Whonix™ for Debian

From Whonix
Jump to navigation Jump to search
Debian Logo

Can I use Whonix for Debian inside VirtualBox ? Yes!

GUI

Whonix Xfce in VirtualBox

  • Whonix with Xfce Graphical User Interface.
  • This version of Whonix is designed to run inside VirtualBox.
  • Beginner-friendly and easy to use.
  • It is the right choice for most users.

Please follow these steps to install Whonix Xfce for VirtualBox.

Download Whonix Xfce

Whonix Xfce is available for Windows, MacOS and Linux

Download Whonix Xfce (FREE!) WINDOWS OSX LINUX link=http://download.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/ova/{{{project_version}}}/Whonix-Xfce-{{{project_version}}}.ova|alt=onion link

Optional: Digital signature verification.

Version: {{{project_version}}}

  • Digital signatures: A tool enhancing download security. Commonly used across the internet.
  • Learn more: Curious? Learn more about digital software signatures.
  • Optional: Digital signatures are optional. If you've never used them before, there might be no need to start now.
  • No worries: New to digital software signatures? It's okay, no need to worry.
  • Not a requirement: Not mandatory for using Whonix, but an extra security measure for advanced users.

Download Whonix Xfce The Web Archive Onion Version

OpenPGP

OpenPGP Signature The Web Archive Onion Version
Verify images using this Signing Key

Download Whonix VirtualBox Developer OpenPGP Key

signify

SHA-512 checksum file The Web Archive Onion Version
SHA-512 checksum file signify signature The Web Archive Onion Version
Verify images using this Signing Key

Download Whonix VirtualBox signify Key

How to verify the Whonix Images : Whonix virtual machine images are signed by Whonix developer Patrick Schleizer using OpenPGP and signify.

Do you already how to perform digital software verification using an OpenPGP and/or signify key?

Install VirtualBox

Download and install VirtualBox for your operating system.

Windows

Download VirtualBox for Windows (FREE!) WINDOWS

Optional: Digital signature verification.

VirtualBox for Windows is not signed with OpenPGP / gpg. It is signed with authenticode.

After downloading the VirtualBox installer exe and starting it, the user should verify that sure that Verified publisher: is Oracle Corporation.

Figure: Windows signature signature verification window for VirtualBox

Advanced users might wish to learn more about Kicksecure logo Authenticode (Windows Digital Software Signatures) The Web Archive Onion Version to perform a deeper verification.

macOS

Download VirtualBox for macOS (FREE!) OSX

Optional: Digital signature verification.

VirtualBox for macOS is not signed with OpenPGP / gpg. It is notarized for macOS's gatekeeper. See also Apple's official documentation Safely open apps on your Macarchive.org.

Ubuntu

Ubuntu host operating systems:

Chose an option from the following table. Choose either Option A) or Option B).

Option Name Details
A) Automated VirtualBox Installation Ubuntu users could alternatively use the Whonix Linux Installer for VirtualBox. In this case, this wiki page can be completely ignored. No other steps from this wiki page need to be applied because the automated installer will handle everything.
B) Manual VirtualBox Installation Follow the instructions below.

Tested on October 2022 using Ubuntu version 22.04. Older versions are not recommended.

Command Line (All Users)

1. On the host.

Open a terminal.

2. Update the package lists.

sudo apt update

3. Install VirtualBox and Linux kernel headers.

sudo apt install --no-install-recommends virtualbox-qt linux-headers-generic

4. Add your current user to group vboxusers. [1]

sudo adduser $(whoami) vboxusers

5. Done.

The procedure of installing the VirtualBox host software is complete.

Software Center (only if not using SecureBoot)

Ubuntu Software Center can be used to install VirtualBox. The process is similar to installation of most other applications.

This only works for users with computers that do not have "SecureBoot" enabled. If the user's computer is using "SecureBoot" the user need to either disable "SecureBoot" in the BIOS or use the command line based instructions. [2]

1. Open the start menu.

2. Click on the Ubuntu Software Center icon.

Figure: Ubuntu Software Center icon

Ubuntu Software icon

3. Click on the magnifying glass to search. → Type virtualbox. → Press enter. → In the search results, click on VirtualBox.

