Actions

Common Whonix ™ CLI Commands

From Whonix

Introduction[edit]

There are a number of common command line operations that are performed by users of all skill levels in the Whonix ™ environment. This wiki page is intended to serve as a quick and handy reference guide for locating these, but it is not a substitute for reading relevant wiki entries that provide detailed instructions for various activities. [1] Additional, useful commands will be added here over time.

Whonix-Gateway[edit]

Table: Whonix-Gateway ™ Common Commands

Category Commands
Change Keyboard Layout 
  • sudo dpkg-reconfigure keyboard-configuration
  • sudo dpkg-reconfigure console-data
Circumvent uwt Wrapper Use [2]
  • /usr/bin/apt-get.anondist-orig
  • /usr/bin/wget.anondist-orig
  • /usr/bin/curl.anondist-orig
  • /usr/bin/gpg.anondist-orig
  • /usr/bin/ssh.anondist-orig
Connection Wizard (Enable/Disable Tor) 
  • lxsudo anon-connection-wizard
  • sudo whonixsetup
Default Username and Password [3]
  • Default username: user
  • Default password: changeme
Important Configuration Files / Folders
  • Important configuration files: 
    • nano /usr/local/etc/torrc.d/50_user.conf
    • nano /etc/whonix_firewall.d/50_user.conf
  • Important configuration folders:
    • /etc/whonix.d/
    • /etc/whonix_firewall.d/
Important Logs 
  • tail -f /var/log/syslog
  • tail -f -n 20 /var/log/sdwdate.log
  • tail -f /var/log/controlportfilt.log
  • tail -f /var/log/tor/log
Nyx: Tor Command Line Monitor [4]
  • Launch Nyx:

nyx

OS Updates 
  • sudo apt-get update && sudo apt-get dist-upgrade
Switch to Clearnet User [5] 
  • sudo su clearnet
sdwdate
  • Restart sdwdate:

sudo /usr/lib/sdwdate/restart_fresh

Time
  • Report the date in UTC:

date -u

  • Manually set the system clock:

sudo date -s "17 FEB 2019 24:00:00" && sudo hwclock -w

  • Randomize the time: [6] [7]
    • clock-random-manual-gui: a randomized clock setting (in UTC) is entered via a GUI.
    • clock-random-manual-cli: a randomized clock setting (in UTC) is entered on the command line. For example: 
      echo "Fri Sep 30 22:20:00 UTC 2016" | /usr/bin/clock-random-manual-cli
Tor
  • Restart Network:

sudo service networking restart

  • Restart Tor:

sudo service tor restart

  • Stop Tor:

sudo systemctl stop tor@default

  • Check the Tor version:

anon-info

  • Check the Tor configuration:

anon-verify
sudo -u debian-tor tor --verify-config

Virtual Consoles
  • Text console: Press Alt + Crtl + F1
    • Additional text consoles: Press Alt + Crtl + F2 or F3 and so on.
  • Graphical console: Press Alt + Crtl + F7
VM Operations
  • Reboot:

sudo reboot

  • Power off:

sudo poweroff

whonixcheck
  • Network Time Synchronization and Tor Connection Check:

whonixcheck

Whonix Version
  • Whonix version:

cat /etc/whonix_version

Whonix-Workstation[edit]

Table: Whonix-Workstation ™ Common Commands

Category Commands
Change Keyboard Layout 
  • sudo dpkg-reconfigure keyboard-configuration
  • sudo dpkg-reconfigure console-data
Circumvent uwt Wrapper Use [2]
  • /usr/bin/apt-get.anondist-orig
  • /usr/bin/wget.anondist-orig
  • /usr/bin/curl.anondist-orig
  • /usr/bin/gpg.anondist-orig
  • /usr/bin/git.anondist-orig
  • /usr/bin/ssh.anondist-orig
Default Username and Password [3]
  • Default username: user
  • Default password: changeme
DNS Resolution Functionality Test 
  • nslookup check.torproject.org
GnuPG (OpenPGP)
  • Retrieve keys (example):

gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89

  • Display key fingerprint (example):

sudo apt-key adv --fingerprint A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89

  • Check file signatures (example):

gpg --verify tor-browser-linux64-8.5_en-US.tar.xz.asc tor-browser-linux64-8.5_en-US.tar.xz

