here is a way that worked for me.
Not sure if this way is the most secure way…I am still a beginner using QubesOs.
Please note that there is an issue for using exfat whith whonix-16 in Qubes 4.0.x
“Debian-11 template for 4.0 does not support mounting exfat volumes”
“Error mounting exfat in debian 11”
Look for the headline if you need more info.
I do not mess around with a clean templates/cubes , so:
- I will clone whonix-ws-16
- I will create a new whonix-anon-TEST cube where I can run Veracrypt
- Download Veracrypt version from here:
Use this version: veracrypt-1.24-Update7-Debian-11-amd64.deb and save it on a USB stick
Clone the whonix-ws-16 template and name it e.g. whonix-16-ws-TEST, just in case something goes wrong, you can always make a clone again from the original clean whonix-ws installation.
Start the whonix-ws16-Test template, right click, Qubes settings, Application TAB, on the left scroll down until you see “Thunar Filemanager” and add to the right, press apply.
Put in the USB stick, add the USB stick to the whonix-ws-16-TEST template
From the USB stick, move the Veracrypt install program into the downloadfolder of the whonix-ws-16-TEST template
You have to install an extra dependency before you can install Veracrypt
Start terminal in whonix-ws-16-TEST template and type:
sudo apt install libwxgtk3.0-gtk3-dev
- Install Veracrypt
Go to the downloadfolder inside whonix-ws-16-TEST template
in Terminal type: cd ~/Downloads or right click, if you are already in the download folder chose “open terminal here”
type in terminal: sudo dpkg -i veracrypt-1.24-Update7-Debian-11-amd64.deb
You may delete the Veracrypt install program from the whonix-ws-16-TEST template download folder.
Shutdown the whonix-16-ws-TEST template.
Create a new qube based on whonix-ws-16-TEST template
Got to Qube manager, Qube, create new qube
Name: e.g. whonix-anon-TEST
Type: Qube based on a template (AppVM)
Template: chose your newly created Whonix-16-ws-TEST template
Start the whonix-anon-TEST qube
right click, Qubes settings, Application TAB, on the left scroll down until you see “Verycrypt” and add to the right, press apply.
Veracrypt is now in the program list.
I guess it is also possible to download Verycrypt from within Fedora and then copy or move it to the whonix-ws-16-TEST template.
Then you will see an incomming folder in the whonix-ws-16-TEST template, so the use of a USB stick is not nesesary. But I havent tried it.
For any experts reading this little “how to” too, please comment and correct me if I did somthing wrong or missed out on something, could be done better etc.
Any comments are welcome !