Whonix-Host Operating System (OS) ISO

Actually, we don’t use this file anymore in our current Calamares install sequence (module users is skipped), thus I guess no need to change it.

Currently when booting 15.0.0.9.5 Whonix-Host iso (and all previous recent successful builds), user user has full sudo rights (although not in sudo group). This behavior is then reproduced in the Whonix-Host installed version. I gather this not the expected behavior as per current “restricted root” policy? What should be the default expected behavior regarding sudo/root/admin rights in Kicksecure/Whonix GW-WS?

Regarding last merged pull requests (branding), everything seems to work as intended (see screenshots below).

Still needs fixing/considering

  • Whonix VM disk images are still not set in ro mode
  • We should have auto-login enabled for user user (unpractical to log in when booting an ISO file)
  • We need to replace Kicksecure references by Whonix-Host everywhere (I am thinking /etc/motd, grub, anything else?).
  • Test on real hardware (both EFI/BIOS)…
  • Get rid of the default XFCE4 desktop image (replace with simple color?), add some Desktop icons (cosmetic changes, not urgent)

Some screenshots:

  1. Booting on Whonix-Host Live ISO 15.0.0.9.5, showing desktop, Install Whonix-Host icon, as well as a terminal displaying user user root access

  2. Clicking on Install Whonix-Host icon launches Calamares. It needs sudo rights to proceed.

  3. Whonix-Host Installer (Calamares) Welcome page

  4. Whonix-Host Installer (Calamares), installing in progress (full-disk encryption)

2 Likes