Install Icedove (Thunderbird) + TorBirdy + Enigmail

[phabricator-migrator]

Information

ID: 113
PHID: PHID-TASK-z5iswx64xcfcrjjs72ic
Author: JasonJAyalaP
Status at Migration Time: resolved
Priority at Migration Time: High

Description

migrated from:
https://github.com/Whonix/Whonix/issues/17

---

install:

• https://packages.debian.org/jessie/icedove
• Debian -- Error
• https://packages.debian.org/jessie/enigmail

---

update documentation for next Whonix version:

Email Overview

Comments

---

HulaHoop

2015-05-23 00:07:09 UTC

Ticket addition: include enigmail package from Debian repos with IceDove.

---

Patrick

2015-05-23 13:19:32 UTC

sudo apt-get install icedove xul-ext-torbirdy enigmail requires 92.4 MB of additional disk space. Still worth it?

---

HulaHoop

2015-05-23 14:15:09 UTC

Email is a basic activity that we should provide a secure answer for. However I can see how a growing image size isn’t good for Whonix infrastructure.

How about introducing install scripts that fetch packages optionally and configure them as needed? Its like tbb-launcher except the distribution and verification is all handled by apt. Icedove doesn’t need configuration of safe defaults but electrum would. Uninstalling would be manual and not covered by scripts .

That way we can give people secure defaults while not bloating up the image to cover every use case under the sun.

How we present these scripts is another thing:

Will they be icons that run the script like tbb? Not a solution because desktop clutter.

How about a folder on the desktop with the install scripts inside and a way to run them be double clicking - no terminal needed? The script names would be straightforward for example this one is called “Email” and so on.

---

HulaHoop

2015-05-23 14:40:01 UTC

For example let’s say electrum creates a folder under the user’s home directory for its settings (like xchat). Can whonix ship with an artificially created folder containing the wrapper script or will it be overwritten when the user installs the program?

If its the latter, the install script will need to move the wrapper script into the program’s directory from another location, after the install is done.

---

Patrick

2015-05-23 16:32:05 UTC

install scripts:
Probably not. apt-get automation is very difficult due to issues introduced at a higher levels. More info:
Dev/Automatic Updates - Kicksecure

electrum:
https://phabricator.whonix.org/T215#3208

---

HulaHoop

2015-05-24 00:54:18 UTC

FAI is a flexible framework for unattended Debian installs but can be used for much more including automatic package installs. Its a decade old and robust, used for massive Debian deployments. Each feature can be used alone.

The idea here is to tell FAI the packages we want and it handles apt completely. Seems to get around the problems of talking to apt directly. What do you think?

FAI - Debian Wiki

http://fai-project.org/fai-guide/_anchor_id_config_xreflabel_config_installation_details.html#packageconfig

---

Patrick

2015-05-24 04:36:10 UTC

It’s a different category of tool. More like in the category as grml-debootstrap. A handy tool for sysadmins. Not so much for distributions. Not for install scripts after the system has already been installed.

---

HulaHoop

2015-06-06 00:25:17 UTC

I’m happy with the documentation. You can close this if you want.

---

Patrick

2015-06-06 02:24:49 UTC

I am not happy with documentation yet.

If you read the help for Convenient Encryption (help button next to this button), it sounds pretty insecure. I am not opposed to anyone using gpg like this in a causal not so caring way, but it’s not something to encourage in a security guide. Also ‘confirm before sending’, ‘Always’ should stay recommended for serious usage.

Also, we’re not jessie based yet (therefore install from Debian repository unfortunately not yet possible), Whonix 11 stable not out yet.

---

HulaHoop

2015-06-06 15:01:58 UTC

Also ‘confirm before sending’, ‘Always’ should stay recommended for serious usage.

I don’t see this option in Enigmail the menus have changed since the instructions were made and so I thought this obsolete option became Convenient Encryption.

Also, we’re not jessie based yet (therefore install from Debian repository unfortunately not yet possible), Whonix 11 stable not out yet.

Please change them to Jessie instructions whenever you release stable.

---

Patrick

2015-06-06 15:06:45 UTC

! In T113#5304, @HulaHoop wrote:

Also ‘confirm before sending’, ‘Always’ should stay recommended for serious usage.

I don’t see this option in Enigmail the menus have changed since the instructions were made and so I thought this obsolete option became Convenient Encryption.

See this screenshot:
{F79}

These settings should do.

---

HulaHoop

2015-06-28 18:14:56 UTC

If you decided to integrate Icedove in Whonix can you please set it to open links in messages from Tor Browser?

---

Patrick

2015-06-28 23:19:25 UTC

You mean

1. open icedove
2. see some link
3. click the link
4. opens the link in Tor Browser
   ?

We’re already doing this.

Implemented by:
GitHub - Kicksecure/tb-default-browser: Configures system to use /usr/bin/torbrowser as default browser

There is just a related apparmor question:
Whonix Forum

---

HulaHoop

2015-06-28 23:46:07 UTC

You mean

open icedove
see some link
click the link
opens the link in Tor Browser

Yeah.

Good stuff, thanks

---

Patrick

2015-07-27 18:54:16 UTC

Install Icedove (Thunderbird) + TorBirdy + Enigmail, added icedove, enigmail and xul-ext-torbirdy to anon-workstation-packages-recommended - https://phabricator.whonix.org/T113:
Install Icedove (Thunderbird) + TorBirdy + Enigmail, added icedove, e… · Whonix/anon-meta-packages@33c4100 · GitHub