Page MenuHomePhabricator

qubes-whonix 10Project
ActivePublic

Watchers

  • This project does not have any watchers.

Recent Activity

Aug 16 2015

Patrick closed T288: Qubes Whonix 10 - Testing Instructions and Issues as Resolved.
Aug 16 2015, 4:13 AM · Whonix 10, Whonix, qubes-whonix 10
Patrick closed T248: whonixcheck workaround can be removed in qubes-whonix 10 as Resolved.

https://github.com/Whonix/qubes-whonix/commit/390c8db4aff5ff0cb1007d967253f3bf6c44f6ef

Aug 16 2015, 4:07 AM · Qubes, Whonix, qubes-whonix 10
Patrick claimed T248: whonixcheck workaround can be removed in qubes-whonix 10.
Aug 16 2015, 4:06 AM · Qubes, Whonix, qubes-whonix 10

Jun 26 2015

Patrick added a comment to T322: obfsproxy not working on Qubes R3.

For the record, slightly off-topic.
Qubes Q3 RC1, Whonix 10.

Jun 26 2015, 7:48 PM · Whonix 12, Qubes, Whonix

Jun 11 2015

Patrick added a comment to T248: whonixcheck workaround can be removed in qubes-whonix 10.
In T248#5442, @nrgaway wrote:

Its now in etc/whonix.d/40_qubes:WHONIXCHECK_NO_EXIT_ON_UNSUPPORTED_VIRTUALIZER="1"
since I was still getting those errors in Whonix 10.

Jun 11 2015, 1:24 PM · Qubes, Whonix, qubes-whonix 10
nrgaway added a comment to T248: whonixcheck workaround can be removed in qubes-whonix 10.

Its now in etc/whonix.d/40_qubes:WHONIXCHECK_NO_EXIT_ON_UNSUPPORTED_VIRTUALIZER="1"
since I was still getting those errors in Whonix 10.

Jun 11 2015, 12:55 PM · Qubes, Whonix, qubes-whonix 10
Patrick assigned T248: whonixcheck workaround can be removed in qubes-whonix 10 to nrgaway.

Looks like you done this, @nrgaway?

Jun 11 2015, 5:09 AM · Qubes, Whonix, qubes-whonix 10

Jun 7 2015

Patrick changed the status of T170: check Qubes build script for apt-get update network / gpg failure security issues from Review to Open.
In T170#5334, @nrgaway wrote:

the --force option has also been removed

Jun 7 2015, 7:21 AM · Qubes, security, Whonix

Jun 6 2015

nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. Error when attempting to update in Whonix 10
Jun 6 2015, 6:47 PM · Whonix 10, Whonix, qubes-whonix 10
nrgaway changed the status of T170: check Qubes build script for apt-get update network / gpg failure security issues from Open to Review.

The Qubes build script will fail the install of the template if any apt-get errors are returned.

Jun 6 2015, 6:32 PM · Qubes, security, Whonix
nrgaway lowered the priority of T162: qubes-whonix handling of /etc/timezone and /etc/localtime from Normal to Low.
Jun 6 2015, 6:19 PM · Whonix 12, qubes-whonix 12, Whonix, Qubes
nrgaway lowered the priority of T173: triggers interest-noawait /etc/resolv.conf will probably not work from Normal to Low.
Jun 6 2015, 6:19 PM · Whonix 12, qubes-whonix 12, Qubes, Whonix
nrgaway closed T177: remove duplicate ipv4 forwarding disable as Resolved.

Done

Jun 6 2015, 6:17 PM · qubes-whonix 10, Qubes, Whonix

Jun 5 2015

oneoffew added a comment to T322: obfsproxy not working on Qubes R3.

For the record, flushing all rules and defaulting to ACCEPT makes obfsproxy work.

Jun 5 2015, 1:13 AM · Whonix 12, Qubes, Whonix

Jun 4 2015

oneoffew added a comment to T322: obfsproxy not working on Qubes R3.

This seems to have gotten lost in the backlog.

Jun 4 2015, 9:52 PM · Whonix 12, Qubes, Whonix

Jun 3 2015

Patrick added a comment to T170: check Qubes build script for apt-get update network / gpg failure security issues.

Is this done?

Jun 3 2015, 1:51 AM · Qubes, security, Whonix

May 30 2015

Patrick assigned T322: obfsproxy not working on Qubes R3 to nrgaway.
May 30 2015, 4:42 PM · Whonix 12, Qubes, Whonix
Patrick added a project to T322: obfsproxy not working on Qubes R3: qubes-whonix 11.
May 30 2015, 4:41 PM · Whonix 12, Qubes, Whonix

May 22 2015

nrgaway added a comment to T322: obfsproxy not working on Qubes R3.

Thanks for all the info. I will test it out over the weekend!

