Qubes-Whonix 14.0.0.6.9 TemplateVMs for R3.2 and R4--Testers Wanted!

0brand · March 17, 2018, 2:32pm

Hi torjunkie

Thanks for the feedback and polishing up the page! It looks great! I wasn’t really sure how to format a blog post and what syntax to use. Now I know. - I’ll make the edits to the doc a little later on today.

BTW I really appreciate all the help and guidance you’ve given!!! One of the things that sets the Whonix project apart from others is the willingness of the core community members to always find time to educate less experienced members like myself. Not sure how you find the time but I have to say YOU ALL ROCK!!

One other thing. I saw R-4 specific instructions to install Whonix VMs and configure sys-whonix and anon-whonix using salt. I was wondering if this could/should be use in the upgrade to Whonix 14 in the blog post . I haven’t tried using this salt syntax and was thinking it might make the instructions more complicated if it was added?

https://whonix.org/wiki/Dev/Qubes#salt

iry · March 17, 2018, 5:18pm

I was writing the draft in markdown syntax and then converting it to html by using some random online convertors, like this one: Markdown to HTML Converter - Markdown Editor - Online - Browserling Web Developer Tools

And then I would do some adjustment using the preview feature on the blog before posting it.

This probably will not be the best way, but hope it is kind of helpful.

Thank you for spending time preparing the draft, @0brand ! Great job!

0brand · March 17, 2018, 11:21pm

The original draft was edited to mirror your suggestions. Thanks again!

torjunkie · March 18, 2018, 8:23am

Blog entry suggestions removed to shorten thread.

0brand · March 19, 2018, 10:11am

Done.

nurmagoz · March 22, 2018, 4:45pm

There r some numerous issues from first look up:- (the test done inside Qubes 3.2)

Cant connect to Tor due to this issue:

Graphical issue inside Dolphine (maybe xfce nautilus interruption?)

Move/Copy to other VMs is not there

iry · March 22, 2018, 8:01pm

Thank you for testing, @nurmagoz !

Could you please copy and past the output of the following two commands executed in the Whonix-gateway:

sudo --non-interactive /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0 --verify-config

cat /etc/tor/torrc

iry · March 22, 2018, 8:03pm

I have the same issue in Dolphin. I then installed nautilus and the options are available in nautilus.

nurmagoz · March 22, 2018, 10:04pm

i c , well thats a bug by itself. we cant use xfce stuff mixed with kde because that will expand the surface of attack + its not tested before.

nurmagoz · March 22, 2018, 10:15pm

Remove the Dead project Ricochet = 2 years no voice

The latest version is 1.1.4 (November 5, 2016)

Remove KDE-Help inside GW and WS as it might request suspicious requests which could leak potential data

nurmagoz · March 22, 2018, 10:16pm

mirrors of onion whonix v2 or v3 no hope to connect to them, they r down or so missed.

unman · March 22, 2018, 11:41pm

Are we supposed to add reports in this thread?
On Qubes 4.0 rc5, updated from current-testing, after removing sys-whonix, and installing the new templates, sudo qubesctl state.highstate completes, but does not create sys-whonix etc , as is (I assume) the intention.
At least, not for me.

unman · March 23, 2018, 12:09am

Step 1: Either rename sys-whonix and anon-whonix or remove both VMs.

Two points:

If you use sys-whonix as default netvm, you will first have to change that for all downstream qubes. (In 4.0, changing the default netvm does not seem to change this for all dependent qubes.)
If you use sys-whonix as your updateVM and rely on it for anonymity, then deleting it first and then downloading the new templates will download on clearnet, which is probably not what you want.

I realise this is a draft: how about downloading the templates, then deleting sys-whonix and recreating it? (I haven’t tried this.) I suspect there will be a conflict on template names, so the answer would be:
Clone existing whonix-gw to whonix-gw-13
Shutdown sys-whonix and change template to whonix-gw-13.
Restart sys-whonix
Reinstall Qubes-Whonix templates
etc etc

torjunkie · March 23, 2018, 8:27am

Damn - good points unman. Normally I test instructions first to make sure they make sense and work properly. @0brand - happy to fix?

iry · March 23, 2018, 3:43pm

I see, the permission on Tor data directory seems to be the problem.

Could you please check if there is any different between the following permissions and yours:

user@host:~$ sudo ls -ld /var/lib/tor
drwx--S--- 2 debian-tor debian-tor 4096 Mar 23 15:33 /var/lib/tor

If there is any different, try fixing it with:

user@host:~$ sudo /usr/bin/install -Z -m 02700 -o debian-tor -g debian-tor -d /var/lib/tor

And then restart the Tor.

If there is still any problem, could you please report the output of this again:

sudo --non-interactive /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0 --verify-config

Thank you!

nurmagoz · March 23, 2018, 4:36pm

done everything = still the same

iry · March 23, 2018, 4:56pm

The owner and group was pulse and sdwate which have been corrected to debian-tor and debian-tor . Tor says: Configuration was valid.

I think Tor should run well now.

For restarting the Tor, you can try either using the desktop shortcut or:
user@host:~$ systemctl restart tor@default.service

To verify tor really works:

user@host:~$ systemctl status tor@default.service 
● tor@default.service - Anonymizing overlay network for TCP
   Loaded: loaded (/lib/systemd/system/tor@default.service; static; vendor preset: 
  Drop-In: /lib/systemd/system/tor@default.service.d
           └─30_qubes.conf, 40_obfs4proxy-workaround.conf, 40_qubes.conf, 50_contro
   Active: active (running) since Fri 2018-03-23 16:51:17 UTC; 5s ago              
  Process: 5675 ExecStartPost=/bin/kill -HUP ${MAINPID} (code=exited, status=0/SUCC
  Process: 5670 ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-servi
  Process: 5665 ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-t
 Main PID: 5672 (tor)
    Tasks: 1 (limit: 4915)
   CGroup: /system.slice/system-tor.slice/tor@default.service
           └─5672 /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults

I usually also use arm to see the established circuits for verification, too.

iry · March 23, 2018, 4:57pm

I am curious what could be the cause of this. Did you anyone else encounter the same issue?

iry · March 23, 2018, 5:03pm

BTW, I personally sometimes prefer posting text than posting pictures because:

easy for searching so that the error discussion may be helpful for people in the future
easy to quote, so that we can have a better context in discussion
reveal less info: info like time or metadata in the picture can be obscured or avoided.

nurmagoz · March 23, 2018, 7:28pm

still not working

do think i have a choice ? maybe u forgot that there is no way to shift text or anything from whonix to any other place. so im taking screenshots for the problems and then move them from Qubes to other VM. sorry if thats bothers u but no way to solve for now unless this going to be fixed in the next release or doing a working it.