KVM tweaks for sophisticated setup

[Patrick]

Note: I don’t maintain Whonix KVM but I can answer a few build script specific questions.

@jeffxxxxxxxx

• No running GUI programs. I can this achieve by compiling Whonix KVM CLI, right?

The usual build documentation:

Build and Update Whonix from Source Code

• --flavor whonix-gateway-cli
• --flavor whonix-workstation-cli

Might be Undocumented, Untested or Unsupported Features?

@jeffxxxxxxxx

• Increased disk space for my database (WS)

--vmsize 200G

as per:

Build Configuration

@jeffxxxxxxxx

• Increased mount of cores (WS + GW). Does an increased amount of cores on the GW help with performance/stability? I know Tor is mostly single threaded.

@jeffxxxxxxxx

1. Increased amount of RAM (WS +GW). Does an increased amount of RAM on the GW help with performance/stability?

Seems undocumented. This page is at time of writing for VirtualBox only.

Kicksecure Tuning

Mostly unspecific to Whonix. Hence:

Potential Solutions Beyond Whonix!

@jeffxxxxxxxx

Is it possible to use the folder host shared folder technique to store the database folder outside of Whonix? Would this be a performance problem?

Never tried. Never heard. I suggest to make this a question unspecific to Whonix or just try.

@jeffxxxxxxxx

What can I do additionally for an sophisticated KVM setup?

You could contribute to this one:

hosting a Tor relay and/or bridge for better anonymity

Added here recently: Hosting a Tor relay and/or bridge and using it to mix one’s own traffic might be beneficial for anonymity. Advanced users only! Please refer to the write-ups by The Tor Project, the developers of the Tor software. Quote The Tor Project New low cost traffic analysis attacks and mitigations [archive]: In terms of mitigating the use of these vectors in attacks against Tor, here’s our recommendations for various groups in our community: Users: Do multiple things at once …

Generic Bug Reproduction / research / contact upstream / enhance documentation.