Whonix in live mode in Qubes OS! Amnesia and anti-forensics mode

Any dracut changes must be contributed to upstream, dracut-ng, which is not easy. (This is for the purpose of Maintainability)

Absent of contributions, that is pull requests to dracut-ng and Qubes, my prediction is, that nothing will happen for years.

I think the Qubes team is not interested in protecting against forensic analysis. They will complain about the lack of time and resources. Although the community has created 2 live modules, and modifying grub-live for Fedora (so that grub-live adds rootovl to the kernel and adds an item to the grub menu) is unlikely to be very difficult. Users will have to create these modules themselves.

But I hope that size=100% will be added to Whonix and Kicksecure, because it will make live mode fantastically effective and convenient

If you could send any patches to dracut-ng, this could be greatly simplified and represent big progress.

Really disposable (RAM based) qubes - Community Guides - Qubes OS Forum Another great tool for running a disposable Whonix in RAM. This is similar to running Whonix live on a persistent host

Qubes “grub-live” in dracut with live whonix-qubes

Excellent work.

Could you explain how you manage to make the two solution coexist ?

I’ve been trying and failing.

Thanks.

This fantastic guide will automatically create an amnesic live Whonix DVM in a live dom0. It’s the best solution for anti‑forensics in Qubes with Whonix

1 Like