Hello, all.
I love Whonix. As far as I could tell, the wiki says that its community would Whonix to be stateless and have a Live USB option.
NixOS solves both these problems, and if Whonix developers are willing to try it out, I’d love to write a proof of concept.
I’ve been using NixOS for about 1.5 years, and it’s been a great experience. Everything is declarative, so in my dotfiles [1] (check out the modules
folder), I specify my installed packages, dotfiles, mounted filesystems, dns server, systemd services, etc. NixOS even lets me patch software so that I can fix it before upstream does (see hardware/xps.nix
for an example; I applied a patch to Linux to stop display corruption).
To create a Whonix Live USB, for example, we’d declaratively define the guest ISOs, declaratively setup kvm, then declaratively setup the window manager and services to start/stop kvm. We could also declaratively state whether or not we want swap space enabeled.
For stateless, among other things, we could tell NixOS to use ramfs for the home directory.
I’m posting here to see if Whonix developers would be interested in trying this out.
Cheers!
[1] Discourse won’t allow links; the repo is https://github.com/aaronjanse/nixos