fix whonix tutorial

This commit is contained in:
nihilist 2025-05-24 18:13:42 +02:00
parent 299c4a29d5
commit e2cd8d43d1
2 changed files with 28 additions and 18 deletions

BIN
whonixqemuvms/image-7.png Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 184 KiB

View file

@ -10,7 +10,11 @@ tags:
![](0.png) ![](0.png)
Whonix is an open-source OS made specifically for general anonymous activities, which has been built with hardening in mind. In this tutorial we're going to set it up using the [QEMU virtualization](../hypervisorsetup/index.md) setup we installed previously. Whonix is an open-source set of 2 VMs (one being used for networking, and the other being used as a workstation) based on a hardened debian 12 OS, made specifically for general anonymous activities, which has been built with hardening in mind. In this tutorial we're going to set it up using the [QEMU virtualization](../hypervisorsetup/index.md) setup we installed previously.
![alt text](image-7.png)
## _OPSEC Recommendations:_ ## _OPSEC Recommendations:_
@ -80,24 +84,29 @@ Then extract the .xz file where you want the image to be at:
1.4G -rw-r--r-- 1 nothing nothing 1.4G Dec 29 20:06 Whonix-XFCE-17.0.3.0.Intel_AMD64.qcow2.libvirt.xz 1.4G -rw-r--r-- 1 nothing nothing 1.4G Dec 29 20:06 Whonix-XFCE-17.0.3.0.Intel_AMD64.qcow2.libvirt.xz
To simplify the use of the XML files i recommend renaming them like so:
So now we have the qcow2 files (take note that it can), so we can proceed following the instructions: [nihilist@nowhere VMs]$ mv Whonix-Workstation-XFCE-17.0.3.0.xml Whonix-Workstation.xml
[nihilist@nowhere VMs]$ mv Whonix-Workstation.qcow2 Whonix-Workstation.qcow2
[nihilist@nowhere VMs]$ mv Whonix-Gateway-XFCE-17.0.3.0.xml Whonix-Gateway.xml
[nihilist@nowhere VMs]$ mv Whonix-Gateway.qcow2 Whonix-Gateway.qcow2
So now we have the qcow2 files, so we can proceed following the instructions:
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs] [ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
→ vim Whonix-Gateway-XFCE-17.0.3.0.xml → vim Whonix-Gateway.xml
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs] [ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
→ cat Whonix-Gateway-XFCE-17.0.3.0.xml | grep VAULT → cat Whonix-Gateway-XFCE-17.0.3.0.xml | grep VAULT
<source file='/mnt/VAULT/VMs/Whonix-Gateway-XFCE-17.0.3.0.Intel_AMD64.qcow2'/> <source file='/mnt/VAULT/VMs/Whonix-Gateway.qcow2'/>
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs] [ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
→ vim Whonix-Workstation-XFCE-17.0.3.0.xml → vim Whonix-Workstation.xml
[ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs] [ 10.0.2.2/24 ] [ nowhere ] [VAULT/VMs]
→ cat Whonix-Workstation-XFCE-17.0.3.0.xml | grep VAULT <source file='/mnt/VAULT/VMs/Whonix-Workstation-XFCE-17.0.3.0.Intel_AMD64.qcow2'/> → cat Whonix-Workstation.xml | grep VAULT <source file='/mnt/VAULT/VMs/Whonix-Workstation.qcow2'/>
With those edits, the Whonix VMs are ready to be used:
[ 10.8.0.3/24 ] [ nowhere ] [VAULT/VMs] [ 10.8.0.3/24 ] [ nowhere ] [VAULT/VMs]
→ sudo virsh -c qemu:///system net-define Whonix_external*.xml → sudo virsh -c qemu:///system net-define Whonix_external*.xml
@ -142,16 +151,17 @@ So now we have the qcow2 files (take note that it can), so we can proceed follow
make sure you give them 4gb of RAM before launching them, then launch them: make sure you give them 4gb of RAM before launching them, then launch them:
[nihilist@nowhere VMs]$ cat Whonix-Gateway.xml | grep KiB [nihilist@nowhere VMs]$ cat Whonix-Gateway.xml | grep GB
<memory dumpCore="off" unit="KiB">2097152 <memory dumpCore='off' unit='GB'>2</memory>
<currentMemory unit="KiB">2097152 <currentMemory unit='GB'>2</currentMemory>
[nihilist@nowhere VMs]$ cat Whonix-Workstation.xml | grep KiB
<memory dumpCore="off" unit="KiB">4194304 [nihilist@nowhere VMs]$ cat Whonix-Workstation.xml | grep GB
<currentMemory unit="KiB">4194304 <memory dumpCore='off' unit='GB'>8</memory>
<currentMemory unit='GB'>8</currentMemory>
we can automate the VM startup procedure with a simple bashscript like so : If you're like me and you don't want to run those commands to add the VMs into virt-manager, you can automate it with a simple bashscript like so:
[nihilist@nowhere VMs]$ cat refreshvms.sh [nihilist@nowhere VMs]$ cat refreshvms.sh