Figure: Ubuntu Software Center - Search For VirtualBox

search for virtualbox

4. Click on Install and wait.

Figure: Ubuntu Software Center Search Result

Install Virtualbox

5. Installation of VirtualBox has been completed.

When the installation has completed, the install icon changes to the uninstall icon. Do not click the uninstall button.

Figure: Ubuntu Software Center - VirtualBox has been installed

Uninstall Virtualbox

6. Click on Show Applications. → Click on Virtual Box start the VirtualBox graphical user interface (GUI).

Figure: Ubuntu Software Center #4

Show Applications

7. Done.

The procedure of installing and starting VirtualBox is complete.

Debian

.

Debian host operating systems:

Chose an option from the following table. Choose either Option A) or Option B).

Option Name Details
A) Automated VirtualBox Installation Debian users could alternatively use the Whonix Linux Installer for VirtualBox. In this case, this wiki page can be completely ignored. No other steps from this wiki page need to be applied because the automated installer will handle everything.
B) Manual VirtualBox Installation Follow the instructions below.

Select your Debian release.

Debian bookworm (stable) or bullseye (oldstable)

To acquire the Recommended VirtualBox version tested with Whonix, package virtualbox-qt should be installed from Debian fasttrack repositoryarchive.org according to the following instructions. [3]

1. On the host.

Open a terminal.

2. Update the package lists.

sudo apt update

3. Install the Debian fasttrack signing key.

sudo apt install --no-install-recommends fasttrack-archive-keyring

4. Add the Debian fasttrack repository.

echo 'deb https://fasttrack.debian.net/debian/ bookworm-fasttrack main contrib non-free' | sudo tee /etc/apt/sources.list.d/fasttrack.list

5. Add Debian the backports repository. [4]

echo 'deb https://deb.debian.org/debian bookworm-backports main contrib non-free' | sudo tee /etc/apt/sources.list.d/backports.list

6. Update the package lists again. [5]

sudo apt update

7. Install VirtualBox and Linux kernel headers.

sudo apt install --no-install-recommends virtualbox-qt linux-headers-$(dpkg --print-architecture)

8. Add your current user to group vboxusers. [1]

sudo adduser $(whoami) vboxusers

9. Done.

The procedure of installing the VirtualBox host software is complete.

Debian Testing

VirtualBox can be installed by adding the Debian unstable (sid) repository and APT pinning. The details of this are unspecific to Whonix and undocumented.

Debian Unstable

VirtualBox can be installed by adding the Debian unstable (sid) repository.

sudo apt update

sudo apt install --no-install-recommends virtualbox-qt linux-headers-$(dpkg --print-architecture)

sudo adduser $(whoami) vboxusers

The details of this are unspecific to Whonix and undocumented.

Other Debian Releases

Other Debian releases might work, but this is untested. In case of other Debian release:
See also "Linux host operating systems" below.
See also "Linux" on the right.

Kicksecure

Kicksecure™ host operating systems:

Chose an option from the following table. Choose either Option A) or Option B).

Option Name Details
A) Automated VirtualBox Installation Kicksecure™ users could alternatively use the Whonix Linux Installer for VirtualBox. In this case, this wiki page can be completely ignored. No other steps from this wiki page need to be applied because the automated installer will handle everything.
B) Manual VirtualBox Installation Follow the instructions below.

Instructions for Kicksecure™ are simpler than instructions for Debian. [6]

1. On the host.

Open a terminal.

2. Update package lists.

sudo apt update

3. Install VirtualBox and Linux kernel headers.

sudo apt install --no-install-recommends virtualbox-qt

4. Add your current user to group vboxusers. [1]

sudo adduser $(whoami) vboxusers

5. Done.

The procedure of installing the VirtualBox host software is complete.

