Page MenuHomePhabricator

Whonix 10Project
ActivePublic

Members (1)

Watchers

  • This project does not have any watchers.
  • View All

Recent Activity

Nov 17 2015

Patrick added a comment to T107: Tor Messenger Support.

https://www.whonix.org/wiki/Chat#Tor_Messenger

Nov 17 2015, 4:19 PM · Whonix, Whonix 10

Aug 16 2015

Patrick closed T288: Qubes Whonix 10 - Testing Instructions and Issues as Resolved.
Aug 16 2015, 4:13 AM · Whonix 10, Whonix, qubes-whonix 10

Jun 30 2015

Patrick added a comment to T194: whonixcheck security workaround for "apt-get update" zero exit code discrepancy for network, gpg failures.

/usr/lib/apt-get-wrapper:

Jun 30 2015, 1:47 AM · Whonix, security, whonixcheck, Whonix 10

Jun 26 2015

Patrick added a comment to T322: obfsproxy not working on Qubes R3.

For the record, slightly off-topic.
Qubes Q3 RC1, Whonix 10.

Jun 26 2015, 7:48 PM · Whonix 12, Qubes, Whonix

Jun 23 2015

Patrick added a comment to T212: ask about Alpine Linux package manager security.

Too long ago... Trying to find this again...

Jun 23 2015, 4:59 PM · sponsor-B, security, Whonix 10, Whonix
ncopa added a comment to T212: ask about Alpine Linux package manager security.

care to give any details about indefinite freeze and downgrade attacks that gentoo has?

Jun 23 2015, 2:05 PM · sponsor-B, security, Whonix 10, Whonix

Jun 15 2015

Patrick added a project to T27: create grub-screen-resolution package: grub-screen-resolution.
Jun 15 2015, 2:51 AM · grub-screen-resolution, Whonix 10, Whonix, easy, Debian version 8 codename Jessie
Patrick added a project to T26: create grub-output-verbose package: grub-output-verbose.
Jun 15 2015, 2:51 AM · grub-output-verbose, Debian version 8 codename Jessie, easy, Whonix, Whonix 10
Patrick added a comment to T27: create grub-screen-resolution package.

Fixed "vga=ext is deprecated. Use set gfxpayload=text before linux command instead". Upgraded for grub2 / Debian jessie.:
https://github.com/Whonix/grub-screen-resolution/commit/c3b653a27c95f2b513953c63b714962746ae09a3

Jun 15 2015, 2:49 AM · grub-screen-resolution, Whonix 10, Whonix, easy, Debian version 8 codename Jessie

Jun 6 2015

nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. Error when attempting to update in Whonix 10
Jun 6 2015, 6:47 PM · Whonix 10, Whonix, qubes-whonix 10

Jun 5 2015

oneoffew added a comment to T322: obfsproxy not working on Qubes R3.

For the record, flushing all rules and defaulting to ACCEPT makes obfsproxy work.

Jun 5 2015, 1:13 AM · Whonix 12, Qubes, Whonix

Jun 4 2015

oneoffew added a comment to T322: obfsproxy not working on Qubes R3.

This seems to have gotten lost in the backlog.

Jun 4 2015, 9:52 PM · Whonix 12, Qubes, Whonix

May 30 2015

Patrick assigned T322: obfsproxy not working on Qubes R3 to nrgaway.
May 30 2015, 4:42 PM · Whonix 12, Qubes, Whonix
Patrick added a project to T322: obfsproxy not working on Qubes R3: qubes-whonix 11.
May 30 2015, 4:41 PM · Whonix 12, Qubes, Whonix

May 22 2015

nrgaway added a comment to T322: obfsproxy not working on Qubes R3.

Thanks for all the info. I will test it out over the weekend!

