I have completed both qubes-whonix 9.6.7 and 10.0.2
Currently both versions are identical except for the version numbers and changelog.
Please review and provide signed tags of 9.6.7 and 10.0.2. Once this is complete I will attempt another run of test builds using your repo. They are located in Whonix9 and Whonix10 branch in my repo.
I have manually tested upgrading from 9.6.2 to 9.6.7 using the local repo utility that is now included within qubes-whonix package (although it does not get included in build) but would be nice to have these packages included in either the testing or developer repos so we can test the upgrade via apt-get. The upgrade via apt-get will not be successful until the qubes changes I made are also available within the qubes repo as well.
I have also then upgraded to Whonix 10. Steps I took are (in the template vm):
- Cloned original templatevm as a backup; just in case of failure
- Make sure Whonix repo is disabled using old whonix_repository <-- Important
- Manually enabled qubes-r3 repo in /etc/apt/sources.list.d/qubes-r3.list (repos are disabled by default)
- apt-get update
- Simulate an apt-get dist-upgrade ... used qubes-whonix 10.0.2 and unreleased qubes packages
- Powered off template
- Powered up template (to allow new qubes-whonix code to remove chattr +i)
- Enable Whonix testers repo
- apt-get update && apt-get dist-upgrade
- poweroff templatevm
- poweroff whonix-gateway proxyvm
- poweron whonix-gateway proxyvm to test that upgrade was successful
Prompted to update the following file. Answered Y
Will end with these two messages which is fine, since we are in a template...
Failed to read /qubes-netvm-gateway Failed to read /qubes-netvm-gateway
whonixcheck report build as 9.6 still, but I definitely have 10.0 packages installed after update.
As far as I am concerned, it looks like Whonix 10 is a go... Great job!
Following is the changelog since 9.6.2 update:
qubes-whonix (0:9.6.7-1 / 0:10.0.2-1) wheezy; urgency=medium [ Jason Mehring ] * Update files to search and replace IP addresses Fix syntax typo for whonix workstation that prevented search and replace * start whonixcheck on startup for workstation * Use new whonix-setup-wizard directory for *.done files Use 50_whonixcheck_user instead of 30_whonixcheck_default Enable new control-port-filter-python.service * Remove unneeded bind directories due to new localtion of whonix status files * - Remove references to old whonix status files; use new references - Start whonixcheck last - Add missing whonixcheck for workstation - Don't prompt to install repository in AppVM (Gateway or Workstation) - Prompt to install repository in templatevm * Add missing whonixcheck.conf file * Add systemd unit file for control-port-filter-python.service qubes-whonix (0:10.0.1-1) wheezy; urgency=medium * version 10.0.1 qubes-whonix (0:9.6.6-1) wheezy; urgency=medium [ Patrick Schleizer ] * added genmkfile to Build-Depends * updated makefile generic to version 1.5 * updated readme * updated makefile generic to version 1.4 [ Jason Mehring ] * Commented out watchdog as it was resetting tor every minute * More specific reference to be able to inject firewall code was needed for Whonix 10 qubes-whonix (0:9.6.5-1) wheezy; urgency=medium [ Jason Mehring ] * Remove chattr +i and replace with a protected files routine * Notes with issues not yet resolved due to changes in Qubes or qubes- whonix * Added wip whonixcheck systemd unit file * Added a tor systemd unit files along with a wip unit file to implement hardening * Added ability to upgrade and dist-upgrade from local test repo * Streamlined enable/disable services; remove immutable bits * Make sure qubes-network is started before qubes-firewall * Keep whonixcheck and sdwdate disabled and manually start them to prevent false positive errors that tor is not started * Send a 0 when enabling a service qubes-whonix (0:9.6.4-1) wheezy; urgency=medium [ Jason Mehring ] * Bump version to 9.6.4 * Fix a bug that gave error on upgrade when restarting service * Use debhelper package install to install files to prevent tests from being part of package * Fixed an issue with restarting services and added whonix-setup-wizard cache dir * Added more options to make sure unwanted dirs like rpm or deb do not make it into Debian package * Removed stale references from notes * Added a update test script that will install a local repo and perform an update of package The test suite is excluded from built package * Updated changelog for 9.6.3 qubes-whonix (0:9.6.3-1) wheezy; urgency=medium [ Jason Mehring ] * Added /var/cache/whonix-setup-wizard to list of dirs to bind on startup * Updated Makefile.builder to work with new qubes-builder api * Bumped version to 9.6.3