I2P client inside Whonix-Workstation Issues

[Patrick]

@LasVegas

The current state is that when you run dpkg-reconfigure i2p in the Whonix Template (whonix-ws-16-clone-1), it does not create the configuration files under /var/lib/i2p/.

That might be because I2P is unable to connect so it doesn’t create that config folder.

I2P seems weird in that way anyhow. That it needs connectivity to create that config file. And also the config file location is weird.

Could step “Change I2Pconsole interface local IP change.”

Open file /var/lib/i2p/i2p-config/clients.config.d/00-net.i2p.router.web.RouterConsoleRunner-clients.config in an editor with root rights.

Change from 127.0.0.1 to 127.0.0.2.

be done in some other file in /etc instead or the config file be created without need to start I2P? @eyedeekay

@LasVegas

Step 1 in the wiki (Securely Download of the Key): Why should should someone securely download the key to the Whonix-Workstation as mentioned in step 1 of the wiki instead of downloading it to Whonix Template only?

It doesn’t say that.

• If you are using Whonix-Workstation ™ (anon-whonix), run.

• If you are using a Qubes Template (whonix-ws-16 ), run.

gpg key download in Qubes templates is an issue unspecific to Whonix.

Potential Solutions Beyond Whonix!

See this lengthy discussion on that topic in the Qubes forums:

Curl-proxy / wget-proxy scripts in Templates so users can add GPG distro keys...

@LasVegas

Using I2P-modified TB to access clearnet: Should we avoid this due to security considerations and why?

The web fingerprint is modified. Therefore best to use

• multiple Whonix-Workstation (better), or
• multiple Tor Browser

(All documented in the wiki.)

@LasVegas

Regarding step 7

These numbers might frequently change unfortunately as this documentation is keep getting updated.

@LasVegas

Do we have to configure router.config.anondist in /usr/share/i2p/ or /var/lib/i2p/i2p-config/ to be effective?

Another issue.
I2P doesn’t seem to support /etc/i2p.d and/or /usr/local/etc/i2p.d. Not sure there is now.

I2P Integration

@nurmagoz @goldstein-otg I don’t know if anyone has brought i2p-zero to your attention yet, but it might be a way to rely on a simplified java-i2p router without a web interface. Also in the next few months java-i2p should be getting an /etc/i2p.d/-like(Name not settled AFAIK) folder for configuration.

Any update on /etc/i2p.d? @eyedeekay

Modifications to /usr/share/i2p/router.config will be lost after the next update of package anon-apps-config unfortunately. To solve this, upstream support for /etc/i2p.d is required.