Mon, Feb 18
Looks like nothing more to do here.
Since grsecurity is not a thing anymore, closing this as invalid.
Feb 16 2019
I also noticed the file "~/.tb/first-boot-home-population.done" which suggests that whonix does something on first boot
Feb 15 2019
To build a package with qubes-builder, you need to add Makefile.builder file with just one line: DEBIAN_BUILD_DIRS := debian. This will tell qubes-builder that given repository contains Debian package.
Alternatively, if that would be too much of a problem, it should be easy to add an option that do auto detection (probably just looks for debian directory).
Feb 14 2019
Jan 12 2019
Dec 9 2018
Dec 7 2018
Nov 12 2018
Apper no longer installed by default.
Sep 20 2018
Aug 7 2018
Aug 3 2018
Playing devil's advocate here: Ted Ts'o  expresses strong skepticism about the efficacy of RNGs that rely on CPU jitter. summary: CPU jitter may not be random as thought to someone who designed the CPU cache and know how its internals "tick" . So while these RNGs may not harm, another solution for RNG-less platforms may be a good idea.
An interesting implementation to work around early boot entropy scarcity with havegedis to include it in the initrd. May be hackish but could be easier for Marmarek than writing something at the EFI level.
Done. Asked about Xen too but they may not be familiar with its innards. You may want to contact the Xen devs directly using my message as a template.
Aug 2 2018
I think its worth asking the hypervisor devs if this applies for the platforms we care about.
Jul 31 2018
jitterentropy-rng should solve this
jitterentropy-rng should solve this and is a mainline Linux solution that works the same way haveged does. Please see: https://phabricator.whonix.org/T817
Jul 24 2018
Jul 21 2018
Jul 18 2018
Jul 17 2018
For the time being, the vm's whonix gateway is hard coded in two files, the one watching and sending sdwdate satus and the one sending the shutdown notification.
What happens in case of multiple Whonix-Gateway ProxyVMs? I.e. in case of sys-whonix, sys-whonix-two, etc.? How would anon-whonix-two know it has to connect to sys-whonix-two?
Jul 15 2018
Jul 7 2018
Have run the fuzzer unit test simultaneously in sys-whonix and five anon-vm.
Jul 5 2018
Update, after my post in the forum.
Jun 13 2018
Jun 7 2018
May 30 2018
That's technically too late during boot process. See ticket discussion
Perhaps Qubes guys can have the entropybroker package communicate over the qrexec protocol to seed entropy from a reliable source like Dom0 to the other domains.
May 22 2018
Asked. Unfortunately not so.
May 18 2018
You can probably use virtio-rng since Qubes now runs on HVM mode and uses QEMU