[HOME] [DOWNLOAD] [DOCS] [NEWS] [SUPPORT] [TIPS] [ISSUES] [DONATE]

Why not use build-steps.d/1300_create-raw-image in qubes-whonix build process?

Why not use https://github.com/Whonix/Whonix/blob/master/build-steps.d/1300_create-raw-image during the qubes-whonix build process?

That is how Whonix raw images are usually build.

Anything wrong with it?

Because Qubes Builder somehow expects using the Qubes base Debian base image and doesn’t like a “I do all the base image creation, mounting and whatever else until competition” for you way?

I haven’t looked at all the details in code, but the QubesBuilder is taking care of a number of things to make paravirtualized TemplateVMs that are seamless with Qubes OS.

  • Qubes APT Repos
  • Qubes Tools (qrexec, etc)
  • Multiple Disk Partitionings
  • RPM Installer Packaging
  • etc

I believe the QubesBuilder now has a Plugin API architecture, where the Qubes Debian template build configuration comes from a Debian Plugin and then a Whonix Plugin build configuration extends on top of that.

So the current method is probably getting its own Debian image, configuring it for Qubes, then later the Whonix install-to-root stuff is done on it.

I see. Makes sense.

[quote=“Patrick, post:1, topic:1047”]Why not use https://github.com/Whonix/Whonix/blob/master/build-steps.d/1300_create-raw-image during the qubes-whonix build process?

That is how Whonix raw images are usually build.

Anything wrong with it?

Because Qubes Builder somehow expects using the Qubes base Debian base image and doesn’t like a “I do all the base image creation, mounting and whatever else until competition” for you way?[/quote]

That’s funny. I was just thinking the same thing yesterday when I was having package dependency issues for Whonix 11. Since I solved the issue by installing Whonix first, I did not need to proceed any further.

Since I figured you may be interested in the complete build process, I have provided most of the scripts that are called in order of being called to create Whonix template. I authored all of them except prepare_image and qubeize_image:

Shared Libraries:
https://github.com/nrgaway/qubes-builder-debian/blob/master/template_debian/vars.sh
https://github.com/nrgaway/qubes-builder-debian/blob/master/template_debian/distribution.sh
https://github.com/nrgaway/qubes-linux-template-builder/blob/master/functions.sh

Prepare Image:
https://github.com/nrgaway/qubes-linux-template-builder/blob/master/prepare_image

Manage snapshots
https://github.com/nrgaway/qubes-builder-debian/blob/master/template_debian/00_prepare.sh

Install Debootstrap
https://github.com/nrgaway/qubes-builder-debian/blob/master/template_debian/01_install_core.sh

Install Extra Debian Packages
https://github.com/nrgaway/qubes-builder-debian/blob/master/template_debian/02_install_groups_jessie.sh

Install Whonix. 02_install_groups_pre.sh is what I used for Whonix 11, 02_install_groups_wheezy.sh for Whonix 9.6 and 10
https://github.com/nrgaway/qubes-template-whonix/blob/Whonix11/whonix-gateway/02_install_groups_pre.sh
https://github.com/nrgaway/qubes-template-whonix/blob/master/whonix-gateway/02_install_groups_wheezy.sh

Install any specific package that are for distribution (Since certain distros may need special handling… These routines can build wheezy, jessie, whonix, trusty, utopic and vivid at the moment)
https://github.com/nrgaway/qubes-builder-debian/blob/master/template_debian/02_install_groups_jessie.sh

Create a copy of prepared image to add qubes components and settings. Kind of a snapshot so the above does not need to be re-run if only updating Qubes packages.
https://github.com/nrgaway/qubes-linux-template-builder/blob/master/qubeize_image

Actual script to install packages, modify settings
https://github.com/nrgaway/qubes-builder-debian/blob/master/template_debian/04_install_qubes.sh

Whonix script; restores apt-get, etc back to Whonix state
https://github.com/nrgaway/qubes-template-whonix/blob/master/whonix-gateway/04_install_qubes_post.sh

Cleanup steps
https://github.com/nrgaway/qubes-builder-debian/blob/master/template_debian/09_cleanup.sh
https://github.com/nrgaway/qubes-template-whonix/blob/master/whonix-gateway/09_cleanup_post.sh

[quote=“MemoryLost, post:1, topic:1046”]in fact…
IMHO we should disclose a good old unmaintained version through regular community / public template system;
and have a nice secured anonymous hardened etc etc version accessible to developers .
guess my point her?.. ;)[/quote]
Split here:
https://www.whonix.org/forum/index.php/topic,1379.0.html

Brought up a similar suggestion.

rely on existing tool for Debian base image creation
https://github.com/QubesOS/qubes-issues/issues/1055
[Imprint] [Privacy Policy] [Cookie Policy] [Terms of Use] [E-Sign Consent] [DMCA] [Investors] [Priority Support] [Professional Support]