Dev/OnionShare

From Whonix
< Dev
Jump to navigation Jump to search
OnionShare Logo

OnionShare in Whonix - Development Notes

Developers only! Risk of Tor over Tor!

Notes[edit]

  • Qubes-Whonix users should consider creating a separate, cloned whonix-workstation-17-onionshare Template before installing OnionShare/flatpak.
  • OnionShare from the Debian stable repository is suitable for most users. Flatpak can be utilized for later OnionShare versions; v2.4 is packaged at the time of writing. [1]

Flatpak OnionShare Installation[edit]

Install onionshare via flatpak.

1. Select your platform.

A : Non-Qubes-Whonix

===

Non-Qubes-Whonix

2. Add flathub repository.

Follow the instructions to Kicksecure logo Enable Flathub Repository The Web Archive Onion Version .

3. Install the flatpak onionshare package.

flatpak install flathub onionshare

4. Done.

The procedure of installing onionshare is complete.

5. Upgrades notice.

Note: this procedure will not keep the software up-to-date. How to update installation installed by flatpak is also documented on the Operating System Software and Updates wiki page.

B : Qubes-Whonix Template

===

Qubes-Whonix Template (whonix-workstation-17)

2. Add flathub repository.

Follow the instructions to Kicksecure logo Enable Flathub Repository The Web Archive Onion Version .

3. Install the flatpak onionshare package.

http_proxy=http://127.0.0.1:8082 https_proxy=$http_proxy flatpak install flathub onionshare

4. Done.

The procedure of installing onionshare is complete.

5. Upgrades notice.

Note: this procedure will not keep the software up-to-date. How to update installation installed by flatpak is also documented on the Operating System Software and Updates wiki page.

C : Qubes-Whonix App Qube

Qubes-Whonix App Qube (anon-whonix)

2. Add flathub repository.

Follow the instructions to Kicksecure logo Enable Flathub Repository The Web Archive Onion Version .

3. Install the flatpak onionshare package.

flatpak --user install flathub onionshare

4. Done.

The procedure of installing onionshare is complete.

5. Upgrades notice.

Note: this procedure will not keep the software up-to-date. How to update installation installed by flatpak is also documented on the Operating System Software and Updates wiki page.

Issue[edit]

Flatpak installed OnionShare does not listen on all network interfaces but 127.0.0.1 only. It is therefore unreachable from Whonix-Gateway. This is because file /usr/share/anon-ws-base-files/workstation does not exist inside the Flatpak folder.

related: https://github.com/onionshare/onionshare/blob/develop/cli/onionshare_cli/web/web.py#L360_L364archive.org

Does the following help?

sudo mkdir /var/lib/flatpak/app/org.onionshare.OnionShare/current/active/files/share/anon-ws-base-files

sudo touch /var/lib/flatpak/app/org.onionshare.OnionShare/current/active/files/share/anon-ws-base-files/workstation

flatpak breaks application's Whonix detection #4640archive.org

Debugging[edit]

To see what's happening "under the hood". When using Debian package installed OnionShare version only. This does not work for Flatpak installed OnionShare version.

uwtwrapper_verbose=1 onionshare

View listener.

netstat -tulpen

Should show Local Address 0.0.0.0, meaning listening on all interfaces which is required in case of Whonix so onionshare running inside Whonix-Workstation can be reached from Whonix-Gateway. (As opposed to onionshare running on a host without Whonix where it should listen on localhost 127.0.0.1 onl.y

Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name
[...]
tcp        0      0 0.0.0.0:17605           0.0.0.0:*               LISTEN      1000       30959      4009/python3

uwtarchive.org and bindparchive.org is no longer required since Whonix 16 (Debian bullseye based).

/usr/bin/onionshare.anondist-orig a

Footnotes[edit]

We believe security software like Whonix needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!