Dev/Continuous Integration

From Whonix

< Dev

Status Badges[edit]

For status badges see:

General Note about CI Services in use for Building Whonix ™[edit]

Since all Continuous Integration (CI) services we know of run Ubuntu and Whonix ™ is based on Debian, it was required to add a few CI specific workarounds to Whonix ™ build script. Therefore, if a CI build works, that doesn't necessarily mean, that a Debian based build would succeed as well. So the usefulness of the results is a bit limited. Nevertheless, compatibility with CI environments is a very useful "stress test" for the build script. It helps early spotting most bugs, which break the build.

Since there are no free CI services supporting mount (device-mapper), there is unfortunately no CI service which could be used for building Whonix ™ Virtual Machine images. Instead, we're CI's for simulating builds of Whonix ™ Debian Packages as well as (minimal or full) --install-to-root builds.

See also warning not to use images created inside Continuous Integration (CI) environments for anything besides testing!

CI Services in Use[edit]

Travis CI[edit]


Some more technical notes:

  • Build time hard limit 50 minutes
  • Build time inactivity limit 10 minutes
  • Support says: The command and the URL to clone currently can't be influenced.
  • These commands "$ rvm use default --install --binary --fuzzy ; $ ruby --version ; $ rvm --version ; $ gem --version" are not required. Support says: As for the commands listed, those can't be removed either, and they shouldn't add any significant load or time to your build.
  • Support says: Regarding retaining storage, we have an APT caching service in the works, that's currently in testing. It won't be host-local, but it'll be network-local.
  • Build failed log: - Failed due to missing device-mapper. No idea if possible to fix. - Opened a ticket.
  • very low entropy, gpg key creation takes very long; impossible to start haveged daemon: workaround in place. [1]
  • If image creation is not possible, Travis CI could still be used to check if the whonix_build script works with --target root switch.
  • stop a build button[edit]

  • Only building Whonix ™ Debian Packages. No virtual machine images or physically isolated machines, because build timeout is too short. Only running.

Whonix ™ settings.

sudo -E ./build-steps.d/1100_prepare-build-machine --target root
sudo -E ./build-steps.d/1200_create-debian-packages

Other CI Services not in use due to issues[edit][edit]

  • No root. - Asked support. - Impossible to build Whonix ™ VM images. kpartx and mount require root.
  • Whonix ™[edit]

  • "Due to our limited capacity we cannot accept all projects at once and that's why your subscription was queued. As we increase our capacity we will allow more and more open-source projects, based on a first registered, first served policy. Here is your position in the queue:" 198 Whonix[edit]

  • gpg key creation takes very very log due to low entropy - asked support
  • another issue while running grml-debootstrap
/dev/mapper/control: open failed: Operation not permitted
Failure to communicate with kernel device-mapper driver.
device mapper prerequisites not met
* Error setting up loopback device.
-> Failed (rc=1)


  1. If is CI detected... Linking /dev/urandom to /dev/random. In CI environment, there is usually very little entropy. Therefore gpg key creation takes very long. Since no images are deployed from CI systems, we can do this.

[advertisement] Looking to Sell Your Company? Contact me.

Have you contributed to Whonix ™? If so, feel free to add your name and highlight what you did on the Whonix authorship page.

https | (forcing) onion
Follow: Twitter.png Facebook.png 1280px-Gab text logo.svg.png Rss.png 1024px-Telegram 2019 Logo.svg.png

Share: Twitter | Facebook

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation.

Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)

Whonix ™ is a derivative of and not affiliated with Debian. Debian is a registered trademark owned by Software in the Public Interest, Inc.

Whonix ™ is produced independently from the Tor® anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else.

By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix ™ is provided by ENCRYPTED SUPPORT LP. See Imprint.