oxeo0/opsec-blogposts
1
0
Fork 0
mirror of http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/opsec-blogposts.git synced 2025-05-16 06:27:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix stuff

Browse source
This commit is contained in:
nihilist 2025-05-09 18:05:15 +02:00
parent f37d4ae9a3
commit 7edb1e6949
2 changed files with 12 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
0_template/index.md
View file

@ -41,7 +41,7 @@ Prerequisites:
## How can I implement the solution ? ## How can I implement the solution ?
1) Order the blinds through the commandline to look cool: 1) Order the blinds through the command-line to look cool:
```sh ```sh
curl -H 'Content-Type: application/json' \ curl -H 'Content-Type: application/json' \

17
sensitivevm/index.md
View file

@ -144,9 +144,9 @@ So here we first make sure that the whonix gateway has 1GB memory, and that it h
[...] [...]
<__memory dumpCore="off" unit="GiB">1 <__/memory> <__currentMemory unit="GiB">1 <__/currentMemory> <memory dumpCore="off" unit="GiB">1 </memory> <currentMemory unit="GiB">1 </currentMemory>
[...] <__disk type="file" device="disk"> <__driver name="qemu" type="qcow2"/> <__source file="/run/media/private/user/sda/Whonix-Gateway.qcow2"/> <__target dev="vda" bus="virtio"/> <__address type="pci" domain="0x0000" bus="0x00" slot="0x06" function="0x0"/> <__/disk> [...] <disk type="file" device="disk"> <driver name="qemu" type="qcow2"/> <source file="/run/media/private/user/sda/Whonix-Gateway.qcow2"/> <target dev="vda" bus="virtio"/> <address type="pci" domain="0x0000" bus="0x00" slot="0x06" function="0x0"/> </disk>
[...] [...]
@ -158,11 +158,11 @@ So here we do the same for the whonix workstation to give it 8GB of memory, with
[...] [...]
<__memory dumpCore="off" unit="GiB">8 <__/memory> <__currentMemory unit="GiB">8 <__/currentMemory> <__memory dumpCore="off" unit="GiB">8 </memory> <__currentMemory unit="GiB">8 </currentMemory>
[...] <__vcpu placement="static" cpuset="1">4 <__/vcpu> [...] <vcpu placement="static" cpuset="1">4 </vcpu>
[...] <__disk type="file" device="disk"> <__driver name="qemu" type="qcow2"/> <__source file="/run/media/private/user/sda/Whonix-Gateway.qcow2"/> <__target dev="vda" bus="virtio"/> <__address type="pci" domain="0x0000" bus="0x00" slot="0x06" function="0x0"/> <__/disk> [...] <disk type="file" device="disk"> <driver name="qemu" type="qcow2"/> <__source file="/run/media/private/user/sda/Whonix-Gateway.qcow2"/> <target dev="vda" bus="virtio"/> <address type="pci" domain="0x0000" bus="0x00" slot="0x06" function="0x0"/> </disk>
[...] [...]
@ -368,6 +368,7 @@ Which after tweaking it accordingly we end up with the following reboot script:
# kill all processes that could block veracrypt from closing # kill all processes that could block veracrypt from closing
killall thunar killall thunar
killall xfce4-terminal killall xfce4-terminal
systemctl kill libvirtd
# close the veracrypt volume using zulucrypt # close the veracrypt volume using zulucrypt
sudo zuluCrypt-cli -q -d /dev/sda sudo zuluCrypt-cli -q -d /dev/sda
@ -399,7 +400,11 @@ So let's showcase how to do it. First setup the context, booting from the Host O
Then open the veracrypt hidden volume: Then open the veracrypt hidden volume:
![](109.png) ![](110.png) ![](111.png) ![](109.png)
![](110.png)
![](111.png)
and then run script.sh to setup the sensitive VMs: and then run script.sh to setup the sensitive VMs: