Page MenuHomePhabricator
Feed Advanced Search

Nov 17 2015

Patrick added a comment to T107: Tor Messenger Support.

https://www.whonix.org/wiki/Chat#Tor_Messenger

Nov 17 2015, 4:19 PM · Whonix, Whonix 10

Aug 16 2015

Patrick closed T288: Qubes Whonix 10 - Testing Instructions and Issues as Resolved.
Aug 16 2015, 4:13 AM · Whonix 10, Whonix, qubes-whonix 10

Jun 30 2015

Patrick added a comment to T194: whonixcheck security workaround for "apt-get update" zero exit code discrepancy for network, gpg failures.

/usr/lib/apt-get-wrapper:

Jun 30 2015, 1:47 AM · Whonix, security, whonixcheck, Whonix 10

Jun 26 2015

Patrick added a comment to T322: obfsproxy not working on Qubes R3.

For the record, slightly off-topic.
Qubes Q3 RC1, Whonix 10.

Jun 26 2015, 7:48 PM · Whonix 12, Qubes, Whonix

Jun 23 2015

Patrick added a comment to T212: ask about Alpine Linux package manager security.

Too long ago... Trying to find this again...

Jun 23 2015, 4:59 PM · sponsor-B, security, Whonix 10, Whonix
ncopa added a comment to T212: ask about Alpine Linux package manager security.

care to give any details about indefinite freeze and downgrade attacks that gentoo has?

Jun 23 2015, 2:05 PM · sponsor-B, security, Whonix 10, Whonix

Jun 15 2015

Patrick added a project to T27: create grub-screen-resolution package: grub-screen-resolution.
Jun 15 2015, 2:51 AM · grub-screen-resolution, Whonix 10, Whonix, easy, Debian version 8 codename Jessie
Patrick added a project to T26: create grub-output-verbose package: grub-output-verbose.
Jun 15 2015, 2:51 AM · grub-output-verbose, Debian version 8 codename Jessie, easy, Whonix, Whonix 10
Patrick added a comment to T27: create grub-screen-resolution package.

Fixed "vga=ext is deprecated. Use set gfxpayload=text before linux command instead". Upgraded for grub2 / Debian jessie.:
https://github.com/Whonix/grub-screen-resolution/commit/c3b653a27c95f2b513953c63b714962746ae09a3

Jun 15 2015, 2:49 AM · grub-screen-resolution, Whonix 10, Whonix, easy, Debian version 8 codename Jessie

Jun 6 2015

nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. Error when attempting to update in Whonix 10
Jun 6 2015, 6:47 PM · Whonix 10, Whonix, qubes-whonix 10

Jun 5 2015

oneoffew added a comment to T322: obfsproxy not working on Qubes R3.

For the record, flushing all rules and defaulting to ACCEPT makes obfsproxy work.

Jun 5 2015, 1:13 AM · Whonix 12, Qubes, Whonix

Jun 4 2015

oneoffew added a comment to T322: obfsproxy not working on Qubes R3.

This seems to have gotten lost in the backlog.

Jun 4 2015, 9:52 PM · Whonix 12, Qubes, Whonix

May 30 2015

Patrick assigned T322: obfsproxy not working on Qubes R3 to nrgaway.
May 30 2015, 4:42 PM · Whonix 12, Qubes, Whonix
Patrick added a project to T322: obfsproxy not working on Qubes R3: qubes-whonix 11.
May 30 2015, 4:41 PM · Whonix 12, Qubes, Whonix

May 22 2015

nrgaway added a comment to T322: obfsproxy not working on Qubes R3.

Thanks for all the info. I will test it out over the weekend!