HexChat
  • Reset HexChat identity:

hexchat-reset

Important Configuration Folders and Logs
  • Important configuration folders:
    • /etc/whonix.d/
    • /etc/whonix_firewall.d/
  • Important logs: 
    • tail -f /var/log/syslog
    • tail -f -n 20 /var/log/sdwdate.log
Leak Test [8] 
  • leaktest
Network Restart 
  • sudo service networking restart
OS Updates / Software Installation 
  • sudo apt-get update && sudo apt-get dist-upgrade
  • Install the package-name package.

sudo apt-get install package-name

  • Install the package-name package from Debian backports.

sudo apt-get -t buster-backports install package-name

Time
  • Manually set the system clock:

sudo date -s "17 FEB 2019 24:00:00" && sudo hwclock -w

Tor Browser
  • Important folders:
    • ~/.tb/tor-browser
    • ~/.tb/tor-browser/Browser/TorBrowser/Data/Browser
  • Tor Browser Launcher:

torbrowser

  • Tor Browser in debugging mode:

~/.tb/tor-browser/Browser/start-tor-browser --debug

  • Tor Browser Updater:

update-torbrowser

Virtual Consoles
  • Text console: Press Alt + Crtl + F1
    • Additional text consoles: Press Alt + Crtl + F2 or F3 and so on.
  • Graphical console: Press Alt + Crtl + F7
VM Operations
  • Reboot:

sudo reboot

  • Power off:

sudo poweroff

whonixcheck
  • Network Time Synchronization and Tor Connection Check: [9]

whonixcheck

Whonix Version
  • Whonix version:

cat /etc/whonix_version

Footnotes[edit]

  1. ↑ This entry has been inspired by the relatively unknown whonix command, which already lists common Whonix ™ command line operations.
  2. ↑ 2.0 2.1 Experts / debugging only!
  3. ↑ 3.0 3.1 For both Whonix-Gateway ™ and Whonix-Workstation ™.
  4. ↑ This is a Tor Controller which runs as a console application.
  5. ↑ The whonix DNS notes state:

    Check if DNS resolution is functional:

    • Experts only!
    • This is only a summary.
    • You normally do not need to manually resolve DNS on Whonix-Gateway.
    • Whonix has by default a feature to hide the fact, that you are a Whonix user.

    - This will NOT hide the fact that you are a Tor user from your ISP!
    -- Hiding the fact, that you are a Tor user, is available as an optional configuration.

    • Whonix-Workstations traffic goes through Tors Socks-, Dns- or TransPorts.

    - Whonix-Gateway can only send traffic through Tor as well.
    -- Whonix-Gateway has no longer a Trans- or DnsPort.
    -- For example, apt-get will actually call the uwt wrapper /usr/bin/apt-get.
    -- The apt-get uwt wrapper will with help of uwt and torsocks force also Whonix-Gateways traffic through Tor.
    -- Thus hiding the fact, that you are a Whonix user.

    • Only as either,

    - as clearnet user or
    - after activation of transparent proxying for Whonix-Gateway
    - in /etc/whonix_firewall.d/ or
    - after allowing Whonix-Gateways root sending non-Tor traffic in /etc/whonix_firewall.d/

    • nslookup check.torproject.org
  6. ↑ A non-zero exit codes signifies an error, while 0 means it succeeded.
  7. ↑ Also see: 
    man clock-random-manual-gui
    man clock-random-manual-cli
  8. ↑ See: Leak Tests
  9. ↑ Additionallly in Whonix-Workstation ™, notifications are made regarding OS updates, the Whonix ™ version and news.

No user support in comments. See Support. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See Wiki Comments Policy.


Add your comment
Whonix welcomes all comments. If you do not want to be anonymous, register or log in. It is free.

Random News:

Did you know that anyone can edit the Whonix wiki to improve it?

https | (forcing) onion

Follow: Twitter | Facebook | gab.ai | Stay Tuned | Whonix News

Share: Twitter | Facebook

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation.

Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)

Whonix ™ is a derivative of and not affiliated with Debian. Debian is a registered trademark owned by Software in the Public Interest, Inc.

Whonix ™ is produced independently from the Tor® anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else.

By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix ™ is provided by ENCRYPTED SUPPORT LP. See Imprint.

Retrieved from "http://www.kkkkkkkkkk63ava6.onion/w/index.php?title=Common_Whonix_CLI_Commands&oldid=49575"