Dev/Test

How to UnWhonix - Whonix package removal

TODO: document

How to UnWhonix - restore clearnet networking

Instructions on how to remove Whonix Tor default networking for Whonix-Gateway. After applying these instructions, Whonix-Gateway will connect to clearnet.

Warning: Not anonymous!

Qubes specific!

Inside sys-whonix...

Unload Whonix Firewal.

Check.

sudo iptables --list

Should show.

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Inside another VM... Go to some non-Tor VM that has functional internet.

Figure out it is /etc/resolv.conf settings.

cat /etc/resolv.conf

Inside sys-whonix...

sudo rm /etc/resolv.conf

Open /etc/resolv.conf in an editor with root rights.

If you are using a graphical Whonix or Qubes-Whonix, run.

[select code]

kdesudo kwrite /etc/resolv.conf

kdesudo kwrite /etc/resolv.conf

If you are using a terminal-only Whonix, run.

[select code]

sudo nano /etc/resolv.conf

sudo nano /etc/resolv.conf

Use the same settings from the non-Tor VM.

Deactivate all uwt wrappers globally.

The following instructions permanently deactivate all uwt wrappers and remove stream isolation for uwt wrapped applications system-wide. Consequently, all uwt wrapped applications revert to the default system networking configuration.

If you want more granular control of uwt wrapper deactivation, see Stream_Isolation#Deactivate_uwt_Stream_Isolation_Wrapper.

Open /etc/uwt.d/50_user.conf in an editor with root rights.

If you are using a graphical Whonix or Qubes-Whonix, run.

[select code]

kdesudo kwrite /etc/uwt.d/50_user.conf

kdesudo kwrite /etc/uwt.d/50_user.conf

If you are using a terminal-only Whonix, run.

[select code]

sudo nano /etc/uwt.d/50_user.conf

sudo nano /etc/uwt.d/50_user.conf

Add.

[select code]

uwtwrapper_global="0"

uwtwrapper_global="0"

Save and exit.

[select code]

scurl --remote-name https://check.torproject.org

scurl --remote-name https://check.torproject.org

Or manually run curl with these parameters.

[select code]

curl --tlsv1.2 --proto =https --remote-name https://check.torproject.org

curl --tlsv1.2 --proto =https --remote-name https://check.torproject.org

Open index.html in an editor.

If you are using a graphical environment, run.

[select code]

kwrite index.html

kwrite index.html

If you are using a terminal (Konsole), run.

[select code]

nano index.html

nano index.html

Should include.

Sorry. You are not using Tor.

---

Random News:

Join us in testing our new AppArmor profiles for improved security! (forum discussion)

---

https | (forcing) onion

Share: Twitter | Facebook

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.

Whonix is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Libre Software license as Whonix itself. (Why?)