May 22 2015, 3:52 PM · Whonix 12, Qubes, Whonix
Patrick added a comment to T322: obfsproxy not working on Qubes R3.
  • works for me in Whonix 10
  • Documentation: https://www.whonix.org/wiki/Bridges
  • obfsproxy: https://www.whonix.org/wiki/Bridges#Using_obfuscated.2C_.28private.29_and.2For_ordinary_bridges
  • no different firewall rules required for obfs3
  • no startup scripts required
  • no other fancy stuff required
  • user configuration is simply added to /etc/tor/torrc
  • make sure the obfsproxy package is installed
  • apparmor was an issue in past, try obfsproxy yourself and check /var/log/kern.log
  • for now, just try it out yourself. Does it work for you? If it works for you, if you can confirm from /var/log/tor/log and arm, that Tor is in fact connecting only to the obfs3 bridges you configured, then it's more likely a user configuration error than Whonix bug.
May 22 2015, 3:33 PM · Whonix 12, Qubes, Whonix
Patrick triaged T322: obfsproxy not working on Qubes R3 as High priority.
May 22 2015, 3:21 PM · Whonix 12, Qubes, Whonix
nrgaway added a comment to T322: obfsproxy not working on Qubes R3.

@Patrick I was wondering if this is working in regular Whonix 10? If so can you give me some clues on how to troubleshoot it (startup scripts, configuration locations, expected firewall rules) since I have never used it before

May 22 2015, 10:31 AM · Whonix 12, Qubes, Whonix
nrgaway created T322: obfsproxy not working on Qubes R3.
May 22 2015, 10:29 AM · Whonix 12, Qubes, Whonix

May 16 2015

nrgaway closed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready as Resolved.
May 16 2015, 3:00 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway closed T278: building Whonix11 for qubes-whonix: Package installation errors, a subtask of T273: control-port-filter-python.service exits pre-maturely, as Resolved.
May 16 2015, 6:47 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix

May 15 2015

Patrick closed T273: control-port-filter-python.service exits pre-maturely as Resolved.

This has been fixed in T274. control-port-filter-python has a working systemd unit file now. Closing. Please re-open if you still see an issue here.

May 15 2015, 1:57 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix

May 4 2015

Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.
In T273#4175, @Patrick wrote:

What's next here?

@nrgaway Can you please post all your existing systemd units for packages developed under the Whonix umbrella somewhere? Such as the one in the comment of https://phabricator.whonix.org/T273#3852 ? + Add the license header? That would be important. It's currently a blocker before I can continue with most Whonix 11 development tasks. I would like to integrate those into packages and make those systemd-only. I guess I am getting to that before you?

Just finished making whonix-initializer systemd-only. Once the systemd unit is ready, the required remaining changes in debian/control and debian/rules are minimal and simple.

May 4 2015, 12:34 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix

May 3 2015

Patrick triaged T275: Qubes Whonix 9.6.9 and 10.0.5 is ready as Normal priority.
May 3 2015, 6:00 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. HOW TO RE-INSTALL qubes-whonix
May 3 2015, 4:22 AM · Whonix 10, Whonix, qubes-whonix 10

May 2 2015

Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Can workstation templates also be upgraded that way? That's not clear from instructions.

May 2 2015, 3:59 PM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4229, @Patrick wrote:

Your instructions sound good. I recommend to hit the edit button for instruction posts and to copy it over to the wiki https://www.whonix.org/wiki/Qubes/Upgrade_from_9_to_10 or so. Unfortunately, phabricator uses markdown and mediawiki uses mediawiki syntax.

May 2 2015, 5:15 AM · Whonix 10, Whonix, qubes-whonix 10

May 1 2015

Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Your instructions sound good. I recommend to hit the edit button for instruction posts and to copy it over to the wiki https://www.whonix.org/wiki/Qubes/Upgrade_from_9_to_10 or so. Unfortunately, phabricator uses markdown and mediawiki uses mediawiki syntax.

May 1 2015, 2:21 PM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. What to do if you ran a apt-get dist-upgrade not using the upgrade method above
May 1 2015, 6:50 AM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Link: "stable vs wheezy repository" bug T233

May 1 2015, 3:28 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4212, @Patrick wrote:

Yes. Done, migrated (copied) qubes-whonix 10.0.5-1 from developers to testers repository.

Want to post a blog post? Otherwise I guess very few will notice these instructions. Got a blog account already?

May 1 2015, 3:18 AM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Yes. Done, migrated (copied) qubes-whonix 10.0.5-1 from developers to testers repository.

