Whonix VirtualBox 14.0.0.6.6 - Testers Wanted!

Patrick · February 6, 2018, 11:58am

Originally published at: https://www.whonix.org/blog/whonix-14-0-0-6-6-testers-wanted

RAM was increased from 768 MB RAM to 1024 MB RAM for Whonix-Workstation. For now it is temporary, but it may also be permanently depending on near time developments. Discussion ongoing. Please contribute if you can share ideas or code on how to reduce RAM usage.

https://forums.whonix.org/t/whonix-14-increase-ram-to-1024-mb

Due to the mentioned RAM issue, Whonix-Workstation might freeze. In that case, increase VM RAM.

Download links can be found here:
https://www.whonix.org/wiki/VirtualBox_Testers_Only_Version

Testers Wanted!

Release Notes:
https://www.whonix.org/wiki/Whonix_Release_Notes#Whonix_14

HulaHoop · February 6, 2018, 11:48pm

Everything is good and connection works flawlessly. anon-cnnection wizard looks sexy. Thanks @iry!

whonixcheck on GW complains that QEMU is unsupported although its KVM. So users might be needlessly alarmed.

ERROR: Virtualizer qemu unsupported by Whonix developers! Whonixcheck aborted! (qubes_detected: false)
Using Virtualizer qemu together with Whonix is recommended against, because it is rarely tested. [1] [2] [3]
It could be made possible, but would require more Whonix contributors.
It may already work, but is highly experimental.
This might endanger your anonymity. Do not proceed unless you know what you are doing.
If you wish to ignore this warning and to continue whonixcheck anyway, you can set
WHONIXCHECK_NO_EXIT_ON_UNSUPPORTED_VIRTUALIZER="1"
in /etc/whonix.d/30_whonixcheck_default.conf.
Recommended action:

Shut down.

Read Whonix documentation [4].

Use Whonix with a supported virtualizer or Physical Isolation [5].

Patrick · February 7, 2018, 12:02am

Should be easily fixable.

Can you confirm the output of

echo "$(systemd-detect-virt)"

is

qemu

?

Can you confirm the output of

echo "'$(systemd-detect-virt)'"

is

'qemu'

?

Patrick · February 7, 2018, 12:04am

Please try if this fix works for you. (If so, my above question is void.)

(Full file available from master https://github.com/Whonix/whonixcheck/blob/master/usr/lib/whonixcheck/check_virtualizer.bsh)

If it works, it will be included in next Whonix testers-only version.

HulaHoop · February 7, 2018, 12:26am

Shared folders seems to be broken. While a folder named after the mount point is visible, nothing from the host shows up in it. It could be that I’m not familiar with a new path that it was changed to when the feature was revamped by Jason

HulaHoop · February 7, 2018, 12:29am

Yep

HulaHoop · February 7, 2018, 8:16pm

When talking to Debian servers apt fetches from onions and clearnet. Seems redundant. Is this the correct behavior or did you forget to remove clearnet repo links?

Patrick · February 7, 2018, 9:37pm

Yes, intended. We’re making a wide scale testing of apt-get onion with Whonix 14.

If they’re not flaky, Whonix 15 will use onions and drop clearnet whenever possible.

HulaHoop · February 8, 2018, 4:49am

I see but you won’t be able to test it that way since every package I installed always got pulled from the clearnet mirror exclusively.

From my experience using Onionized apt only for almost a year now, the Debian servers have never disappointed.

entr0py · February 8, 2018, 6:40pm

I can second that. But don’t know if those servers have the capacity to handle an influx of all Whonix users.

Patrick · February 8, 2018, 6:58pm

What if you swap onion and clearnet lines in sources.list? Does it prefer onions over clearnet then?

HulaHoop · February 8, 2018, 7:21pm

Yes it does!

Patrick · February 8, 2018, 7:27pm

Right, so we ought to swap them.

Patrick · February 9, 2018, 12:53pm

TechieMike · February 10, 2018, 3:09am

Thanks for the update on the GW after running sudo apt-update && sudo apt-get dist-upgrade - and rebooting I get a message No command arguments supplied! Usage: kdesudo [-u ] KdeSudo will now exit…

Just ran a new instance of the WS same message

I have only run the update - using the testers repo and changed passwords?

Patrick · February 11, 2018, 9:13pm

It’s about auto starting anon-connection-wizard. Or not. So in worst case a usability bug. No security involved.

Not clear how that could happen. We checked all the related code and added some safeguards against this which will end up in updates and the next release.

Patrick · February 14, 2018, 10:31am

Multiple users are affected by this.

Patrick · February 18, 2018, 12:44pm

HulaHoop:

Shared folders seems to be broken. While a folder named after the mount point is visible, nothing from the host shows up in it. It could be that I’m not familiar with a new path that it was changed to when the feature was revamped by Jason

No changes where done.

Is package shared-folder-help installed?

/lib/systemd/system/mnt-shared-vbox.service was removed since no longer
needed. Unrelated to KVM.

/lib/systemd/system/mnt-shared-kvm.service is untouched.

github.com

Whonix/shared-folder-help/blob/master/lib/systemd/system/mnt-shared-kvm.service

## This file is a part of Whonix.
## Copyright (C) 2012-2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See file COPYING for copying conditons.

[Unit]
Description=Mounts KVM shared folder during start
Documentation=https://github.com/Whonix/shared-folder-help
ConditionPathExists=/mnt/shared
ConditionVirtualization=|qemu
ConditionVirtualization=|kvm

[Service]
Type=oneshot
ExecStart=/bin/bash -c '/bin/mount -t 9p -o trans=virtio shared /mnt/shared -oversion=9p2000.L || true'
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target

It’s all there is.

HulaHoop · February 18, 2018, 2:48pm

I figured out why: start condition failed - conditionvirtualization=kvm as not met

Patrick · February 18, 2018, 3:51pm

Could you please fix this so this can find its way into the next (and perhaps final before release) build?