Good thoughts, Jason!
I saw that you were interested/working on Qubes + Whonix before as well.
Feel free to jump in with anything you wish regarding this current Qubes + Whonix effort I'm undertaking.
Yeah, that's what made the most sense to me.
Whonix-Gateway = ProxyVM
Whonix-Workstation = AppVM
As Patrick pointed out, TorVM could be used as the ProxyVM instead of Whonix-Gateway.
However, I personally would prefer Whonix-Gateway as the ProxyVM, instead of TorVM.
I think, if I'm not mistaken, Whonix-Gateway handles timing issues better and also runs its own traffic/updates over Tor, plus maybe a few other belt and suspenders attributes for more optimal Tor-centric anonymity.
Yup, that is what I'm working on right now. Qubes Tools is the uncertain part still, which I haven't gotten a chance to get to just yet. Will know more soon on this approach.
Yeah, their new Qubes Debian Template is based on Debian Jessie ( 8 ) (testing).
It is supposedly a Qubes Template, similar in nature to the built-in Qubes Fedora Template.
So it might not be an HVM version. Maybe just the "native" version of Qubes template?
I haven't played with it, yet. Will know more about it in the near future.
However, the main issues would be Whonix Debian package compatibility with Debian Jessie, which Patrick and I briefly discussed in this thread, as well as getting the networking setup correctly, which is needed regardless of approach.
Supposedly the Qubes Debian Jessie Template would have Qubes Tools integration already taken care of. And Patrick mentioned how the Whonix Debian packages will be made compatible with Jessie, potentially before Whonix v.9. Seems that with proper networking configuration, this setup could work almost right out of the box.
Yet, Whonix package compatibility with Debian Jessie is the primary step to be completed here.
Yes. Or maybe Debian can simply replace Fedora in Qubes, including for dom0 (AdminVM). I've read that there is community push to have Debian as an alternative to Fedora on all levels. So maybe the new Qubes Debian Jessie Template can already accomplish this?
Exciting times for Qubes + Whonix!