May 1 2015, 3:00 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4179, @Patrick wrote:

I am not sure it's wise telling testers to enable the developers repository. That could break badly at some point. The developers repository is a playground for me to upload and install from packages where I am not 100% certain they are not going to break the package manager.

May 1 2015, 1:32 AM · Whonix 10, Whonix, qubes-whonix 10

Apr 30 2015

Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

Related, see also:
https://www.whonix.org/forum/index.php/topic,560.msg7989.html#msg7989

Apr 30 2015, 5:28 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

I am not sure it's wise telling testers to enable the developers repository. That could break badly at some point. The developers repository is a playground for me to upload and install from packages where I am not 100% certain they are not going to break the package manager.

Apr 30 2015, 4:15 PM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

What's next here?

Apr 30 2015, 3:19 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
nrgaway renamed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready from Qubes Whonix 9.6.8 and 10.0.5 is ready to Qubes Whonix 9.6.9 and 10.0.5 is ready.
Apr 30 2015, 4:53 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. Testers Update instructions
Apr 30 2015, 4:52 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway created T288: Qubes Whonix 10 - Testing Instructions and Issues.
Apr 30 2015, 4:35 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Thanks, tests are successful for me.

Apr 30 2015, 4:27 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Signed, pushed 10.0.5-1 and added to developers repository.

Apr 30 2015, 1:59 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes

Apr 29 2015

nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

@Patrick, I created a new version that hopefully solves the control-port-filter-python not re-enabling properly... I had a typo in the maintainers postinst configuration file.

Apr 29 2015, 2:18 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway renamed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready from Qubes Whonix 9.6.8 and 10.0.4 is ready to Qubes Whonix 9.6.8 and 10.0.5 is ready.
Apr 29 2015, 2:08 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4134, @nrgaway wrote:

XXX: @Patrick, do your scripts ignore backed up files in directories such as /etc/whonix_firewall.d....

Apr 29 2015, 2:02 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Maybe you want to give an upgrade a try. The required qubes package is now also in the ITL test repo so you should be able to attempt an update. DO NOT FORGET TO BACKUP (CLONE) your existing whonix proxy :)

Apr 29 2015, 12:02 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4132, @Patrick wrote:

Alright.

How would users upgrade the qubes-whonix package then? Does the ITL repo also contain Debian packages?

Apr 29 2015, 6:12 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

How would users upgrade the qubes-whonix package then? Does the ITL repo also contain Debian packages?

Apr 29 2015, 4:17 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4130, @Patrick wrote:
In T275#4128, @nrgaway wrote:

hehe, I was wondering why it was not in repo. Yes, please add it as I want to do some upgrade testing.

Done, added to developers repository.

Apr 29 2015, 1:07 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4128, @nrgaway wrote:

hehe, I was wondering why it was not in repo. Yes, please add it as I want to do some upgrade testing.

Apr 29 2015, 12:41 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4097, @Patrick wrote:

I was wondering about this also and going to post about that. It slows down the development/debugging process if you have to wait for me to tag releases just so you can do a developers-only test build. We're living in different time zones and perhaps I won't have time for a few days at some point.

qubes-whonix isn't build by git cloning https://github.com/Whonix/Whonix and using Whonix's original build script anyhow. Official redistributable template images are build by ITL. So we don't have any security/trust improvements by having "blessed" tags in https://github.com/Whonix/qubes-whonix.

Apr 29 2015, 12:27 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4092, @Patrick wrote:

Tagged your Whonix 10 branch by the way as 10.0.4-1.

Just tagged. Not added to any repository. I can do that if you wish. I am not sure, if I should always do that or wait for explicit requests. I don't mind either way.

Apr 29 2015, 12:10 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes

Apr 28 2015

WhonixQubes added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Right. I assume @nrgaway is testing his build, and if it checks out, he
can notify us here, submit a pull request to Marek, and we can have you
@Patrick update qubes-whonix 10.0.4 DEB package as stable.

Apr 28 2015, 8:36 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Okay, so to get this back on topic... What's next? I guess @nrgaway will inform us about his test results.

