Page MenuHomePhorge

Qubes-Whonix build process: install Whonix from Whonix binary APT repository
Closed, ResolvedPublic



  • simpler qubes-template-whonix code
  • faster builds, packages no longer need to be build during Qubes-Whonix template build
  • build dependencies will no longer be installed inside the template
    • therefore smaller template sizes
      • therefore less space issues on Qubes installer DVD
  • solves T416 for free
  • simpler than trying to have Qubes builder create Whonix packages (T438 ?)


  • building Whonix templates with Whonix packages build from source code gets harder




Event Timeline

Qubes-Whonix build process: install Whonix from Whonix binary APT repository

(I will clean up all the comments and todo soon.)

Please have a glimpse if the current goes into the direction you imagined. @marmarek

Patrick changed the task status from Open to Review.Apr 21 2016, 4:37 AM

It's done.

As for building Qubes-Whonix templates with Whonix packages build from source...

  • It would help if Qubes builder worked on top of Debian. (#1907)
  • Then one could create a local repository of all Whonix packages (using Whonix build script).
  • By setting whonix_signing_key_fingerprint to none would results into not adding any signing key.
  • Alternatively, a signing key of ones choice could be added.
  • As for getting the local packages into the repository, that is not that simple.
    • Either one would have to upload them to some remote repository and set a custom whonix_repository_uri.
    • Or run a local web server and something like whonix_repository_apt_line="[trusted=yes] deb jessie main".
    • whonix_repository_apt_line="[trusted=yes] deb file:/... jessie main" and then somehow get the local repository mounted inside the chroot. Perhaps by hacking
Patrick claimed this task.