mirror of
http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/opsec-blogposts.git
synced 2025-06-08 07:29:31 +00:00
fix whonix tutorial
This commit is contained in:
parent
299c4a29d5
commit
e2cd8d43d1
2 changed files with 28 additions and 18 deletions
BIN
whonixqemuvms/image-7.png
Normal file
BIN
whonixqemuvms/image-7.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 184 KiB |
|
@ -10,7 +10,11 @@ tags:
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
Whonix is an open-source OS made specifically for general anonymous activities, which has been built with hardening in mind. In this tutorial we're going to set it up using the [QEMU virtualization](../hypervisorsetup/index.md) setup we installed previously.
|
Whonix is an open-source set of 2 VMs (one being used for networking, and the other being used as a workstation) based on a hardened debian 12 OS, made specifically for general anonymous activities, which has been built with hardening in mind. In this tutorial we're going to set it up using the [QEMU virtualization](../hypervisorsetup/index.md) setup we installed previously.
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## _OPSEC Recommendations:_
|
## _OPSEC Recommendations:_
|
||||||
|
|
||||||
|
@ -80,24 +84,29 @@ Then extract the .xz file where you want the image to be at:
|
||||||
1.4G -rw-r--r-- 1 nothing nothing 1.4G Dec 29 20:06 Whonix-XFCE-17.0.3.0.Intel_AMD64.qcow2.libvirt.xz
|
1.4G -rw-r--r-- 1 nothing nothing 1.4G Dec 29 20:06 Whonix-XFCE-17.0.3.0.Intel_AMD64.qcow2.libvirt.xz
|
||||||
|
|
||||||
|
|
||||||
|
To simplify the use of the XML files i recommend renaming them like so:
|
||||||
|
|
||||||
So now we have the qcow2 files (take note that it can), so we can proceed following the instructions:
|
[nihilist@nowhere VMs]$ mv Whonix-Workstation-XFCE-17.0.3.0.xml Whonix-Workstation.xml
|
||||||
|
[nihilist@nowhere VMs]$ mv Whonix-Workstation.qcow2 Whonix-Workstation.qcow2
|
||||||
|
[nihilist@nowhere VMs]$ mv Whonix-Gateway-XFCE-17.0.3.0.xml Whonix-Gateway.xml
|
||||||
|
[nihilist@nowhere VMs]$ mv Whonix-Gateway.qcow2 Whonix-Gateway.qcow2
|
||||||
|
|
||||||
|
So now we have the qcow2 files, so we can proceed following the instructions:
|
||||||
|
|
||||||
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
|
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
|
||||||
→ vim Whonix-Gateway-XFCE-17.0.3.0.xml
|
→ vim Whonix-Gateway.xml
|
||||||
|
|
||||||
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
|
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
|
||||||
→ cat Whonix-Gateway-XFCE-17.0.3.0.xml | grep VAULT
|
→ cat Whonix-Gateway-XFCE-17.0.3.0.xml | grep VAULT
|
||||||
<source file='/mnt/VAULT/VMs/Whonix-Gateway-XFCE-17.0.3.0.Intel_AMD64.qcow2'/>
|
<source file='/mnt/VAULT/VMs/Whonix-Gateway.qcow2'/>
|
||||||
|
|
||||||
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
|
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
|
||||||
→ vim Whonix-Workstation-XFCE-17.0.3.0.xml
|
→ vim Whonix-Workstation.xml
|
||||||
|
|
||||||
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
|
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
|
||||||
→ cat Whonix-Workstation-XFCE-17.0.3.0.xml | grep VAULT <source file='/mnt/VAULT/VMs/Whonix-Workstation-XFCE-17.0.3.0.Intel_AMD64.qcow2'/>
|
→ cat Whonix-Workstation.xml | grep VAULT <source file='/mnt/VAULT/VMs/Whonix-Workstation.qcow2'/>
|
||||||
|
|
||||||
|
|
||||||
|
With those edits, the Whonix VMs are ready to be used:
|
||||||
|
|
||||||
[ 10.8.0.3/24 ] [ nowhere ] [VAULT/VMs]
|
[ 10.8.0.3/24 ] [ nowhere ] [VAULT/VMs]
|
||||||
→ sudo virsh -c qemu:///system net-define Whonix_external*.xml
|
→ sudo virsh -c qemu:///system net-define Whonix_external*.xml
|
||||||
|
@ -142,16 +151,17 @@ So now we have the qcow2 files (take note that it can), so we can proceed follow
|
||||||
make sure you give them 4gb of RAM before launching them, then launch them:
|
make sure you give them 4gb of RAM before launching them, then launch them:
|
||||||
|
|
||||||
|
|
||||||
[nihilist@nowhere VMs]$ cat Whonix-Gateway.xml | grep KiB
|
[nihilist@nowhere VMs]$ cat Whonix-Gateway.xml | grep GB
|
||||||
<memory dumpCore="off" unit="KiB">2097152
|
<memory dumpCore='off' unit='GB'>2</memory>
|
||||||
<currentMemory unit="KiB">2097152
|
<currentMemory unit='GB'>2</currentMemory>
|
||||||
[nihilist@nowhere VMs]$ cat Whonix-Workstation.xml | grep KiB
|
|
||||||
<memory dumpCore="off" unit="KiB">4194304
|
[nihilist@nowhere VMs]$ cat Whonix-Workstation.xml | grep GB
|
||||||
<currentMemory unit="KiB">4194304
|
<memory dumpCore='off' unit='GB'>8</memory>
|
||||||
|
<currentMemory unit='GB'>8</currentMemory>
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
we can automate the VM startup procedure with a simple bashscript like so :
|
If you're like me and you don't want to run those commands to add the VMs into virt-manager, you can automate it with a simple bashscript like so:
|
||||||
|
|
||||||
|
|
||||||
[nihilist@nowhere VMs]$ cat refreshvms.sh
|
[nihilist@nowhere VMs]$ cat refreshvms.sh
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue