward ports to whonix-gateway: https://www.qubes-os.org/doc/qubes-firewall/
3. edit whonix-gateway firewall: https://www.whonix.org/wiki/Hosting_a_(private)_(obfuscated)_bridge_or_(exit)_relay

[Should a separate, dedicated VM be used to host a relay?]

[Patrick]

Yes.

Possible in theory. In practice, kinda difficult since it is undocumented, therefore unsupported. ( https://www.whonix.org/wiki/Unsupported )

You’d also need the Qubes specific instructions on how to forward a port:

The Qubes Firewall

Forward the port from sys-net to sys-firewall to sys-whonix?

I highly recommend figuring this out with a Debian VM before you try this with sys-whonix.