Do you use debian minimal template for tor stuff?

[kuhbs]

love the post @corporateblush! 3 years is PRETTY hardcode

The whonix thing I’m always up and down with as well.. Do I use (provide in kuhbs, personally don’t use it) whonix now for the tor browser + gateway, or do I just serve (in kuhbs) whonix-workstation and gateway because there is a whole army of ppl making it secure and anonymous.

Whonix eats a lot of ressources just for starting, but I have zero idea about what it does so I always assume its the right way to go.

apt install torbrowser in a debian minimal VM eats a lot less ressources though, but I wouldn’t sell that as “secure and anonymous” either.

How do you handle that @corporateblush ? Do you use debian minimal (or any minimal) template for tor stuff (and how exactly, if I may ask) ?

[corporateblush]

@kuhbs

3 years is PRETTY hardcode

I swear, at least. Mostly, I’ve waited for 4.1 to be released. I’ve decided not to come back to any other OS.

@kuhbs

How do you handle that @corporateblush ?

I use whonix mostly to access this forum and related resources. That’s my threat model. I’m all in security and privacy, so I don’t care when I am identified via tor at all.

“I have nothing to hide” but there’s no need all of them to know how long my d1k is

[kuhbs]

@corporateblush

I swear, at least. Mostly, I’ve waited for 4.1 to be released. I’ve decided not to come back to any other OS.

What did you use before? The only alternative I see is OpenBSD, which is a LOT more stuff to configure imho.

[corporateblush]

@kuhbs

What did you use before?

WIndows as a host with dozens of mostly Linux VirtualBoxes, with Windows boxes as well. Didn’t use Windows host for anything except hosting VirtualBox. Wasn’t satisfied, because I couldn’t find a way to disconnect host from online, while VrtualBoxes to be online.

Researching how that could be achieved, I stumbled upon Qubes OS, so instinctively I anticipated dom0 concept and the rest is history…

[corporateblush]

@kuhbs

apt install torbrowser in a debian minimal VM eats a lot less ressources though, but I wouldn’t sell that as “secure and anonymous” either.

If I understand you well, when using debian-minimal, I use --no-install-recommends, and give no more than 2GB to a dvm-template. More than enough for my use case. Apologize when I didn’t understand your question.

[kuhbs]

My question is essentially “in kuhbs, the enduser thingy for qubes os I’m building, I’d love to have sth less bloated than whonix, so I’m curious if anyone is doing tor without whonix and feeling safe about it all” - but its more of a curiosity thing, I wouldn’t replace whonix bcs god knows what kinda funky settings they found to make things more secure / private. But the topic is still interesting to me, so if you use tor without whonix, I’d be curious in how you set this up.

[corporateblush]

@kuhbs

so I’m curious if anyone is doing tor without whonix and feeling safe about it all”

Ah, now I see. @unman does it:

Tor without Whonix

I don’t understand what your “immediate impression” is based on. Using a Tor proxy with sensible defaults will guarantee Tor connections, and incorporating use of Qubes firewall makes it better than Whonix-gw, which does not allow use of the Qubes firewall. Using Onion repositories is entirely different - it has nothing to do with sending all traffic across Tor. In fact, since the live system can’t be updated, (because it is entirely transient), there’s little point in using repos at all,…

you should also check his

https://qubes.3isec.org/

and his 3isec-qubes-task-manager

We have just hijacked the topic, so I am flagging my post, so the topic could and should be split.

[kuhbs]

now we have our own x) Sorry for hiacking the other one and thanks for cleaning it up @parulin-mod