Linux

Hosts using a non-Debian operating system:

  • Install VirtualBox as per the normal mechanism for your Linux distribution. No special instructions for Whonix are required. The installation of a recent VirtualBox host software is unspecific to Whonix. Consult the documentation of your Linux distribution.
  • Whonix has has been tested with, expects VirtualBox version latest.
  • For example the outdated VirtualBox version 5.2.18 is incompatible.

info General recommendations for users using Linux as a host operating system:

  • Linux kernel version:
    • The recommended host Linux kernel version is the same version that Debian bookworm is using, see linux-image-amd64archive.org.
    • Newer host Linux kernel versions are likely to break VirtualBox VMs in many ways since these are unsupported by VirtualBox. [7]
  • Host operating system: The recommended host Linux distributions are:
    • preferebly the stable version of Kicksecure™ 17, or
    • Debian Linuxarchive.org version bookworm.

Import Whonix into VirtualBox

For Whonix VirtualBox import instructions, please press on expand on the right.

Follow these steps to import Whonix into VirtualBox. Click images to enlarge

  • (1) Start VirtualBox

    (1) Start VirtualBox

  • (2) Click on File then choose Import Appliance...

    (2) Click on File then choose Import Appliance...

  • (3) Navigate and select Whonix image and press next

    (3) Navigate and select Whonix image and press next

  • (4) Do NOT change anything! Just click on Import

    (4) Do NOT change anything! Just click on Import

  • (5) Then press Agree

    (5) Then press Agree

  • (6) Wait until Whonix .ova has been imported

    (6) Wait until Whonix .ova has been imported

  • (7) Now start Whonix-Gateway and Whonix-Workstation

    (7) Now start Whonix-Gateway and Whonix-Workstation

Miscellaneous

There are also Video Tutorials.

If you still need help, please check the Support page.

For command line import instructions, see footnote. [8]

Start Whonix

Starting Whonix is simple:

  1. Start VirtualBox
  2. Double-click the Whonix-Gateway™ and Whonix-Workstation™

Support the Future of Whonix

Whonix is made possible thanks to the donation of people like you. ❤️

Please support the Whonix development with a donation.

CLI

Whonix CLI in VirtualBox

  • Whonix with command line interface (CLI).
  • This version of Whonix is designed to run inside VirtualBox.
  • Whonix with CLI is a version suited for advanced users -- those who want Whonix without a graphical user interface (GUI). Everyone else should install the user-friendly Whonix VirtualBox with GUI Xfce.

Please follow these steps to install Whonix CLI for VirtualBox.

Download Whonix CLI

Whonix CLI is available for Windows, MacOS and Linux

Download Whonix CLI (FREE!) WINDOWS OSX LINUX link=http://download.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/ova/{{{project_version}}}/Whonix-CLI-{{{project_version}}}.ova|alt=onion link

Optional: Digital signature verification.

Version: {{{project_version}}}

  • Digital signatures: A tool enhancing download security. Commonly used across the internet.
  • Learn more: Curious? Learn more about digital software signatures.
  • Optional: Digital signatures are optional. If you've never used them before, there might be no need to start now.
  • No worries: New to digital software signatures? It's okay, no need to worry.
  • Not a requirement: Not mandatory for using Whonix, but an extra security measure for advanced users.

Download Whonix CLI The Web Archive Onion Version

OpenPGP

OpenPGP Signature The Web Archive Onion Version
Verify images using this Signing Key

Download Whonix VirtualBox Developer OpenPGP Key

signify

SHA-512 checksum file The Web Archive Onion Version
SHA-512 checksum file signify signature The Web Archive Onion Version
Verify images using this Signing Key

Download Whonix VirtualBox signify Key

How to verify the Whonix Images : Whonix virtual machine images are signed by Whonix developer Patrick Schleizer using OpenPGP and signify.

Do you already how to perform digital software verification using an OpenPGP and/or signify key?

Install VirtualBox

Download and install VirtualBox for your operating system.

Windows

Download VirtualBox for Windows (FREE!) WINDOWS

Optional: Digital signature verification.

VirtualBox for Windows is not signed with OpenPGP / gpg. It is signed with authenticode.