Apr 28 2015, 8:08 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
WhonixQubes added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Yes, I am for improving the process.

Apr 28 2015, 7:23 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4090, @nrgaway wrote:

since it never got removed on update. Maybe the new control-port-filter should have conflicts or provides in the control file.

Apr 28 2015, 6:49 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

I was wondering about this also and going to post about that. It slows down the development/debugging process if you have to wait for me to tag releases just so you can do a developers-only test build. We're living in different time zones and perhaps I won't have time for a few days at some point.

Apr 28 2015, 6:42 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
WhonixQubes added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

I've reviewed "qubes-whonix" 10.0.4 and give it a thumbs up for release
in its current form.

Apr 28 2015, 6:11 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
WhonixQubes added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

We really need a better structured release process that helps iron out
the issues and hiccups. I will plan to make a post on this so we can get
a more robust process in place for the future.

Apr 28 2015, 5:03 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Tagged your Whonix 10 branch by the way as 10.0.4-1.

Apr 28 2015, 4:25 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Done.

Apr 28 2015, 4:23 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

I have another version ready to tag, 10.0.4. Hopefully its the last since I have to gt back working on another task soon too :)

Apr 28 2015, 3:53 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway renamed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready from Qubes Whonix 9.6.8 and 10.0.3 is ready to Qubes Whonix 9.6.8 and 10.0.4 is ready.
Apr 28 2015, 3:47 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway claimed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
Apr 28 2015, 3:47 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T273: control-port-filter-python.service exits pre-maturely.

BTW, and as a note to self :)

Apr 28 2015, 5:57 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4079, @Patrick wrote:

From https://github.com/Whonix/qubes-whonix/blob/master/tests/apt-update-from-local-repo

APT_GET_OPTIONS="-o Dpkg::Options::="--force-confnew" --force-yes --yes"

please remove the --force-yes. Reason: insecure, see also:
https://groups.google.com/forum/#!topic/qubes-devel/akv5B7TgRFQ

Apr 28 2015, 2:50 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

Perhaps just remember make help. I guess you get used to the others quite soon. Forum... This one...
make / make help / makefile / package build process changes:
https://www.whonix.org/forum/index.php/topic,378
It's an older thread. I don't mind if we continue to use that one or create a new one.

Apr 28 2015, 12:49 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

From https://github.com/Whonix/qubes-whonix/blob/master/tests/apt-update-from-local-repo

Apr 28 2015, 12:46 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T273: control-port-filter-python.service exits pre-maturely.

Thanks, I need to bookmark those instructions now :)

Apr 28 2015, 12:44 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

You don't necessarily need Whonix's makefiles. Although I hope they make things real comfortable and fast to test/develop.

Apr 28 2015, 12:37 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
nrgaway added a comment to T273: control-port-filter-python.service exits pre-maturely.
In T273#4007, @Patrick wrote:

I've got an unrelated lintian error for an existing sysvinit script.

Since the effort to keep sysvinit still somewhat supported is too high for too little gain, let's deprecate all sysvinit scripts for Whonix 11. Let's move those into the https://github.com/Whonix/deprecated-code repository and then say "patches welcome" if someone wants to reintroduce/contribute sysvinit support.

As for proper systemd unit files, for packages developed under the Whonix umbrella (where we are upstream), let's move them into the standard location /lib/systemd/system?

Does that sound alright? @nrgaway?

Apr 28 2015, 12:26 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix

Apr 27 2015

Patrick closed T280: building packages on jessie broken due to genmkfile -> lintian warnings, a subtask of T273: control-port-filter-python.service exits pre-maturely, as Resolved.
Apr 27 2015, 5:43 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick reopened T280: building packages on jessie broken due to genmkfile -> lintian warnings, a subtask of T273: control-port-filter-python.service exits pre-maturely, as Open.
Apr 27 2015, 5:39 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick closed T280: building packages on jessie broken due to genmkfile -> lintian warnings, a subtask of T273: control-port-filter-python.service exits pre-maturely, as Resolved.
Apr 27 2015, 5:03 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

I've got an unrelated lintian error for an existing sysvinit script.