May 22 2015, 3:52 PM · Whonix 12, Qubes, Whonix
Patrick added a comment to T322: obfsproxy not working on Qubes R3.
  • works for me in Whonix 10
  • Documentation: https://www.whonix.org/wiki/Bridges
  • obfsproxy: https://www.whonix.org/wiki/Bridges#Using_obfuscated.2C_.28private.29_and.2For_ordinary_bridges
  • no different firewall rules required for obfs3
  • no startup scripts required
  • no other fancy stuff required
  • user configuration is simply added to /etc/tor/torrc
  • make sure the obfsproxy package is installed
  • apparmor was an issue in past, try obfsproxy yourself and check /var/log/kern.log
  • for now, just try it out yourself. Does it work for you? If it works for you, if you can confirm from /var/log/tor/log and arm, that Tor is in fact connecting only to the obfs3 bridges you configured, then it's more likely a user configuration error than Whonix bug.
May 22 2015, 3:33 PM · Whonix 12, Qubes, Whonix
Patrick triaged T322: obfsproxy not working on Qubes R3 as High priority.
May 22 2015, 3:21 PM · Whonix 12, Qubes, Whonix
nrgaway added a comment to T322: obfsproxy not working on Qubes R3.

@Patrick I was wondering if this is working in regular Whonix 10? If so can you give me some clues on how to troubleshoot it (startup scripts, configuration locations, expected firewall rules) since I have never used it before

May 22 2015, 10:31 AM · Whonix 12, Qubes, Whonix
nrgaway created T322: obfsproxy not working on Qubes R3.
May 22 2015, 10:29 AM · Whonix 12, Qubes, Whonix

May 16 2015

nrgaway closed T233: qubes-whonix update issue because of bug in whonix-setup-wizard / whonix_repository as Resolved.
May 16 2015, 3:04 PM · usability, qubes-whonix 10, Qubes, Whonix, whonix-setup-wizard, bug, whonix-repository
nrgaway added a comment to T233: qubes-whonix update issue because of bug in whonix-setup-wizard / whonix_repository.

Resolved with qubes-whonix unreleased 9.6.9 and 10

May 16 2015, 3:04 PM · usability, qubes-whonix 10, Qubes, Whonix, whonix-setup-wizard, bug, whonix-repository
nrgaway closed T247: qubes-whonix 10 ./whonix_build command needs to be updated for Whonix 10 as Resolved.
May 16 2015, 3:02 PM · qubes-whonix 10, Qubes, Whonix
nrgaway closed T275: Qubes Whonix 9.6.9 and 10.0.5 is ready as Resolved.
May 16 2015, 3:00 PM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway closed T278: building Whonix11 for qubes-whonix: Package installation errors as Resolved.
May 16 2015, 6:47 AM · Whonix 11, qubes-whonix 10, Whonix
nrgaway closed T278: building Whonix11 for qubes-whonix: Package installation errors, a subtask of T273: control-port-filter-python.service exits pre-maturely, as Resolved.
May 16 2015, 6:47 AM · systemd, Whonix 11, Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.

No longer an issue with 11.0.0.0.4-developers-only

May 16 2015, 6:47 AM · Whonix 11, qubes-whonix 10, Whonix

May 15 2015

Patrick closed T273: control-port-filter-python.service exits pre-maturely as Resolved.

This has been fixed in T274. control-port-filter-python has a working systemd unit file now. Closing. Please re-open if you still see an issue here.

May 15 2015, 1:57 AM · systemd, Whonix 11, Whonix 10, Whonix, qubes-whonix 10

May 4 2015

Patrick added a comment to T273: control-port-filter-python.service exits pre-maturely.
In T273#4175, @Patrick wrote:

What's next here?

@nrgaway Can you please post all your existing systemd units for packages developed under the Whonix umbrella somewhere? Such as the one in the comment of https://phabricator.whonix.org/T273#3852 ? + Add the license header? That would be important. It's currently a blocker before I can continue with most Whonix 11 development tasks. I would like to integrate those into packages and make those systemd-only. I guess I am getting to that before you?

Just finished making whonix-initializer systemd-only. Once the systemd unit is ready, the required remaining changes in debian/control and debian/rules are minimal and simple.

May 4 2015, 12:34 AM · systemd, Whonix 11, Whonix 10, Whonix, qubes-whonix 10

May 3 2015

Patrick triaged T275: Qubes Whonix 9.6.9 and 10.0.5 is ready as Normal priority.
May 3 2015, 6:00 AM · Whonix 10, qubes-whonix 10, Whonix, Qubes
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. HOW TO RE-INSTALL qubes-whonix
May 3 2015, 4:22 AM · Whonix 10, Whonix, qubes-whonix 10

May 2 2015

Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Can workstation templates also be upgraded that way? That's not clear from instructions.