After downloading the VirtualBox installer exe and starting it, the user should verify that sure that Verified publisher: is Oracle Corporation.

Figure: Windows signature signature verification window for VirtualBox

Advanced users might wish to learn more about Kicksecure logo Authenticode (Windows Digital Software Signatures) The Web Archive Onion Version to perform a deeper verification.

macOS

Download VirtualBox for macOS (FREE!) OSX

Optional: Digital signature verification.

VirtualBox for macOS is not signed with OpenPGP / gpg. It is notarized for macOS's gatekeeper. See also Apple's official documentation Safely open apps on your Macarchive.org.

Ubuntu

Ubuntu host operating systems:

Chose an option from the following table. Choose either Option A) or Option B).

Option Name Details
A) Automated VirtualBox Installation Ubuntu users could alternatively use the Whonix Linux Installer for VirtualBox. In this case, this wiki page can be completely ignored. No other steps from this wiki page need to be applied because the automated installer will handle everything.
B) Manual VirtualBox Installation Follow the instructions below.

Tested on October 2022 using Ubuntu version 22.04. Older versions are not recommended.

Command Line (All Users)

1. On the host.

Open a terminal.

2. Update the package lists.

sudo apt update

3. Install VirtualBox and Linux kernel headers.

sudo apt install --no-install-recommends virtualbox-qt linux-headers-generic

4. Add your current user to group vboxusers. [1]

sudo adduser $(whoami) vboxusers

5. Done.

The procedure of installing the VirtualBox host software is complete.

Software Center (only if not using SecureBoot)

Ubuntu Software Center can be used to install VirtualBox. The process is similar to installation of most other applications.

This only works for users with computers that do not have "SecureBoot" enabled. If the user's computer is using "SecureBoot" the user need to either disable "SecureBoot" in the BIOS or use the command line based instructions. [9]

1. Open the start menu.

2. Click on the Ubuntu Software Center icon.

Figure: Ubuntu Software Center icon

Ubuntu Software icon

3. Click on the magnifying glass to search. → Type virtualbox. → Press enter. → In the search results, click on VirtualBox.

Figure: Ubuntu Software Center - Search For VirtualBox

search for virtualbox

4. Click on Install and wait.

Figure: Ubuntu Software Center Search Result

Install Virtualbox

5. Installation of VirtualBox has been completed.

When the installation has completed, the install icon changes to the uninstall icon. Do not click the uninstall button.

Figure: Ubuntu Software Center - VirtualBox has been installed

Uninstall Virtualbox

6. Click on Show Applications. → Click on Virtual Box start the VirtualBox graphical user interface (GUI).

Figure: Ubuntu Software Center #4

Show Applications

7. Done.

The procedure of installing and starting VirtualBox is complete.

Debian

.

Debian host operating systems:

Chose an option from the following table. Choose either Option A) or Option B).

Option Name Details
A) Automated VirtualBox Installation Debian users could alternatively use the Whonix Linux Installer for VirtualBox. In this case, this wiki page can be completely ignored. No other steps from this wiki page need to be applied because the automated installer will handle everything.
B) Manual VirtualBox Installation Follow the instructions below.

Select your Debian release.

Debian bookworm (stable) or bullseye (oldstable)

To acquire the Recommended VirtualBox version tested with Whonix, package virtualbox-qt should be installed from Debian fasttrack repositoryarchive.org according to the following instructions. [10]

1. On the host.

Open a terminal.

2. Update the package lists.

sudo apt update

3. Install the Debian fasttrack signing key.

sudo apt install --no-install-recommends fasttrack-archive-keyring

4. Add the Debian fasttrack repository.

echo 'deb https://fasttrack.debian.net/debian/ bookworm-fasttrack main contrib non-free' | sudo tee /etc/apt/sources.list.d/fasttrack.list

5. Add Debian the backports repository. [11]

echo 'deb https://deb.debian.org/debian bookworm-backports main contrib non-free' | sudo tee /etc/apt/sources.list.d/backports.list

6. Update the package lists again. [12]

sudo apt update

7. Install VirtualBox and Linux kernel headers.

sudo apt install --no-install-recommends virtualbox-qt linux-headers-$(dpkg --print-architecture)

8. Add your current user to group vboxusers. [1]

sudo adduser $(whoami) vboxusers

9. Done.

The procedure of installing the VirtualBox host software is complete.

