Page MenuHomePhabricator

Hidden onion services GUI in sys-whonix
Open, NormalPublic

Description

The main goal of this GUI would be to permit remote assistance for trusted third party services directly into dom0.

That GUI should permit:

  • Visibility of currently active onion services
  • Creation/Deletion/Recreation of onion services
  • For each service, permit port forward definition
  • For each service, permit services to be hidden and authenticated.
  • Ask user to restart tor after having committing changes.
  • v3 should be supported.

Combined with proper salt recipes at QubesOS installation in dom0/additional AdminVMs to automate installation and configuration of required software and services startup,

For this dom0 remote assistance service, the user should be able to turn remote assistance on, and be prompted with:

  • onion service name
  • authentication token

So the user can share those information through encrypted communication channel of his choice.

Prior discussion happened here

Details

Impact
Normal

Event Timeline

insurgo created this task.Mar 23 2019, 6:46 PM

@Patrick previously said:
Perhaps make remote dom0 support as simple as / similar to OninoShare?

Two choices:

  • Qubes start menu -> sys-whonix -> persistent remote support (would always start, also after reboot, until "Stop" pressed
  • Qubes start menu -> sys-whonix -> one time remote support (would start only once)

Two buttons:

  • Start
  • Stop

After start, a new field opens with information to be copied to the one who should gain remote access.

  • It should contain the commands required for accessing an authenticated onion service using HiddenServiceVersion 3 (the one just started) to be run on remote onion service.
  • The command supposed to be pasted into sys-whonix. It should also contain the SSH / VNC line supposed to be pasted in anon-whonix to access the remote dom0.
insurgo added a comment.EditedMar 23 2019, 6:51 PM

Here, Marmarek saying that AdminVMs will soon enough have everything needed to manage Templates and created VMs of their own.

Patrick changed Impact from Needs Triage to Normal.
Patrick triaged this task as Normal priority.

@Patrick I'm filling grant application related to https://github.com/osresearch/heads/issues/540#issuecomment-474921281.
How would you estimate development costs for this feature?

This is very interesting.

Cost estimation in software development is very difficult. By the time you have the estimate, most of the work required to do is already done.

insurgo added a comment.EditedMar 31 2019, 3:15 AM
In T896#18062, @Patrick wrote:

This is very interesting.
Cost estimation in software development is very difficult. By the time you have the estimate, most of the work required to do is already done.

@Patrick Lol! Check here. The estimate can be rough: https://mensuel.framapad.org/p/AQqOdrEBWr
Section 4 point 3. Thanks!

Sorry, I don't have a better answer.