Anbox - Run Android Applications and Games

From Whonix
Jump to navigation Jump to search

Anbox apps short.png
Android OS Icon

Introduction and Installation[edit]

Community Support Only!:
Info

Community Support Only means Whonix ™ developers are unlikely to provide free support for wiki chapters or pages with this tag. See Community Support for further information, including implications and possible alternatives.

Since Whonix ™ is based on Kicksecure ™, the user can follow the instructions on Kicksecure logo Anbox The Web Archive Onion Version on the Kicksecure ™ website.

Other notes for whonix specific can be found below.

Anbox Configuration[edit]

Derivative Specific[edit]

Disabling Whonix-Workstation ™ Firewall is unfortunately required. Otherwise there would be no network access. [1]

Ambox warning pn.svg.png Warning:

1. Inside Whonix-Workstation ™.

(Qubes-Whonix ™: inside StandaloneVM (better!) or Template).

sudo systemctl mask whonix-firewall

2. Disable systemcheckarchive.org in Whonix-Workstation ™ Firewall.

Open file /etc/systemcheck.d/50_user.conf in an editor with root rights.

(Qubes-Whonix ™: In Template)

This box uses sudoedit for better security. This is an example and other tools could also achieve the same goal. If this example does not work for you or if you are not using Whonix ™, please refer to this link.

sudoedit /etc/systemcheck.d/50_user.conf

Paste.

systemcheck_skip_functions+=" check_whonix_firewall_systemd_status "

Save.

3. Reboot.

This is required to unload Whonix-Workstation ™ firewall rules and to have Anbox load its firewall rules.

sudo reboot

Android x86 as a Workstation[edit]

There are both distinct advantages and disadvantages of running Android applications in Android x86 Workstation. [3]


Table: Android x86 Workstation Advantages and Disadvantages

Category Notes
Bootloader / Ramdisk It is possible to use Magisk to achieve root permissions and hide root from applications on Android x86. [4]
Flexibility
  • It is possible to use adb if Android x86 uses the same internal network as the Gateway and Workstation. [5]
  • Root access - Android x86 has a pre-installed superuser binary and manager so root access works out of the box. Applications with root access will work without any additional setup.
Networking Android x86 provides a virtual Wi-Fi interface (wlan0) so applications think that a real Wi-Fi connection is established (Anbox uses a bridge network interface).
Operating System The full Android stack implemented as Android x86 is a full operating system which requires hardware virtualization.
Security This configuration is less secure than utilizing a Whonix-Workstation ™. [6]
Software Any version of Android from 4.x to 9.x can be installed.
Speed This configuration is slower than anbox installation as Android x86 VM does not provide any type of Guest Additions meaning no graphic card drivers are supported.

To check running anbox within kicksecure (same applied for Whonix-Workstation ™) check Anbox inside Kicksecure ™ Advantages and Disadvantagesarchive.org

Forum Discussion[edit]

Footnotes[edit]

  1. ↑ This is because Anbox comes with its own bridged network. Whitelisting that interface in Whonix-Workstation ™ firewall is undocumented and might require source code modifications. Patches are Welcome.
  2. ↑
  3. ↑ https://forums.whonix.org/t/integrate-anbox-into-whonix-workstation/9642archive.org
  4. ↑ Some individuals have already achieved this.
  5. ↑ Also, it may be possible to run ssh-server on Whonix-Workstation ™ and connect the Android x86 through Termux or similar.
  6. ↑ Although it may have more flexibility, as static IP connections on the Android x86 Workstation have been accomplished.
Retrieved from "https://www.whonix.org/w/index.php?title=Anbox&oldid=90967"