Apr 27 2015, 3:58 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

I would like to do it the Debian way. Like how other Debian packages handle this. Using the standard way. I want to figure that out today. And only if the standard way of doing this seems inappropriate I would cook up a custom solution. Maybe you get to find this out before me? debian-mentors IRC?

Apr 27 2015, 12:18 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
nrgaway added a comment to T273: control-port-filter-python.service exits pre-maturely.

Do you want me to keep both systemd and sysv init files in the package. Both of them could go in the /usr/share/control-port-filter-python directory and be available to anyone that may want to manually install the sysv init scripts. At the same time a copy can be made of the systemd unit file to be placed in the /lib/systemd/system directory (since linking may not work)

Apr 27 2015, 11:35 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a subtask for T273: control-port-filter-python.service exits pre-maturely: T278: building Whonix11 for qubes-whonix: Package installation errors.
Apr 27 2015, 2:43 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick triaged T273: control-port-filter-python.service exits pre-maturely as Normal priority.
Apr 27 2015, 2:42 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a subtask for T273: control-port-filter-python.service exits pre-maturely: T280: building packages on jessie broken due to genmkfile -> lintian warnings.
Apr 27 2015, 2:31 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
nrgaway added a comment to T273: control-port-filter-python.service exits pre-maturely.
In T273#3941, @Patrick wrote:
In T273#3939, @nrgaway wrote:
In T273#3929, @Patrick wrote:

You rang?

Yeah! :)

Are you asking me to commit it to repo?

Not necessarily. I am not employing you, so I cannot ask you for anything.

I was hoping you address https://phabricator.whonix.org/T273#3867. To re-state...

Can you fork and commit the systemd unit file to control-port-filter-python? You plan on doing it, prefer doing it yourself or prefer me doing it? I actually prefer if you do it, because then you get the git commit and credit in git history and licensing will be sorted out. Since this is a volunteer based thing, it's also fine for me to take your systemd unit file as is if you wish and do the commit myself.

And what about the other TODO mentioned in my previous comment? Same here. If you wish to do it, that's fine. If you prefer me doing it, that's also fine.

Was just ringing to find out if you plan on doing it or if I should do it.

Apr 27 2015, 2:07 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.
In T273#3939, @nrgaway wrote:
In T273#3929, @Patrick wrote:

You rang?

Apr 27 2015, 2:02 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
nrgaway added a comment to T273: control-port-filter-python.service exits pre-maturely.
In T273#3929, @Patrick wrote:
Apr 27 2015, 1:46 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
WhonixQubes added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Okay, I've reviewed "qubes-whonix" 10.0.3 and give it a thumbs up for
release in its current form.

Apr 27 2015, 1:11 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

@nrgaway?

Apr 27 2015, 12:01 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix

Apr 26 2015

Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

I meant 'proper systemd Alias='.

Apr 26 2015, 7:11 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#3922, @Patrick wrote:

You are referring to the replace-ip list I imagine.

Yes, I was.

That condition was put in so it will not conflict when you add systemd unit files to the main package.

and the sysv init script is removed

When using proper systemd aliases, there should be no conflicts. Not sure about removal of old sysvinit scripts, see this comment:
https://phabricator.whonix.org/T106#3920

Apr 26 2015, 4:12 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#3921, @nrgaway wrote:

It does not look like the systemd unit file is causing any issues in workstation. No errors are being reported...

root@host:/home/user# systemctl status tor
qubes-whonix-tor.service - Whonix Tor anonymizing overlay network for TCP
   Loaded: loaded (/etc/systemd/system/qubes-whonix-tor.service; enabled)
   Active: inactive (dead) since Sun 2015-04-26 13:37:39 UTC; 2min 40s ago
  Process: 1791 ExecStart=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc --runasdaemon 0 (code=exited, status=0/SUCCESS)
  Process: 1762 ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc --verify-config (code=exited, status=0/SUCCESS)

