Tox / qTox - Whonix Integration

Development
1

i have found very great feature, what is simply Tox?

Tox is a free (as in liberty and price) peer to peer, distributed, multimedia messenger.

for more:-

FAQ
https://wiki.tox.im/FAQ

Tox over Tor (ToT)
https://wiki.tox.im/Tox_over_Tor_(ToT)

Tox github:-

2

mentioned in whonix documents here:-

3

how to install qTox inside Whonix or debian (jessie). (instructions are not fully safe yet, please read:- Voice over IP (VoIP))

Note:- these instructions have been copied from different links:-

https://wiki.tox.chat/clients/qtox

https://wiki.tox.chat/binaries
http://backports.debian.org/Instructions/

categorized/written in the way you see it below => done be me only.

1.Install qTox from the Tox.chat repository (debian-whonix users)

A- First way to install qTox:-(shortest)

echo "deb https://pkg.tox.chat/debian nightly release" | sudo tee /etc/apt/sources.list.d/tox.list wget -qO - https://pkg.tox.chat/debian/pkg.gpg.key | sudo apt-key add - sudo apt-get install apt-transport-https sudo apt-get update

The Tox Repository has now been installed.

You can now install qtox, utox, toxic, ratox and tox-bootstrapd.

To see which one fits your needs please take a look at this table:-

and/or
https://wiki.tox.chat/clients/qtox#features

To install for example qTox:-

sudo apt-get install qtox

To start qTox just type in the terminal:-

qtox

Then hit enter.

B- Second way to install qTox:-(short)

sudo sh -c 'echo "deb https://pkg.tox.chat/debian/ nightly release" > /etc/apt/sources.list.d/tox.list' wget -qO - https://pkg.tox.chat/debian/pkg.gpg.key | sudo apt-key add - sudo apt-get install apt-transport-https sudo apt-get update -qq echo "qTox Repository Installed." sudo apt-get install qtox echo "qTox Installed." qtox

C- Third way to install qTox:- (long)

In order to clone the qTox repository you need Git.

sudo apt-get install git

add backports to your sources.list for FFmpeg and others.

sudo nano /etc/apt/sources.list

add this link , then exit&save

deb http://http.debian.net/debian jessie-backports main

go to terminal and type

apt-get -t jessie-backports install "package"

then install GCC, Qt, FFmpeg, OpanAL Soft and qrencode using

sudo apt-get install build-essential qt5-qmake qt5-default qttools5-dev-tools libqt5opengl5-dev libqt5svg5-dev libopenal-dev libxss-dev qrencode libqrencode-dev libglib2.0-dev libgdk-pixbuf2.0-dev libgtk2.0-dev ffmpeg

from this point you have two ways to try either the easy or the hard one.

The easy one:- (is not guaranteed to work)

git clone https://github.com/tux3/qTox.git cd qTox ./simple_make.sh
The the hard one:-
install all of the toxcore dependencies

sudo apt-get install libtool autotools-dev automake checkinstall check libopus-dev libvpx-dev libsodium-dev libavdevice-dev

install filter_audio manually

git clone https://github.com/irungentoo/filter_audio cd filter_audio make -j$(nproc) sudo make install
now toxcore compiling dependencies

git clone https://github.com/irungentoo/toxcore.git
cd toxcore
autoreconf -if
./configure
make -j$(nproc)
sudo make install
echo '/usr/local/lib/' | sudo tee -a /etc/ld.so.conf.d/locallib.conf
sudo ldconfig

Run in qTox directory to compile

qmake make
Now you can start compiled qTox with

./qtox

Note:- If the compiling process stops with a missing dependency like: … libswscale/swscale.h missing try

apt-file search libswscale/swscale.h

Then install the missing dependency. you can do this step for any missing dependency name.

2.how to use it in Whonix or behind any torifying connection

Since Whonix based on debian and all their traffics are torified then it wont be much different from users:tox_over_tor_tot - Tox Wiki

After installing qTox after following one of the above instructions go to terminal and type

qTox
Make new profile or load an old one, then go to:-

Settings → General → scroll down to the bottom → uncheck “Enable IPV6” and “Enable UDP” → then choose from SOCKS5 from Proxy type → then add in the Address field “127.0.0.1” with port “9050” → click on reconnect or restart qTox

4

new development of implementing Tox over I2P networks. check the links:-

Add I2P backend support · Issue #942 · irungentoo/toxcore · GitHub (interesting)

https://www.reddit.com/r/projecttox/comments/2z56fy/tox_over_i2p/ (old)

6

Since you originally documented it in the wiki… Do the instructions still look good? @HulaHoop

7

Does this avoid the Tor-over-Tor situation? If so, it should be added to the Tox template, where the “TODO” section notes it needs to be finished to avoid this situation.

8

As in do they work? I don’t know I’ll test them out if torjunkie confirms he hasn’t.

When looking at the text I see this sentence that might be misleading:

As at April 2017, the following secure (encrypted) features had been implemented: [15]

Tox is a spec with many clients with different levels of feature support. I think an explicit note about this linking to the client matrix page is best.

There is no Tor-over-Tor with Tox. Tor is never bundled with it. The instructions are for tunneling Tox connections thru TBB’s Tor instance.

9

Ah, okay. My mistake, the TODO was actually "how to use Tox with stream isolation without Tor over Tor.

I’ve tested these instructions and they work.

Re: the features matrix, that is correct that diff ones support diff stuff.

However, I believe the main qTox client has all that stuff I listed there (but I can’t remember now). From memory qTox was the most fully-featured client. You could double-check - I took it off their main page.

1 Like
10

update Tox chat no more supporting Debian, until that happen this topic might be valid again.

11

update , qtox is possible to be installed from debian repos starting from next debian code buster:

cc @HulaHoop @Patrick

also @0brand & @torjunkie might update the installation of tox/qtox in our wiki.

2 Likes
12

Please create a Whonix 15 ticket.

1 Like
13

done:

https://phabricator.whonix.org/T889

1 Like
14

Noted - thanks @nurmagoz

1 Like
15
2 Likes
16

Some changes Template:Tox: Difference between revisions - Whonix

Since you originally documented it in the wiki… Do the instructions still look good? @HulaHoop

1 Like
17

Yes everything still looks good and having it in Whonix made things much easier.

qTox is still actiely developed and their community is vibrant and holds annual cons.

2 Likes
18

Tox should not be included. It is not secure.

Also see the big red warning on the readme:

1 Like
19

Tox was a great idea. Sadly is insecure as you say. Maybe switch default Whonix IM to something like gajim OMEMO since not everybody has a phone number to use Signal?

I also feel OMEMO need more eyes.

20
1 Like
21

Its already known before even Tox integrated into whonix, You have something new to say?