I have installed debian-minimal and did some configuration, I want to know the possibility to configure it and use whonix service.
Thereās a thread on the Whonix forum about morphing:
\ 'sudo apt-get install whonix' Part I / Distro-Morphing - Development - Whonix Forum
However the documentation recommends a different approach:
\ How-to: Install the Stable Version of Qubes-Whonix ā¢ 16
ā UPDATE 1 ā
I also found this doc page which specifically mentions:
This is unsupported, not tested by any Whonix ā¢ contributors and might need some work
(and only includes non-qubes meta packages).
\ Whonix ā¢ Installation from Whonix ā¢ APT Repository
You may however be able to install some typical Whonix packages:
\ Whonix ā¢ Packages for Debian Hosts and Whonix ā¢ Host Enhancements
ā UPDATE 2 ā
I just tried morphing a debian-minimal template into a whonix-gw, installing pacakges grepād (for qubes and whonix) from the original wgw template.
This resulted in about ~80-100 Mb of savings of disk space compared to the original wgw template.
Furthermore, after creating a sys-whonix-minimal qube, the anon-wizard failed to connect to the tor network due to a corrupted torcc file.
It might not be a hard fix but the gains may not be substantial and may not warrant the risks involved with a likely misconfiguration.
Iāll try with whonix-ws and report back.
ā UPDATE 3 ā
whonix-ws-16-minimal is about ~200 Mb lighter on disk space than the original, likely due to removing nautilus and possibly missing packages.
Again, I doubt this is enough to outweigh the potential security issues.
2 Likes
Thanks for your information.
I have followed and configured most of the hardening advice and checklist from kicksecure and other sources for my debian minimal.
Although itās about doubled it space, I was considering clone and morphing it to whonix āminimalā. However it cannot get the official update from Whonix teams, right?
Which meta-package did you install? kicksecure-qubes-cli or kicksecure-qubes-gui? I installed the former and gained about ~400MiB over a debian-minimal.
Iām really considering using KS as base template for everything but I need to investigate RAM usage first, so if you find something out let me know.
What do you mean? As long as you add the Whonix repos, you will get whatever update they push:
Iāve installed kicksecure-qubes-cli, lkrg, hardened-malloc, sdwdate, jitterentropy-rngdā¦ and configure anything that I consider as a must. I also installed some packages like āarc-themeā for better using experience, and now the disk space is aboutā¦3.7GB. For RAM usage, I havenāt notice that much yet, but it has to use about 200~MB ram than regular debian (honestly just a guess).
What I mean isā¦ something like: if the teams considered to heavily configured their Whonix-template, then I cannot followed their configuration with just update packages.
Mine is 2.1GB, maybe you installed too many packages.
Just found the minimal requirements: Kicksecure System Requirements
[Non-qubes] Kicksecure ā¢ can be run with 256 MB RAM when not using a desktop environment.