May 22 2015, 3:52 PM · Whonix 12, Qubes, Whonix
Patrick added a comment to T322: obfsproxy not working on Qubes R3.
  • works for me in Whonix 10
  • Documentation: https://www.whonix.org/wiki/Bridges
  • obfsproxy: https://www.whonix.org/wiki/Bridges#Using_obfuscated.2C_.28private.29_and.2For_ordinary_bridges
  • no different firewall rules required for obfs3
  • no startup scripts required
  • no other fancy stuff required
  • user configuration is simply added to /etc/tor/torrc
  • make sure the obfsproxy package is installed
  • apparmor was an issue in past, try obfsproxy yourself and check /var/log/kern.log
  • for now, just try it out yourself. Does it work for you? If it works for you, if you can confirm from /var/log/tor/log and arm, that Tor is in fact connecting only to the obfs3 bridges you configured, then it's more likely a user configuration error than Whonix bug.
May 22 2015, 3:33 PM · Whonix 12, Qubes, Whonix
Patrick triaged T322: obfsproxy not working on Qubes R3 as High priority.
May 22 2015, 3:21 PM · Whonix 12, Qubes, Whonix
nrgaway added a comment to T322: obfsproxy not working on Qubes R3.

@Patrick I was wondering if this is working in regular Whonix 10? If so can you give me some clues on how to troubleshoot it (startup scripts, configuration locations, expected firewall rules) since I have never used it before

May 22 2015, 10:31 AM · Whonix 12, Qubes, Whonix
nrgaway created T322: obfsproxy not working on Qubes R3.
May 22 2015, 10:29 AM · Whonix 12, Qubes, Whonix

May 16 2015

nrgaway closed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready as Resolved.
May 16 2015, 3:00 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway closed T278: building Whonix11 for qubes-whonix: Package installation errors, a subtask of T273: control-port-filter-python.service exits pre-maturely, as Resolved.
May 16 2015, 6:47 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix

May 15 2015

Patrick closed T273: control-port-filter-python.service exits pre-maturely as Resolved.

This has been fixed in T274. control-port-filter-python has a working systemd unit file now. Closing. Please re-open if you still see an issue here.

May 15 2015, 1:57 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix

May 4 2015

Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.
In T273#4175, @Patrick wrote:

What's next here?

@nrgaway Can you please post all your existing systemd units for packages developed under the Whonix umbrella somewhere? Such as the one in the comment of https://phabricator.whonix.org/T273#3852 ? + Add the license header? That would be important. It's currently a blocker before I can continue with most Whonix 11 development tasks. I would like to integrate those into packages and make those systemd-only. I guess I am getting to that before you?

Just finished making whonix-initializer systemd-only. Once the systemd unit is ready, the required remaining changes in debian/control and debian/rules are minimal and simple.

May 4 2015, 12:34 AM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix

May 3 2015

Patrick triaged T275: Qubes Whonix 9.6.9 and 10.0.5 is ready as Normal priority.
May 3 2015, 6:00 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. HOW TO RE-INSTALL qubes-whonix
May 3 2015, 4:22 AM · Whonix 10, Whonix, qubes-whonix 10

May 2 2015

Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Can workstation templates also be upgraded that way? That's not clear from instructions.

May 2 2015, 3:59 PM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4229, @Patrick wrote:

Your instructions sound good. I recommend to hit the edit button for instruction posts and to copy it over to the wiki https://www.whonix.org/wiki/Qubes/Upgrade_from_9_to_10 or so. Unfortunately, phabricator uses markdown and mediawiki uses mediawiki syntax.

May 2 2015, 5:15 AM · Whonix 10, Whonix, qubes-whonix 10

May 1 2015

Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Your instructions sound good. I recommend to hit the edit button for instruction posts and to copy it over to the wiki https://www.whonix.org/wiki/Qubes/Upgrade_from_9_to_10 or so. Unfortunately, phabricator uses markdown and mediawiki uses mediawiki syntax.

May 1 2015, 2:21 PM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. What to do if you ran a apt-get dist-upgrade not using the upgrade method above
May 1 2015, 6:50 AM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Link: "stable vs wheezy repository" bug T233

May 1 2015, 3:28 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4212, @Patrick wrote:

Yes. Done, migrated (copied) qubes-whonix 10.0.5-1 from developers to testers repository.

