Whonix on Mac M1 (ARM) - User Support (still unsupported at time of writing)

[Patrick]

@Miraculix

Anyone know how to remove the monero-package from the package system without altering the dependencies? Then i can build from source for ARM64.

Are you sure that’s even an issue?

It’s already considered in the source code (dummy-dependency-hardened-monero-gui). Untested but has a good chance that would work.

[Miraculix]

@Patrick

Are you sure that’s even an issue?

Well when i try to purge out the package it will also remove non-qubes-whonix-workstation-xfce and non-qubes-whonix-workstation-xfce.

Example:

@Patrick

It’s already considered in the source code (dummy-dependency-hardened-monero-gui). Untested but has a good chance that would work.

Not sure what you ment with this? More info needed to test your idea.

[Patrick]

@Miraculix

Well when i try to purge out the package it will also remove non-qubes-whonix-workstation-xfce and non-qubes-whonix-workstation-xfce.

Invalid test. Please don’t start with the presumption there will be an issue without an actual build issue.

That wasn’t an issue for previous builds by others in this forum thread and probably won’t be one now. This isn’t the first port of Whonix to another architecture:

Existing Ports of and Porting Whonix to other Architectures

@Miraculix

Well when i try to purge out the package it will also remove non-qubes-whonix-workstation-xfce and non-qubes-whonix-workstation-xfce.

This is unrelated to development. More of meta packages usability issue / user support:

Debian Packages

In short: install package dummy-dependency-hardened-monero-gui first.

@Patrick

(dummy-dependency-hardened-monero-gui)

For developers to look into it, search the source code for:

dummy-dependency-hardened-monero-gui

• Search the Source Code
  • But download Whonix instead of Kicksecure source code.
  • Search

    • Kicksecure

  • Replace:

  • Whonix

  • Search

    • kicksecure

  • Replace:

  • kicksecure

[Sholenka]

UTM can make use of the Apple Virtualization Framework so this would allow running the official release of the Tor Browser with relatively small overhead on Whonix on M1 Macs.

Running Intel Binaries in Linux VMs with Rosetta | Apple Developer Documentation

[Patrick]

@Sholenka

UTM can make use of the Apple Virtualization Framework so this would allow running the official release of the Tor Browser with relatively small overhead on Whonix on M1 Macs.

Running Intel Binaries in Linux VMs with Rosetta | Apple Developer Documentation

That’s good to know. However hopefully not needed / this being a better solution:
ARM64 Tor Browser

@Sholenka

Running Intel Binaries in Linux VMs with Rosetta | Apple Developer Documentation

Needless to say that this might be very useful for all sorts of other software unavailable for ARM64.

[Patrick]

No Internet Connection inside Whonix-Workstation KVM with NordVPN with Kill-Switch on Host

Hello, after successfully using Whonix on my M1 Mac via UTM without a VPN on my Host, I tried connecting my host to a VPN (I’m using NordVPN over OpenVPN), which is causing some unexpected problems: With a VPN on my host, the Whonix Gateway’s internet seems to work without any issues (I did curl requests from the console and they all worked) Even though the Gateway’s connection works, the Whonix Workstation cannot establish any internet connection while using a VPN on the host, even after sev…

[Goldeneye128]

Been trying to rebuild this project and get some errors now on the 16.0.4.2-stable build.

https://notes.anonpaste.org/?8b4a13ab328ee51b#D5n9PYMUGB4TqUd4pDhKDuuFZHW3JTHTgdsa17pZMkGF

Here is the output of the build log.
Not sure what makes the build to fail.

[Patrick]

Outdated git tag.

[overtonelappe]

Can I download ready .utm whonix files for M1 MacBook, without building?

[Patrick]

No. If that changes, these will be easily found on the website.

[Goldeneye128]

Thank you, seem i have missed a bit while i was away. Tried to build the project under build number 16.0.5.3 as the new build documentation require. But got into some problems. I thought Tor browser would work now.

https://notes.anonpaste.org/?b21707e767fd3449#HyuKj3FYJCzQRURiC1k7WUSPpMvyWJDP26MjnaR4eAT3

This is the build log trying to build it without using --tb open
But it did not work and got some errors. I did another build with --tb open and when i tried to start up Tor browser it was not installed. While trying to install it through the finished build it fails to download. Even when i try on CLI to use the command update-torbrowser it will fail to download.

So do we still need to manually download and install torbrowser? or have i done something wrong?

Thank you for your time, been away from this for a while so need to kinda get into this again.

[Patrick]

ARM64 Tor Browser was signed with a new key.

gpg: keybox ‘/home/user/.cache/tb/gpgtmpdir/pubring.kbx’ created
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created
gpg: key 6AF15D1E45FDCEC9: public key "Heikki Lindholm " imported
gpg: Total number processed: 1
gpg: imported: 1
gpg_bash_lib_output_gpg_verify_output:
gpg: Signature made Fri 10 Jun 2022 10:41:23 AM UTC
gpg: using EDDSA key 17646366EFF82DB13E5CCDB23A557859C963442B
gpg: Can’t check signature: No public key

fingerprint:

17646366EFF82DB13E5CCDB23A557859C963442B

That I don’t have that OpenPGP / gpg public key and neither can find it online.

Related:
ARM64 Tor Browser Maintainer

It must be possible to perform this manually before it can be automated in tb-updater.

[Patrick]

ARM64 Tor Browser Maintainer

https://forums.whonix.org/t/whonix-on-mac-m1-arm/11310/270 https://forums.whonix.org/t/whonix-on-mac-m1-arm/11310/271 E-mail sent just now. new gpg key fingerprint? Hello Heikki, tor-browser-linux-arm64-11.0.14_en-US.tar.xz.asc is signed with gpg --verify tor-browser-linux-arm64-11.0.14_en-US.tar.xz.asc gpg: assuming signed data in ‘tor-browser-linux-arm64-11.0.14_en-US.tar.xz’ gpg: Signature made Fri 10 Jun 2022 10:41:23 AM UTC gpg: using EDDSA key 17646366EFF82DB13E5C…

[Goldeneye128]

I see, well update us when and if there is any changes to this.
Guess for now i need to do manual download for torbrowser like before.

[Patrick]

• ARM64 Tor Browser Maintainer - #8 by Patrick
• ARM64 Tor Browser Maintainer - #9 by Patrick

[Patrick]

• Fixed tb-updater (with the new signing key) is now available in all Whonix repositories. Available after updating.
• Additionally, optionally git tag 16.0.5.4-developers-only has been created just now, which in theory should work but in practice is untested.

[Goldeneye128]

Tried to build both the gateway and the workstation with the git tag 16.0.5.4-developers-only and the build failed right away when i tried to build it.

https://notes.anonpaste.org/?6eeb454a922f0026#FN1p6ZRp89e3zNr7FBhyRWvjFuPZrg1oPn3LAvSs9pCM

[Goldeneye128]

I saw that a new update came out with the git tag 16.0.5.5-developers-only and tried to build from that. But that failed as well. So i cannot build the project anymore on apple silicon based macs now. At least not on the newer tags.

https://notes.anonpaste.org/?4e872afd54ff5a3c#4MyQ3ZxChCQTHWKyy5aUxn7JoamwKQu1MDQBQveJ8wYr

[Patrick]

Yeah. That’s currently broken due to refactoring. This is the issue:

Derivative-maker build script running as user versus root versus sudo design

[Patrick]

Network configuration for UTM on M1

I’m asking here since we don’t have a separate UTM forum here. I was able to compile Whonix for UTM, and it worked flawlessly. I’m trying to figure out how to make the Workstation use the network of the Gateway, as it’s supposed to be. What configuration is recommended to do in the network tab in UTM? Thank you.