oxeo0/opsec-blogposts
1
0
Fork 0
mirror of http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/opsec-blogposts.git synced 2025-06-08 05:19:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix whonix tutorial

Browse source
This commit is contained in:
nihilist 2025-05-24 18:13:42 +02:00
parent 299c4a29d5
commit e2cd8d43d1
2 changed files with 28 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
whonixqemuvms/image-7.png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 184 KiB

46
whonixqemuvms/index.md
View file

@ -10,7 +10,11 @@ tags:
![](0.png)
Whonix is an open-source OS made specifically for general anonymous activities, which has been built with hardening in mind. In this tutorial we're going to set it up using the [QEMU virtualization](../hypervisorsetup/index.md) setup we installed previously.
Whonix is an open-source set of 2 VMs (one being used for networking, and the other being used as a workstation) based on a hardened debian 12 OS, made specifically for general anonymous activities, which has been built with hardening in mind. In this tutorial we're going to set it up using the [QEMU virtualization](../hypervisorsetup/index.md) setup we installed previously.
![alt text](image-7.png)
## _OPSEC Recommendations:_
@ -79,25 +83,30 @@ Then extract the .xz file where you want the image to be at:
4.0K -rw-r--r-- 1 nothing nothing 2.3K Oct 21 2015 Whonix-Workstation-XFCE-17.0.3.0.xml
1.4G -rw-r--r-- 1 nothing nothing 1.4G Dec 29 20:06 Whonix-XFCE-17.0.3.0.Intel_AMD64.qcow2.libvirt.xz
So now we have the qcow2 files (take note that it can), so we can proceed following the instructions:
To simplify the use of the XML files i recommend renaming them like so:
[nihilist@nowhere VMs]$ mv Whonix-Workstation-XFCE-17.0.3.0.xml Whonix-Workstation.xml
[nihilist@nowhere VMs]$ mv Whonix-Workstation.qcow2 Whonix-Workstation.qcow2
[nihilist@nowhere VMs]$ mv Whonix-Gateway-XFCE-17.0.3.0.xml Whonix-Gateway.xml
[nihilist@nowhere VMs]$ mv Whonix-Gateway.qcow2 Whonix-Gateway.qcow2
So now we have the qcow2 files, so we can proceed following the instructions:
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
→ vim Whonix-Gateway-XFCE-17.0.3.0.xml
→ vim Whonix-Gateway.xml
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
→ cat Whonix-Gateway-XFCE-17.0.3.0.xml | grep VAULT
<source file='/mnt/VAULT/VMs/Whonix-Gateway-XFCE-17.0.3.0.Intel_AMD64.qcow2'/>
<source file='/mnt/VAULT/VMs/Whonix-Gateway.qcow2'/>
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
→ vim Whonix-Workstation-XFCE-17.0.3.0.xml
→ vim Whonix-Workstation.xml
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
→ cat Whonix-Workstation-XFCE-17.0.3.0.xml | grep VAULT <source file='/mnt/VAULT/VMs/Whonix-Workstation-XFCE-17.0.3.0.Intel_AMD64.qcow2'/>
→ cat Whonix-Workstation.xml | grep VAULT <source file='/mnt/VAULT/VMs/Whonix-Workstation.qcow2'/>
With those edits, the Whonix VMs are ready to be used:
[ 10.8.0.3/24 ] [ nowhere ] [VAULT/VMs]
→ sudo virsh -c qemu:///system net-define Whonix_external*.xml
@ -142,16 +151,17 @@ So now we have the qcow2 files (take note that it can), so we can proceed follow
make sure you give them 4gb of RAM before launching them, then launch them:
[nihilist@nowhere VMs]$ cat Whonix-Gateway.xml | grep KiB
<memory dumpCore="off" unit="KiB">2097152
<currentMemory unit="KiB">2097152
[nihilist@nowhere VMs]$ cat Whonix-Workstation.xml | grep KiB
<memory dumpCore="off" unit="KiB">4194304
<currentMemory unit="KiB">4194304
[nihilist@nowhere VMs]$ cat Whonix-Gateway.xml | grep GB
<memory dumpCore='off' unit='GB'>2</memory>
<currentMemory unit='GB'>2</currentMemory>
we can automate the VM startup procedure with a simple bashscript like so :
[nihilist@nowhere VMs]$ cat Whonix-Workstation.xml | grep GB
<memory dumpCore='off' unit='GB'>8</memory>
<currentMemory unit='GB'>8</currentMemory>
If you're like me and you don't want to run those commands to add the VMs into virt-manager, you can automate it with a simple bashscript like so:
[nihilist@nowhere VMs]$ cat refreshvms.sh