B_ryr
September 24, 2021, 4:36am
2
Does anyone know if whonix 16 for qubes still in test or is it ready to go live and replacing whonix15?
Thank you
ppc
September 24, 2021, 4:37am
3
whonix 16 for qubes is still in testing
adw
September 24, 2021, 6:49am
4
It’s a “staged release.” You can find out more here (and from the comments and links contained in these issues):
opened 05:15PM - 10 Sep 21 UTC
T: enhancement
C: Whonix
P: default
Status:
* ([Non-Qubes-Whonix 16 has been released.](https://forums.whonix.org… /t/whonix-16-has-been-released-debian-11-bullseye-based-for-virtualbox-major-release/12297))
* [Release Upgrade Whonix 15 to Whonix 16](https://www.whonix.org/wiki/Release_Upgrade_Whonix_15_to_Whonix_16) supported.
* Qubes-Whonix 16 images built, tested by me.
* ~~[Qubes-Whonix installation documentation update](https://www.whonix.org/wiki/Qubes/Install) still pending.~~
* Qubes-Whonix 16 release announcement at whonix.org still pending.
* Qubes-Whonix 16 release announcement at qubes-os.org still pending. (Similar to https://github.com/QubesOS/qubes-issues/issues/5128)
Qubes-Whonix 16 images details:
* ~~Waiting for https://github.com/QubesOS/qubes-mgmt-salt-dom0-virtual-machines/pull/40 to be merged at Qubes.~~
* ~~Edit was made using github web interface. I hope that's OK for minor edits?~~
* Images built:
* https://github.com/QubesOS/updates-status/issues/2613 ~~(contains some discussion)~~
* https://github.com/QubesOS/updates-status/issues/2614
Any further Qubes salt changes required or something else?
opened 05:06PM - 10 Sep 21 UTC
T: enhancement
C: Whonix
P: default
Maintainer for Qubes-Whonix here.
Qubes-Whonix `16` for Qubes `R4.1` is not y… et supported by me.
(And Qubes-Whonix `15` won't ever be since Qubes-Whonix `16` release for Qubes `R4.0` is very close. -> https://github.com/QubesOS/qubes-issues/issues/6891)
Some discussion here:
* https://github.com/QubesOS/qubes-issues/issues/6597#issuecomment-839799243
* https://github.com/QubesOS/qubes-issues/issues/6597#issuecomment-839923299
No rush, however please let me know when a Qubes `R4.1` signed ISO installer release (alpha, beta, stable) become available or any estimated release dates. Once that's done I need to sort out my personal Qubes hardware support issues.
I might update this post later. This ticket can be a placeholder, a general ticket usable as link to explain the current status to users, used for discussion...
Related:
* #6597
* #6891
3 Likes
B_ryr
September 24, 2021, 10:44am
5
Great to know and thank you guys.
ppc
October 1, 2021, 12:15am
7
update : whonix 16 for qubes is released!
Whonix : A High Security Method of Surfing the Internet Whonix is a desktop operating system designed for advanced security and privacy. Whonix mitigates the threat of common attack vectors while maintaining usability. Online anonymity is realized...
Reading time: 1 mins 🕑
Likes: 2 ❤
does this make sense to you? I have -15 installed , 1st it says it doesn’t matter, then it says it Does … sigh
Qubes-Whonix ™ 15 to Qubes-Whonix ™ 16 Release Upgrade Note: If Qubes-Whonix ™ 15 is installed and you want to get Qubes-Whonix ™ 16, there is no need to uninstall Qubes-Whonix ™ 15 before proceeding. This is because the new templates (whonix-ws-16, whonix-gw-16) will be installed alongside the old templates (whonix-ws-15, whonix-gw-15).
In that case, after Qubes-Whonix ™ 15 Templates installation, App Qubes previously using Qubes-Whonix ™ 15 templates will keep using them. Templates of any App Qubes are not automatically changed to the newly installed Qubes-Whonix ™ 16 templates. [1] The rationale behind this is to avoid unexpected changes of the Template an App Qube is using without the user’s consent. [2] The user may manually change any Template still using Qubes-Whonix ™ 15 Templates to the Qubes-Whonix ™ 16 Templates. [3]
If you are already running any version of Qubes-Whonix ™, it must be uninstalled before a complete (re-)installation is performed. This applies to those who:
Selected Qubes-Whonix ™ auto-configuration when Qubes was installed.
Installed Qubes-Whonix ™ after installing the Qubes platform.
Before re-installation, back up any existing data stored in Whonix VMs.
In summary, three options are available (listed in order of preference):
Uninstall Qubes-Whonix ™ and then Install Qubes-Whonix ™; OR
Reinstall the Whonix ™ Template; OR
Release Upgrade Whonix 15 to Whonix 16
Yes all the 3 options they listed was a bit confusing. This is what I did to migrate from 15 to 16. The last script takes a long time with no progress window.
sudo qubes-dom0-update
sudo nano /srv/formulas/base/virtual-machines-formula/qvm/whonix.jinja
change 15 to 16
save the file
sudo qubesctl state.sls qvm.anon-whonix
It seems to work now. I don’t seem to see any dom0 errors anymore.
ppc
October 2, 2021, 1:17am
11
yes, i already don’t see any errors
so you didn’t uninstall anything?
think I’ll wait till its less vague
I manually deleted the 15 templates and 15 AppVMs. The script creates new 16 AppVMs, except you might have to manually attach sys-whonix to whonix-gw-16. You could also check the global settings if there’s anything that needs updating to 16. As far as I know these are simple changes.
I think the 3 command lines above is the less vague route. You might not need to do step 2. When I checked, whonix.jinja was already updated to 16 through regular updates.
sounds like this one:
Release Upgrade Whonix 15 to Whonix 16
B_ryr
October 2, 2021, 8:51am
16
@joe.blough thanks, I will be doing what you what you posted!!
sudo qubes-dom0-update
sudo nano /srv/formulas/base/virtual-machines-formula/qvm/whonix.jinja
change 15 to 16
save the file
sudo qubesctl state.sls qvm.anon-whonix
Yes they made it confusing and they really didnt need too. I had to reread their pricess a few times.
The last script takes a long time with no progress window… So how do you know when it’s done then??
I manually deleted the 15 templates and 15 AppVMs…So you did this after you upgraded to 16??
@adw thanks for you’re continued support.
Is it still valid that whonix 16 is not compatible with Qubes 4.1? I tried a quick install on my 4.1, and failed, using these instructions:
sudo qubes-dom0-update
sudo nano /srv/formulas/base/virtual-machines-formula/qvm/whonix.jinja
change 15 to 16
save the file
`sudo qubesctl state.sls qvm.anon-whonix
Does anyone reading this have guidance?
thanks in advance.
partially solved. It seems that some have found a work around:
opened 11:05PM - 01 Oct 21 UTC
T: bug
C: Whonix
P: default
diagnosed
### Qubes OS release
Qubes 4.1
System fully updated using testing repos
###… Brief summary
After the Whonix 16 announcement, I decided to install the new version using the salt command following the [whonix installation process](https://www.whonix.org/wiki/Qubes/Install). But, when I tried to use the salt command, it returned me multiple errors involving dnf.
### Steps to reproduce
Use the salt command:
```sh
sudo qubesctl state.sls qvm.anon-whonix
```
### Expected behavior
Install the Whonix 16 stack including the WS and GW + sys-whonix and anon-whonix
### Actual behavior
Command fail with the following result:
```
[User@dom0 ~]$ sudo qubesctl state.sls qvm.anon-whonix
[ERROR ] Command 'qvm-template' failed with return code: 1
[ERROR ] stderr: [Qrexec] /usr/lib/qubes/qvm-template-repo-query: line 40: dnf: command not found
ERROR: qrexec call 'qubes.TemplateSearch' failed.
[ERROR ] retcode: 1
[ERROR ] Failed to install template whonix-ws-16. Additional info follows:
[Qrexec] /usr/lib/qubes/qvm-template-repo-query: line 40: dnf: command not found
ERROR: qrexec call 'qubes.TemplateSearch' failed.
[ERROR ] ====== ['features'] ======
Virtual Machine does not exist!
====== ['tags'] ======
[SKIP] Skipping due to previous failure!
[ERROR ] Command 'qvm-template' failed with return code: 1
[ERROR ] stderr: [Qrexec] /usr/lib/qubes/qvm-template-repo-query: line 40: dnf: command not found
ERROR: qrexec call 'qubes.TemplateSearch' failed.
[ERROR ] retcode: 1
[ERROR ] Failed to install template whonix-gw-16. Additional info follows:
[Qrexec] /usr/lib/qubes/qvm-template-repo-query: line 40: dnf: command not found
ERROR: qrexec call 'qubes.TemplateSearch' failed.
[ERROR ] ====== ['features'] ======
Virtual Machine does not exist!
====== ['tags'] ======
[SKIP] Skipping due to previous failure!
local:
----------
ID: template-whonix-ws-16
Function: qvm.template_installed
Name: whonix-ws-16
Result: False
Comment: Failed to install template whonix-ws-16. Additional info follows:
[Qrexec] /usr/lib/qubes/qvm-template-repo-query: line 40: dnf: command not found
ERROR: qrexec call 'qubes.TemplateSearch' failed.
Started: 23:09:11.795985
Duration: 320.258 ms
Changes:
----------
ID: whonix-ws-tag
Function: qvm.vm
Name: whonix-ws-16
Result: False
Comment: ====== ['features'] ======
Virtual Machine does not exist!
====== ['tags'] ======
[SKIP] Skipping due to previous failure!
Started: 23:09:12.116653
Duration: 32.332 ms
Changes:
----------
ID: whonix-ws-update-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.UpdatesProxy
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.UpdatesProxy is in correct state
Started: 23:09:12.152102
Duration: 8.278 ms
Changes:
----------
ID: whonix-get-date-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.GetDate
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.GetDate is in correct state
Started: 23:09:12.160480
Duration: 1.441 ms
Changes:
----------
ID: template-whonix-gw-16
Function: qvm.template_installed
Name: whonix-gw-16
Result: False
Comment: Failed to install template whonix-gw-16. Additional info follows:
[Qrexec] /usr/lib/qubes/qvm-template-repo-query: line 40: dnf: command not found
ERROR: qrexec call 'qubes.TemplateSearch' failed.
Started: 23:09:12.162003
Duration: 324.309 ms
Changes:
----------
ID: whonix-gw-tag
Function: qvm.vm
Name: whonix-gw-16
Result: False
Comment: ====== ['features'] ======
Virtual Machine does not exist!
====== ['tags'] ======
[SKIP] Skipping due to previous failure!
Started: 23:09:12.486689
Duration: 31.726 ms
Changes:
----------
ID: whonix-gw-update-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.UpdatesProxy
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.UpdatesProxy is in correct state
Started: 23:09:12.518537
Duration: 2.085 ms
Changes:
----------
ID: fedora-33-dvm
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'fedora-33-dvm' already exists.
====== ['prefs'] ======
[SKIP] template_for_dispvms: True
[SKIP] label : red
====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'appmenus-dispvm' = Enabled
Started: 23:09:12.520697
Duration: 237.914 ms
Changes:
----------
ID: echo -e 'firefox.desktop\nxterm.desktop' | qvm-appmenus --set-whitelist=- --update fedora-33-dvm
Function: cmd.run
Result: True
Comment: Command "echo -e 'firefox.desktop\nxterm.desktop' | qvm-appmenus --set-whitelist=- --update fedora-33-dvm" run
Started: 23:09:12.760876
Duration: 1025.453 ms
Changes:
----------
pid:
45214
retcode:
0
stderr:
fedora-33-dvm: Creating appmenus
fedora-33-dvm: Removing appmenu '/home/User/.local/share/qubes-appmenus/fedora-33-dvm/apps/org.qubes-os.qubes-vm-settings.fedora-33-dvm.desktop'
sys-firewall: Creating appmenus
sys-net: Creating appmenus
sys-usb: Creating appmenus
stdout:
----------
ID: sys-net
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-net None
Started: 23:09:13.786724
Duration: 184.04 ms
Changes:
----------
ID: sys-firewall
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-firewall None
Started: 23:09:13.971179
Duration: 189.252 ms
Changes:
----------
ID: sys-whonix
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-whonix None
Started: 23:09:14.160825
Duration: 179.113 ms
Changes:
----------
ID: whonix-ws-16-dvm
Function: qvm.vm
Result: False
Comment: One or more requisite failed: qvm.template-whonix-ws.template-whonix-ws-16
Started: 23:09:14.341222
Duration: 0.003 ms
Changes:
----------
ID: qvm-appmenus --update whonix-ws-16-dvm
Function: cmd.run
Result: False
Comment: One or more requisite failed: qvm.whonix-ws-dvm.whonix-ws-16-dvm
Started: 23:09:14.341298
Duration: 0.001 ms
Changes:
----------
ID: anon-whonix
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check anon-whonix None
Started: 23:09:14.341333
Duration: 180.184 ms
Changes:
Summary for local
------------
Succeeded: 9 (changed=1)
Failed: 6
------------
Total states run: 15
Total run time: 2.716 s
DOM0 configuration failed, not continuing
```
Some information:
I update dom0 and templates using sys-whonix
After I checked the concerned file "qvm-template-repo-query", it seems to use dnf while it's not even available on my sys-whonix VM.
Changing it to yum tells me this: `no such option: --repoid` / Changing it to rpm tells me this: `rpm: --repoid=qubes-templates-community: unknown option`
I don't know if there's a problem with my sys-whonix itself of if salt should not behave like that.
Also, I tried all the troubleshooting tips from the Whonix installation page without success.
It spits out a log of the changes on the terminal when it’s done. I made a backup of 15 and 16, waited for a day and deleted 15.
estoner:
@adw thanks for you’re continued support.
Is it still valid that whonix 16 is not compatible with Qubes 4.1? I tried a quick install on my 4.1, and failed, using these instructions:
I’m on 4.04. I don’t know if there are separate 4.1 instructions.
B_ryr
October 2, 2021, 5:20pm
20
@joe.blough No I have not done the upgrade yet, still using old 15. But I will this weekend sometime.
My plan is upgrade to 16 but still use 15 for a day or so until I feel that it is good to fully stitch over.
But again thanks fo the sudo qubes-dom0-update
sudo nano /srv/formulas/base/virtual-machines-formula/qvm/whonix.jinja
change 15 to 16
save the file
sudo qubesctl state.sls qvm.anon-whonix
One more thing, I do “delete” the old “anon-whonix” after upgrade or does it switch over to new version?
It creates a new one. You can manually switch over the old if you don’t want to redo the customizations.