[HOME] [DOWNLOAD] [DOCS] [NEWS] [SUPPORT] [TIPS] [ISSUES] [DONATE]

Shared Folder Host-Side implementation

#1

This topic is to track tasks needed to implement host-side shared folders for KVM.

  1. Incron install and config for auto permission adjustment.
  2. shared folder help package additions

  1. Status: Incron policy for permission command application upon certain file actions testing and working.

  2. Status:WIP

systemd service change to add a directory in the user’s home folder if it detects non-virtual environment. Will need to distinguish between Whonix-Host and Whonix Physical builds on x64 and ARM somehow since that would be irrelevant. @Patrick what if set it to look for a certain “this is Whonix-Host” file that’s only available in a Whonix Host build?

Two parts:
*mkdir /home/$USER/shared
*Adding a shared folder device to Whonix-Workstation using virt-xml. DONE. User name needs to be variable scripted though.

sudo virt-xml Whonix-Workstation --add-device --filesystem source=/home/user/shared,target=shared,type=mount,accessmode=mapped

Whonix host operating system
#2

systemd supports ConditionVirtualization=false, does that help?

On host or in VM?

What about the already established /mnt/shared folder by https://github.com/Whonix/shared-folder-help package?

Not yet, but will be implemented.

#3

It should.

All host side.

Good idea. Are /mnt/ permissions lenient or will they cause problems for files in /shared ?

#4

Are /mnt/ permissions lenient or will they cause problems for files in /shared ?

It’s whatever we make them. Worked well inside VMs. (See
shared-folder-help.postinst.)

#5

Since the same directory location is readily available on host and guest this part of the package doesn’t need conditionals.

Only the part about pulling/sarting the incron package should be on the host. Is it possible to control whther a dependency gets pulled depending on the environment? Or maybe the incron daemon can be adjusted to only start when it detects it’s not virtualized.

#6

Not that I know, but no need since the dependency could be added to the host package whonix-host-xfce-kvm-freedom which only gets installed on Whonix Host Xfce KVM.

1 Like
#7

Should I add it now or when a full configuration is added?

1 Like
#8

Dunno. I don’t know what would speak about doing it now.

add

virt-xml "Whonix-Workstation" --add-device --filesystem source=/mnt/shared,target=shared,type=mount,accessmode=mapped`

below

?

1 Like
#9

And above, add

mkdir --parents /mnt/shared
chmod 777 /mnt/shared

?

Then this is fully implemented? No need for ConditionVirtualization=false or any other changes?

#10

OK these two commands need to precede the virt-xml one or else it fails becuase the folder doesn;t exist

No need for service conditions now after this. incron can just go into the host package you mentioned.

1 Like
#11

Ok. Could you add too please?

virt-xml “Whonix-Workstation” --add-device --filesystem source=/mnt/shared,target=shared,type=mount,accessmode=mapped` || true

Does it need -c qemu:///system?

1 Like
#12

OK Does it need to be in a if-then block?

No this is a dedicated tool that doesn’t use this notation

#13

No, since these commands are idempotent.

1 Like
#14

Done

#15

This commit does not show up in git master branch.

https://github.com/Whonix/whonix-libvirt/commits/master

I also don’t see a new branch.

It also does not show up in https://github.com/Whonix/whonix-libvirt/blob/master/usr/lib/whonix-libvirt/install

git fetch followed by git show does not show commit 25649bd7f16f8030a5c9d812146b53711c5e330f either.

Really strange.

#16

Did you use “directly commit to git” using github web? I have no idea how to use that or how to make use of such commits (without manual copy/paste which would be besides the point and loose authorship and commit messages).

#17

I’m using the web interface right now and it seems to have messed things upat your end? I was commiting the patch to the master branch

1 Like
#18

Never mind I missed https://github.com/Whonix/whonix-libvirt/pull/85 which will work as usual.

1 Like
#19

Merged.

1 Like
#20

Do you think Whonix GW should have it added as well? Or leaveit on per user basis?

I imagine this could be part of a usability tool on the GW where users want to backup/restore onion keys on demand.

1 Like