Apr 26 13:37:39 host systemd[1]: Started Whonix Tor anonymizing overlay network for TCP.
root@host:/home/user# journalctl -u tor
-- Logs begin at Sun 2015-04-26 13:39:30 UTC, end at Sun 2015-04-26 13:40:14 UTC. --

root@host:/home/user# journalctl -u qubes-whonix-tor
-- Logs begin at Sun 2015-04-26 13:39:30 UTC, end at Sun 2015-04-26 13:40:14 UTC. --
Apr 26 13:37:39 host systemd[1]: Starting Whonix Tor anonymizing overlay network for TCP...
Apr 26 13:37:39 host systemd[1]: Started Whonix Tor anonymizing overlay network for TCP.
Apr 26 2015, 3:52 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

You are referring to the replace-ip list I imagine.

Apr 26 2015, 3:48 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

It does not look like the systemd unit file is causing any issues in workstation. No errors are being reported...

root@host:/home/user# systemctl status tor
qubes-whonix-tor.service - Whonix Tor anonymizing overlay network for TCP
   Loaded: loaded (/etc/systemd/system/qubes-whonix-tor.service; enabled)
   Active: inactive (dead) since Sun 2015-04-26 13:37:39 UTC; 2min 40s ago
  Process: 1791 ExecStart=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc --runasdaemon 0 (code=exited, status=0/SUCCESS)
  Process: 1762 ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc --verify-config (code=exited, status=0/SUCCESS)
Apr 26 2015, 3:47 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#3915, @Patrick wrote:

.d Issue Regression

  • You reintroduced issues, that you earlier fixed already.
  • For the same reason,
    • it's also a bug to edit /etc/cpfpy.d/30_controlportfilt_default. You can ship a higher numbered file and edit that.
    • Same for /etc/uwt.d/30_uwt_default.
Apr 26 2015, 3:35 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

.d Issue Regression

Apr 26 2015, 2:58 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
WhonixQubes added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

@nrgaway That all sounds good. I've updated the audit forum thread and
am reviewing the code myself today.

Apr 26 2015, 12:01 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

I have completed the changes previously discussed.

Apr 26 2015, 9:27 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway renamed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready from Qubes Whonix 9.6.7 and 10.0.2 is ready to Qubes Whonix 9.6.8 and 10.0.3 is ready.
Apr 26 2015, 9:10 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes

Apr 24 2015

nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

@nrgaway What did you think of Patrick's proposal of going directly to Whonix 10 in the next few days?

Apr 24 2015, 6:08 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

@nrgaway Great job! :)

Here is how I'd like to handle this release, if this is okay...

I'd like to create a new audit thread, announce and invite others in the Whonix and Qubes communities to join in on auditing/testing if they please, and give it an audit myself.

@Patrick can sign and put the new qubes-whonix package(s) into developers and testers Whonix APT repositories whenever, right now, etc.

We and the community complete a quick audit/testing phase, and then we can then ping Patrick and Marek to build and release final DEB and RPM packages.

With Qubes R3.0-rc1 and imminent Whonix 10 releases, I know we want to get this out there very soon, so we can make this a quick audit and assuming nothing major comes up, we can be all ready hopefully by say this Sunday/Monday or so to call it final and go to stable release.

Just wanting to give it a quick audit and be inclusive with the community.

I will initiate this now, assuming there is no problem with this.

Thank you!

Apr 24 2015, 6:07 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#3892, @Patrick wrote:

whonixcheck report build as 9.6 still, but I definitely have 10.0 packages installed after update.

This is expected and by design. But needs documentation. Short explanation and ticket: T276


Review:

  • 50_whonixcheck_user isn't a good name. _user indicates user. /etc/whonix.d/50_whonixcheck_qubes would be appropriate. Then you could also easily get ride of that file one day without risking to delete user changes.
Apr 24 2015, 6:00 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Sure, if I can get rid of the signing code, all the better.

Apr 24 2015, 5:55 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
WhonixQubes added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

@nrgaway What did you think of Patrick's proposal of going directly to Whonix 10 in the next few days?

Apr 24 2015, 5:14 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
WhonixQubes added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

@nrgaway Great job! :)

Apr 24 2015, 5:13 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes