Actions

Bisq - The P2P Exchange Network

From Whonix

Ambox warning pn.svg.png Experimental! Testers only!


Introduction[edit]

TODO: write short introduction to Bisq

Ambox notice.png This application requires incoming connections through a Tor onion service. Supported Whonix-Gateway ™ modifications are therefore necessary for full functionality; see instructions below.

For better security, consider using Multiple Whonix-Gateway ™s and Multiple Whonix-Workstation ™s. In any case, Whonix ™ is the safest choice for running it. [1]

Installation[edit]

Whonix-Gateway ™ Installation Steps[edit]

onion-grater profile[edit]

On Whonix-Gateway ™.

Extend onion-grater Whitelist

On Whonix-Gateway ™.

Create a new directory. [2] 

sudo mkdir -p /usr/local/etc/onion-grater-merger.d/

Symlink the onion-grater profile to the onion-grater settings folder. 

sudo ln -s /usr/share/doc/onion-grater-merger/examples/40_bisq.yml /usr/local/etc/onion-grater-merger.d/

Restart onion-grater. 

sudo service onion-grater restart

Whonix-Workstation ™ Installation Steps[edit]

Firewall Settings[edit]

Modify the Whonix-Workstation ™ (anon-whonix) user firewall settings and reload them.

Modify Whonix-Workstation ™ User Firewall Settings

Note: If no changes have yet been made to Whonix Firewall Settings, then the Whonix User Firewall Settings File /etc/whonix_firewall.d/50_user.conf appears empty (because it does not exist). This is expected.

If using Qubes-Whonix ™, complete these steps.
In Whonix-Workstation ™ AppVM.

Make sure folder /rw/config/whonix_firewall.d exists. 

sudo mkdir -p /rw/config/whonix_firewall.d

Open /rw/config/whonix_firewall.d/50_user.conf with root rights. 

lxsudo mousepad /rw/config/whonix_firewall.d/50_user.conf

If using a graphical Whonix-Workstation ™, complete these steps.

Start Menu → Applications → Settings → User Firewall Settings

If using Non-Qubes-Whonix ™, complete this step.

In Whonix-Workstation ™, open the whonix_firewall configuration file in an editor. 

sudo nano /etc/whonix_firewall.d/50_user.conf

For more help, press on Expand on the right.

Note: This is for informational purposes only! Do not edit /etc/whonix_firewall.d/30_default.conf

The Whonix Global Firewall Settings File /etc/whonix_firewall.d/30_default.conf contains default settings and explanatory comments about their purpose. By default, the file is opened read-only and is not meant to be directly edited. Below, it is recommended to open the file without root rights. The file contains an explanatory comment on how to change firewall settings. 

## Please use "/etc/whonix_firewall.d/50_user.conf" for your custom configuration,
## which will override the defaults found here. When Whonix is updated, this
## file may be overwritten.

See also Whonix modular flexible .d style configuration folders.

To view the file, follow these instructions.

If using Qubes-Whonix ™, complete these steps.

Qubes App Launcher (blue/grey "Q") → Template: whonix-ws-15 → Whonix Global Firewall Settings

If using a graphical Whonix-Workstation ™, complete these steps.

Start Menu → Applications → Settings → Global Firewall Settings

If using Non-Qubes-Whonix ™, complete this step.

In Whonix-Workstation ™, open the whonix_firewall configuration file in an editor. 

nano /etc/whonix_firewall.d/30_default.conf

Add. TODO: EXTERNAL_OPEN_ALL=true is non-ideal. 

EXTERNAL_OPEN_ALL=true

Save.

Reload Whonix-Workstation ™ Firewall.

If you are using Qubes-Whonix ™, complete the following steps.

Qubes App Launcher (blue/grey "Q") → Whonix-Workstation ™ AppVM (commonly named anon-whonix) → Reload Whonix Firewall

If you are using a graphical Whonix-Workstation ™, complete the following steps.

Start Menu → Applications → System → Reload Whonix Firewall

If you are using a terminal-only Whonix-Workstation ™, run. 

sudo whonix_firewall

Get the Signing Key[edit]

On Whonix-Workstation ™.

Download. 

scurl-download https://github.com/bisq-network/exchange/releases/download/v0.8.0/29CDFD3B.asc

Check fingerprint. 

gpg --show-key --with-fingerprint 29CDFD3B.asc

Should show the following. 

pub   rsa4096/0xCD5DC1C529CDFD3B 2017-07-27 [SC] [expires: 2021-07-27]
      Key fingerprint = CB36 D7D2 EBB2 E35D 9B75  500B CD5D C1C5 29CD FD3B
uid                              Christoph Atteneder <christoph.atteneder@gmail.com>
sub   rsa4096/0x1E0B7BDFA4D6EC0A 2017-07-27 [E] [expires: 2021-07-27]

Import signing key. 

gpg --import 29CDFD3B.asc

Should show the following. 

gpg: keybox '/home/user/.gnupg/pubring.kbx' created
gpg: /home/user/.gnupg/trustdb.gpg: trustdb created

gpg: key 0xCD5DC1C529CDFD3B: public key "Christoph Atteneder <christoph.atteneder@gmail.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1

Download[edit]

On Whonix-Workstation ™.

Download bisq. 

scurl-download https://github.com/bisq-network/bisq/releases/download/v1.1.1/Bisq-64bit-1.1.1.deb

Download OpenPGP signature. 

scurl-download https://github.com/bisq-network/bisq/releases/download/v1.1.1/Bisq-64bit-1.1.1.deb.asc

Verification[edit]

On Whonix-Workstation ™.

Verify OpenPGP signature. 

gpg --verify Bisq*.asc

Should show. 

gpg: assuming signed data in 'Bisq-64bit-0.8.0.deb'
gpg: Signature made Wed 22 Aug 2018 10:50:09 AM UTC
gpg:                using RSA key CB36D7D2EBB2E35D9B75500BCD5DC1C529CDFD3B
gpg:                issuer "christoph.atteneder@gmail.com"
gpg: Good signature from "Christoph Atteneder <christoph.atteneder@gmail.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: CB36 D7D2 EBB2 E35D 9B75  500B CD5D C1C5 29CD FD3B

Tor over Tor Prevention[edit]

On Whonix-Workstation ™.

Avoiding Tor over Tor.

Create folder /home/user/.local/share/Bisq/btc_mainnet/tor/. 

mkdir -p /home/user/.local/share/Bisq/btc_mainnet/tor/

Create a dummy Tor binary /home/user/.local/share/Bisq/btc_mainnet/tor/tor. 

sudo touch /home/user/.local/share/Bisq/btc_mainnet/tor/tor

xdg-desktop-menu bug workaround[edit]

On Whonix-Workstation ™.

Workaround for some bug. [3] 

sudo mkdir -p /usr/share/desktop-directories/

Install[edit]

On Whonix-Workstation ™.

Install bisq. 

sudo dpkg -i Bisq*.deb

Usage[edit]

On Whonix-Workstation ™.

Start bisq. 

/opt/Bisq/Bisq --torControlPort 9051 --torControlPassword notrequired --socks5ProxyBtcAddress=127.0.0.1:9050 --useTorForBtc=true

If fonts are too small, you could alternatively use the following command. [4] 

GDK_SCALE=2 /opt/Bisq/Bisq --torControlPort 9051 --torControlPassword notrequired --socks5ProxyBtcAddress=127.0.0.1:9050 --useTorForBtc=true

Forum Discussion[edit]

https://forums.whonix.org/t/bisq-the-p2p-exchange-network/4953

Footnotes[edit]

  1. ↑ Security considerations:
    • By using Whonix ™, additional protections are in place for greater security.
    • This application requires access to Tor's control protocol.
    • In the Whonix ™ context, Tor's control protocol has dangerous features. The Tor control command GETINFO address reveals the real, external IP of the Tor client.
    • Whonix ™ provides onion-grater, a Tor Control Port Filter Proxy - filtering dangerous Tor Control Port commands.
    • When this application is run inside Whonix ™ with an onion-grater whitelist extension, this will limit application rights to Tor control protocol access only. Non-whitelisted Tor control commands such as GETINFO address are rejected by onion-grater in these circumstances.
    • During the application's normal operations it should not attempt to use dangerous Tor control commands such as GETINFO address. In the event the application or Whonix-Workstation ™ are compromised, this command would be rejected.
    • In comparison, if the application is run on a non-Tor focused operating system like Debian, it will have unlimited access to Tor's control protocol (a less secure configuration).
    • If the (non-)Whonix platform is used to host onion services, then running applications are more vulnerable to attacks against the Tor network compared to when Tor is solely used as a client; see also Onion Services Security.
    In conclusion, Whonix ™ is the safest and correct choice for running this application.
  2. ↑ Using /usr/local/etc/onion-grater-merger.d/ because that onion-grater settings folder is persistent in Qubes-Whonix ™ TemplateBased ProxyVMs i.e. Whonix-Gateway ™ (commonly called sys-whonix). Non-Qubes-Whonix ™ users could also utilize /etc/onion-grater-merger.d/. Qubes-Whonix ™ users could also utilize /etc/onion-grater-merger.d/ but then /etc/onion-grater-merger.d/ must be made persistent, which means doing this procedure inside the Whonix-Gateway ™ TemplateVM (commonly called whonix-gw-15) and then restarting the Whonix-Gateway ™ ProxyVM or using bind-dirs. Both techniques are more complicated than simply using /usr/local/etc/onion-grater-merger.d/, since it is persistent either way. Further, it even allows multiple Whonix-Gateway ™ ProxyVMs based on the same Whonix-Gateway ™ TemplateVM; for example, one Whonix-Gateway ™ ProxyVM extending and relaxing onion-grater's whitelist and the other Whonix-Gateway ™ ProxyVM having the default onion-grater whitelist which is more restrictive.
  3. ↑ https://github.com/bisq-network/bisq/issues/848
  4. ↑ Same as above but prepend GDK_SCALE=2. https://github.com/bisq-network/bisq/issues/1425

No comments for now due to spam. Use Whonix forums instead.

Random News:

Have you contributed to Whonix ™? If so, feel free to add your name and highlight what you did on the Whonix authorship page.

https | (forcing) onion

Follow: Twitter | Facebook | gab.ai | Stay Tuned | Whonix News

Share: Twitter | Facebook

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation.

Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)

Whonix ™ is a derivative of and not affiliated with Debian. Debian is a registered trademark owned by Software in the Public Interest, Inc.

Whonix ™ is produced independently from the Tor® anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else.

By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix ™ is provided by ENCRYPTED SUPPORT LP. See Imprint.

Retrieved from "https://www.whonix.org/w/index.php?title=Bisq&oldid=49011"