May 2 2015, 3:59 PM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.
In T278#4255, @nrgaway wrote:

@Patrick

Is the 11.0.0.0.7-developers-only tag supposed to be available? While most submodules are cloning properly, I get this error:

Submodule path 'packages/xchat-improved-privacy': checked out 'afc52a514e0b86bd4fe61344e5e44023d6885890'
Unable to checkout '435741702cb49cb38f410b7597078df7d6659a6c' in submodule path 'packages/whonix-developer-meta-files

Fixed.

May 2 2015, 6:39 AM · Whonix 11, qubes-whonix 10, Whonix
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4229, @Patrick wrote:

Your instructions sound good. I recommend to hit the edit button for instruction posts and to copy it over to the wiki https://www.whonix.org/wiki/Qubes/Upgrade_from_9_to_10 or so. Unfortunately, phabricator uses markdown and mediawiki uses mediawiki syntax.

May 2 2015, 5:15 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.

Is the 11.0.0.0.7-developers-only tag supposed to be available? While most submodules are cloning properly, I get this error:

May 2 2015, 4:36 AM · Whonix 11, qubes-whonix 10, Whonix

May 1 2015

nrgaway added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.
In T278#4230, @Patrick wrote:

skippable package installation:

On Whonix 10, all packages installed in build-steps.d/1700_install-packages by pkg-install-maybe (as opposed of being installed as part of a dependency) are skippable through the whonix_build_script_skip_package_install environment variable. Example:

whonix_build_script_skip_package_install+=" anon-shared-build-fix-grub "
export whonix_build_script_skip_package_install

Should prevent installation of that package.

May 1 2015, 11:43 PM · Whonix 11, qubes-whonix 10, Whonix
Patrick added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.

The whonix_build_on_operating_system variable is important for:
https://github.com/Whonix/Whonix/blob/master/buildconfig.d/30_apt_sources

May 1 2015, 3:29 PM · Whonix 11, qubes-whonix 10, Whonix
Patrick added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.

Good catch!

May 1 2015, 3:00 PM · Whonix 11, qubes-whonix 10, Whonix
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Your instructions sound good. I recommend to hit the edit button for instruction posts and to copy it over to the wiki https://www.whonix.org/wiki/Qubes/Upgrade_from_9_to_10 or so. Unfortunately, phabricator uses markdown and mediawiki uses mediawiki syntax.

May 1 2015, 2:21 PM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.

I was able to identify all the issue that prevented complete and successful build.

May 1 2015, 10:42 AM · Whonix 11, qubes-whonix 10, Whonix
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
  1. What to do if you ran a apt-get dist-upgrade not using the upgrade method above
May 1 2015, 6:50 AM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Link: "stable vs wheezy repository" bug T233

May 1 2015, 3:28 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4212, @Patrick wrote:

Yes. Done, migrated (copied) qubes-whonix 10.0.5-1 from developers to testers repository.

Want to post a blog post? Otherwise I guess very few will notice these instructions. Got a blog account already?

May 1 2015, 3:18 AM · Whonix 10, Whonix, qubes-whonix 10
Patrick added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.

Any pages you find under 'free paste bin' or github [gist] or anything that works.

May 1 2015, 3:03 AM · Whonix 11, qubes-whonix 10, Whonix
Patrick added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.

Yes. Done, migrated (copied) qubes-whonix 10.0.5-1 from developers to testers repository.

May 1 2015, 3:00 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T288: Qubes Whonix 10 - Testing Instructions and Issues.
In T288#4179, @Patrick wrote:

I am not sure it's wise telling testers to enable the developers repository. That could break badly at some point. The developers repository is a playground for me to upload and install from packages where I am not 100% certain they are not going to break the package manager.

May 1 2015, 1:32 AM · Whonix 10, Whonix, qubes-whonix 10
nrgaway added a comment to T278: building Whonix11 for qubes-whonix: Package installation errors.
In T278#4002, @nrgaway wrote:

I have been about to get Whonix 11 to successfully build using the 11.0.0.0.1-developers-only tag (since submodules seemed broken on master branch), although the build process kept asking for input starting at line 450 of 1700_install-packages and all the way until it exited. I just kept entering c manually since by that stage everything had already been installed:

# 1700_install-packages:450 --> "$WHONIX_SOURCE_HELP_STEPS_FOLDER/remove-local-temp-apt-repo"
INFO: Setting... export UWT_DEV_PASSTHROUGH="1"
INFO: Variable anon_dist_build_version was already set to: 11.0.0.0.1
/home/user/Whonix/help-steps/pre: line 20: error_: command not found
...
+ true 'INFO: Currently running script: /home/user/Whonix/help-steps/unprevent-daemons-from-starting '
+ true 'INFO: Currently running script: /home/user/Whonix/help-steps/unchroot-raw '
+ true 'INFO: Skipping script, because ANON_BUILD_INSTALL_TO_ROOT=1: /home/user/Whonix/help-steps/unmount-raw'
+ true 'INFO: Currently running script: ././build-steps.d/2300_run-chroot-scripts-post-d '
May 1 2015, 12:21 AM · Whonix 11, qubes-whonix 10, Whonix