Debian Testing

VirtualBox can be installed by adding the Debian unstable (sid) repository and APT pinning. The details of this are unspecific to Whonix and undocumented.

Debian Unstable

VirtualBox can be installed by adding the Debian unstable (sid) repository.

sudo apt update

sudo apt install --no-install-recommends virtualbox-qt linux-headers-$(dpkg --print-architecture)

sudo adduser $(whoami) vboxusers

The details of this are unspecific to Whonix and undocumented.

Other Debian Releases

Other Debian releases might work, but this is untested. In case of other Debian release:
See also "Linux host operating systems" below.
See also "Linux" on the right.

Kicksecure

Kicksecure™ host operating systems:

Chose an option from the following table. Choose either Option A) or Option B).

Option Name Details
A) Automated VirtualBox Installation Kicksecure™ users could alternatively use the Whonix Linux Installer for VirtualBox. In this case, this wiki page can be completely ignored. No other steps from this wiki page need to be applied because the automated installer will handle everything.
B) Manual VirtualBox Installation Follow the instructions below.

Instructions for Kicksecure™ are simpler than instructions for Debian. [13]

1. On the host.

Open a terminal.

2. Update package lists.

sudo apt update

3. Install VirtualBox and Linux kernel headers.

sudo apt install --no-install-recommends virtualbox-qt

4. Add your current user to group vboxusers. [1]

sudo adduser $(whoami) vboxusers

5. Done.

The procedure of installing the VirtualBox host software is complete.

Linux

Hosts using a non-Debian operating system:

  • Install VirtualBox as per the normal mechanism for your Linux distribution. No special instructions for Whonix are required. The installation of a recent VirtualBox host software is unspecific to Whonix. Consult the documentation of your Linux distribution.
  • Whonix has has been tested with, expects VirtualBox version latest.
  • For example the outdated VirtualBox version 5.2.18 is incompatible.

info General recommendations for users using Linux as a host operating system:

  • Linux kernel version:
    • The recommended host Linux kernel version is the same version that Debian bookworm is using, see linux-image-amd64archive.org.
    • Newer host Linux kernel versions are likely to break VirtualBox VMs in many ways since these are unsupported by VirtualBox. [14]
  • Host operating system: The recommended host Linux distributions are:
    • preferebly the stable version of Kicksecure™ 17, or
    • Debian Linuxarchive.org version bookworm.

Import Whonix into VirtualBox

For Whonix VirtualBox import instructions, please press on expand on the right.

Follow these steps to import Whonix into VirtualBox. Click images to enlarge

  • (1) Start VirtualBox

    (1) Start VirtualBox

  • (2) Click on File then choose Import Appliance...

    (2) Click on File then choose Import Appliance...

  • (3) Navigate and select Whonix image and press next

    (3) Navigate and select Whonix image and press next

  • (4) Do NOT change anything! Just click on Import

    (4) Do NOT change anything! Just click on Import

  • (5) Then press Agree

    (5) Then press Agree

  • (6) Wait until Whonix .ova has been imported

    (6) Wait until Whonix .ova has been imported

  • (7) Now start Whonix-Gateway and Whonix-Workstation

    (7) Now start Whonix-Gateway and Whonix-Workstation

Miscellaneous

There are also Video Tutorials.

If you still need help, please check the Support page.

For command line import instructions, see footnote. [15]

Start Whonix

Starting Whonix is simple:

  1. Start VirtualBox
  2. Double-click the Whonix-Gateway™ and Whonix-Workstation™

Support the Future of Whonix

Whonix is made possible thanks to the donation of people like you. ❤️

Please support the Whonix development with a donation.

First Time User / Questions and Answers

First Time User / Questions and Answers[edit]

Whonix default admin password is: changeme

  • Default username: user
  • Default password: changeme

Whonix first time users warning Warning:

  • If you do not know what metadata or a man-in-the-middle attack is.
  • If you think nobody can eavesdrop on your communications because you are using Tor.
  • If you have no idea how Whonix works.

Then read the Design and Goals, Whonix and Tor Limitations and Tips on Remaining Anonymous pages to decide whether Whonix is the right tool for you based on its limitations.

See Also

See Also[edit]

For additional VirtualBox guides and information, please press on expand on the right.

Help Wanted

Footnotes

Footnotes[edit]

  1. ↑ 1.0 1.1 1.2 1.3 1.4 1.5 Optional: See: https://www.virtualbox.org/manual/ch02.html#install-linux-vboxusersarchive.org Also spams ~/.config/VirtualBox/VBoxSVC.log log if not done.
  2. ↑ This is unspecific to Whonix. This is because during package installation of a package that requires kernel modules when "SecureBoot" is enabled, Ubuntu's dkms is prompting the user for a password to encrypt the key which will be used to enroll the kernel module signing key. This is Ubuntu usability issue. It is unknown if any bug report / feature request for this exists. Please contribute, research, report this issue on Ubuntu's issue tracker.
  3. ↑ This is Kicksecure logo non-ideal The Web Archive Onion Version but required since VirtualBox in unavailable in official Debian bookworm repository and difficult to install due to VirtualBox Installation Challenges. Alternatively you could install VirtualBox from the Oracle (virtualbox.org) Repository, but this comes with different risks. VirtualBox might be updated by VirtualBox developers before being tested with Whonix which could then lead to issues. (Described in footnote here.)
  4. ↑ This is required because the Debian fasttrack repository depends on the Debian the backports repository.
  5. ↑ This is to acquire the Debian fasttrack repository package sources.
  6. ↑ This is because by Kicksecure™ default:
  7. ↑ https://www.virtualbox.org/ticket/17055#comment:3archive.org
  8. ↑ On the Linux platform.
    1. Read License Agreement: vboxmanage import Whonix-Xfce-17.0.4.5.ova --vsys 0 --eula show --vsys 1 --eula show 2. Import Whonix-Gateway and Whonix-Workstation. vboxmanage import Whonix-Xfce-17.0.4.5.ova --vsys 0 --eula accept --vsys 1 --eula accept
  9. ↑ This is unspecific to Whonix. This is because during package installation of a package that requires kernel modules when "SecureBoot" is enabled, Ubuntu's dkms is prompting the user for a password to encrypt the key which will be used to enroll the kernel module signing key. This is Ubuntu usability issue. It is unknown if any bug report / feature request for this exists. Please contribute, research, report this issue on Ubuntu's issue tracker.
  10. ↑ This is Kicksecure logo non-ideal The Web Archive Onion Version but required since VirtualBox in unavailable in official Debian bookworm repository and difficult to install due to VirtualBox Installation Challenges. Alternatively you could install VirtualBox from the Oracle (virtualbox.org) Repository, but this comes with different risks. VirtualBox might be updated by VirtualBox developers before being tested with Whonix which could then lead to issues. (Described in footnote here.)
  11. ↑ This is required because the Debian fasttrack repository depends on the Debian the backports repository.
  12. ↑ This is to acquire the Debian fasttrack repository package sources.
  13. ↑ This is because by Kicksecure™ default:
  14. ↑ https://www.virtualbox.org/ticket/17055#comment:3archive.org
  15. ↑ On the Linux platform.
    1. Read License Agreement: vboxmanage import Whonix-Xfce-17.0.4.5.ova --vsys 0 --eula show --vsys 1 --eula show 2. Import Whonix-Gateway and Whonix-Workstation. vboxmanage import Whonix-Xfce-17.0.4.5.ova --vsys 0 --eula accept --vsys 1 --eula accept
Your support makes
all the difference!

We believe security software like Whonix needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 10 year success story and maybe DONATE!

Retrieved from "https://www.whonix.org/w/index.php?title=Debian&oldid=97014"