Want to post a blog post? Otherwise I guess very few will notice these instructions. Got a blog account already?

May 1 2015, 3:18 AM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Yes. Done, migrated (copied) qubes-whonix 10.0.5-1 from developers to testers repository.

May 1 2015, 3:00 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4179, @Patrick wrote:

I am not sure it's wise telling testers to enable the developers repository. That could break badly at some point. The developers repository is a playground for me to upload and install from packages where I am not 100% certain they are not going to break the package manager.

May 1 2015, 1:32 AM · Whonix 10, Whonix, qubes-whonix 10

Apr 30 2015

Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

Related, see also:
https://www.whonix.org/forum/index.php/topic,560.msg7989.html#msg7989

Apr 30 2015, 5:28 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

I am not sure it's wise telling testers to enable the developers repository. That could break badly at some point. The developers repository is a playground for me to upload and install from packages where I am not 100% certain they are not going to break the package manager.

Apr 30 2015, 4:15 PM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.

What's next here?

Apr 30 2015, 3:19 PM · systemd, Whonix 11, Whonix 10, qubes-whonix 10, Whonix
nrgaway renamed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready from Qubes Whonix 9.6.8 and 10.0.5 is ready to Qubes Whonix 9.6.9 and 10.0.5 is ready.
Apr 30 2015, 4:53 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. Testers Update instructions
Apr 30 2015, 4:52 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway created T288: Qubes Whonix 10 - Testing Instructions and Issues.
Apr 30 2015, 4:35 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Thanks, tests are successful for me.

Apr 30 2015, 4:27 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Signed, pushed 10.0.5-1 and added to developers repository.

Apr 30 2015, 1:59 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes

Apr 29 2015

nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

@Patrick, I created a new version that hopefully solves the control-port-filter-python not re-enabling properly... I had a typo in the maintainers postinst configuration file.

Apr 29 2015, 2:18 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway renamed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready from Qubes Whonix 9.6.8 and 10.0.4 is ready to Qubes Whonix 9.6.8 and 10.0.5 is ready.
Apr 29 2015, 2:08 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4134, @nrgaway wrote:

XXX: @Patrick, do your scripts ignore backed up files in directories such as /etc/whonix_firewall.d....

Apr 29 2015, 2:02 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

Maybe you want to give an upgrade a try. The required qubes package is now also in the ITL test repo so you should be able to attempt an update. DO NOT FORGET TO BACKUP (CLONE) your existing whonix proxy :)

Apr 29 2015, 12:02 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4132, @Patrick wrote:

Alright.

How would users upgrade the qubes-whonix package then? Does the ITL repo also contain Debian packages?

Apr 29 2015, 6:12 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.

How would users upgrade the qubes-whonix package then? Does the ITL repo also contain Debian packages?

Apr 29 2015, 4:17 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4130, @Patrick wrote:
In T275#4128, @nrgaway wrote:

hehe, I was wondering why it was not in repo. Yes, please add it as I want to do some upgrade testing.

Done, added to developers repository.

Apr 29 2015, 1:07 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
Patrick added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4128, @nrgaway wrote:

hehe, I was wondering why it was not in repo. Yes, please add it as I want to do some upgrade testing.

Apr 29 2015, 12:41 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T275: Qubes Whonix 9.6.9 and 10.0.5 is ready.
In T275#4097, @Patrick wrote:

I was wondering about this also and going to post about that. It slows down the development/debugging process if you have to wait for me to tag releases just so you can do a developers-only test build. We're living in different time zones and perhaps I won't have time for a few days at some point.

qubes-whonix isn't build by git cloning https://github.com/Whonix/Whonix and using Whonix's original build script anyhow. Official redistributable template images are build by ITL. So we don't have any security/trust improvements by having "blessed" tags in https://github.com/Whonix/qubes-whonix.

Apr 29 2015, 12:27 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes