Whonix-Host Operating System (OS) ISO

3 posts were merged into an existing topic: Whonix’s Host naming

Having a hybrid ISO for USB / DVD that supports BIOS legacy boot, EFI boot and SecureBoot is a difficult task.

Hence I am now investigating porting Kicksecure / Whonix’s build script (derivative-maker) to Debian’s live-build which can do all of the above.

1 Like

live-boot create “normal”, non-live fully persistent raw disk images?

1 Like

A post was split to a new topic: port Whonix to Fedora as base operating system

For our dracut based Live ISO there was this dracut usability bug which made the ISO unbootable.

This long standing development blocker might now be fixed:

1 Like

documentation on grub-mkrescue:

Major progress has been made. A script that can convert a raw image to an ISO image has been developed.



Huge news :tada: :clap: :tada:

The problem is now that Secure Boot is unsupported. This is because the ISO doesn’t integrate with shim.

And installing shim inside a Debian bootable ISO is undocumented and difficult for me.

grub feature request written just now:
grub-rescue ISO Secure Boot / shim support

That feature request could take a long time if it ever materializes.

It will be possible without that feature request being implemented too but then additional options have to be passed to grub-rescue (or mkisofs) or other tools have to be used (manual use of grub-mkimage). The code / options to do this can probably be extracted from Debian’s live-build but that’s something that I wanted to avoid because that is very difficult for me.

Debian Live:

cat /etc/fstab
overlay / overlay rw 0 0
tmpfs /tmp tmpfs nosuid,nodev 0 0

purism calamares configuration: