Remote into Dom0?

Insurgo · October 15, 2022, 6:27pm

Maybe not accessible to everyone: Qubes-remote-support - New features and support for Whonix 16

But quote from there:

Qubes-remote-support - New features and support for Whonix 16

Considering remote support implies a high level of trust from the user to remote administrator, something like https://www.howtoforge.com/sharing-terminal-sessions-with-tmux-and-screen#sharing-terminal-sessions-between-two-different-accounts would be more then welcome, with the initial project already dealing with the secret generation, establishment of hidden tor service etc. The challenge here being to actually properly limit that shared terminal session prior of having the user land in that shared terminal, and wait for the remote admin to land in that same shared session.

@adrelanos @marmarek : I lost/forgot the conclusions that were said on such shared terminal session sharing, but last time I tested the implementation above, screen delays, and waiting time for the background magic to establish the initial connection were kinda dissuasive.

Those improvements would highly reduce trust implied from remote support third parties, where that “wifi slider” could be turned off by support requester at any moment, and where dom0 screenshots from the support requester would permit some kind of traceability of what happened along the support session, alongside of logs.
But those were not considered under Nlnet grant accomplished work, and leaves place for further improvements.

Otherwise documentation is here:

And side discussion for paid support is here: