Jump to: navigation, search

Dev/Continuous Integration

< Dev

Status Badges[edit]

For status badges see:

General Note about CI Services in use for Building Whonix[edit]

Since all Continuous Integration (CI) services we know of run Ubuntu and Whonix is based on Debian, it was required to add a few CI specific workarounds to Whonix's build script. Therefore, if a CI build works, that doesn't necessarily mean, that a Debian based build would succeed as well. So the usefulness of the results is a bit limited. Nevertheless, compatibility with CI environments is a very useful "stress test" for the build script. It helps early spotting most bugs, which break the build.

Since there are no free CI services supporting mount (device-mapper), there is unfortunately no CI service which could be used for building Whonix Virtual Machine images. Instead, we're CI's for simulating builds of Whonix's Debian Packages as well as (minimal or full) --install-to-root builds.

See also warning not to use images created inside Continuous Integration (CI) environments for anything besides testing!

CI Services in Use[edit]

Travis CI[edit]


Some more technical notes:

  • Build time hard limit 50 minutes
  • Build time inactivity limit 10 minutes
  • Support says: The command and the URL to clone currently can't be influenced.
  • These commands "$ rvm use default --install --binary --fuzzy ; $ ruby --version ; $ rvm --version ; $ gem --version" are not required. Support says: As for the commands listed, those can't be removed either, and they shouldn't add any significant load or time to your build.
  • Support says: Regarding retaining storage, we have an APT caching service in the works, that's currently in testing. It won't be host-local, but it'll be network-local.
  • Build failed log: https://api.travis-ci.org/jobs/12119447/log.txt?deansi=true - Failed due to missing device-mapper. No idea if possible to fix. - Opened a ticket.
  • very low entropy, gpg key creation takes very long; impossible to start haveged daemon: workaround in place. [1]
  • If image creation isn't possible, Travis CI could still be used to check if the whonix_build script works with --install-to-root switch.
  • stop a build button


  • Only building Whonix Debian Packages. No virtual machine images or physically isolated machines, because build timeout is too short. Only running.

Whonix drone.io settings.

sudo -E ./build-steps.d/1100_prepare-build-machine --install-to-root
sudo -E ./build-steps.d/1200_create-debian-packages

Other CI Services not in use due to issues[edit]


  • No root. - Asked support. - Impossible to build Whonix VM images. kpartx and mount require root.
  • Whonix codeship.io


  • "Due to our limited capacity we cannot accept all projects at once and that's why your subscription was queued. As we increase our capacity we will allow more and more open-source projects, based on a first registered, first served policy. Here is your position in the queue:" 198 Whonix


  • gpg key creation takes very very log due to low entropy - asked support
  • another issue while running grml-debootstrap
/dev/mapper/control: open failed: Operation not permitted
Failure to communicate with kernel device-mapper driver.
device mapper prerequisites not met
* Error setting up loopback device.
-> Failed (rc=1)


  1. If is CI detected... Linking /dev/urandom to /dev/random. In CI environment, there is usually very little entropy. Therefore gpg key creation takes very long. Since no images are deployed from CI systems, we can do this.

Random News:

Please help to improve Whonix's Wikipedia Page. See also feedback thread.

Impressum | Datenschutz | Haftungsausschluss

https | (forcing) onion
Share: Twitter | Facebook | Google+
This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (g+) is a licensee of the Open Invention Network. Unless otherwise noted above, content of this page is copyrighted and licensed under the same Free (as in speech) license as Whonix itself.