Release Upgrade Whonix 17 to Whonix 18

How to Release Upgrade from Whonix 17 to Whonix 18
Notices
[edit]| Notice | Description |
|---|---|
| Difficulty |
|
| Release Upgrade vs Re-Installation |
To use Whonix 18, users can either:
|
| Standard Updates |
|
| Automated Release Upgrade vs Manual Release Upgrade |
|
| Configuration Files Resets | Since this is an automated release upgrade, user modified configuration files (if any) in folder /etc will be reset, overwritten with the Debian or Whonix package version. The user is free to restore the configuration after the release upgrade.
|
High Level Overview
[edit]- Backup all data - ideally have a copy of the VM(s) so it is possible to try again (if necessary).
- Perform the usual standard ("everyday") update instructions.
- Platform specific notice. Qubes users only: Release Upgrade Qubes from version R4.2 to R4.3.
- Release Upgrade Whonix-Workstation from version 17 to 18.
- Update derivative APT repository configuration.
- Power off Whonix-Workstation
- Release Upgrade Whonix-Gateway
- Restart Whonix-Gateway
Platform Specific Notices
[edit]- Whonix: No special notice.
- Qubes-Whonix:
- Supported path (recommended): Upgrade the Qubes host from R4.2 to R4.3 first, then release-upgrade Whonix from 17 to 18.
- Qubes R4.2: Whonix 18 on Qubes R4.2 is unsupported (templates are not provided/supported for that host version). [2]
- Qubes R4.3: Qubes-Whonix 18 is available and supported.
- Important note on wording: Unsupported does not necessarily mean "technically impossible". It means "not maintained/tested as a supported combination".
- Follow the steps in the order shown on this page.
Qubes Specific
[edit]Notes:
- Qubes applicability: Only applicable if using Qubes. Non-Qubes users should ignore this wiki chapter.
- Required host version: Host operating system must be Qubes R4.3. See Qubes documentation: How to upgrade to Qubes 4.3

- Template upgrade note: When Qubes R4.3 is in dom0 with an old Qubes R4.2 Template, that Template must be upgraded to Qubes R4.3 first. The following quotes from the Qubes documentation explain how to upgrade all Templates from R4.2 to R4.3.
Install the
qubes-dist-upgradetool. This is the in-place upgrade tool, which is not what we’re doing. However, it will be needed in order to upgrade the templates to the 4.3 version. You install it with the following command in the dom0 terminal: sudo qubes-dom0-update -y qubes-dist-upgrade How to upgrade to Qubes 4.3
Change your templates to use the 4.3 repositories instead of the 4.2 ones. You do this with the following command in the dom0 terminal: sudo qubes-dist-upgrade --releasever=4.3 --template-standalone-upgrade How to upgrade to Qubes 4.3
Note on terminology: The option name --template-standalone-upgrade is unfortunately easy to misread because Qubes uses “Standalone” as a VM type name. Here, “standalone” in the option name refers to the fact that this stage can be run by itself (as a standalone step). It is not an instruction to “upgrade Standalones only”. This step upgrades TemplateVMs and also any Standalone Qubes (VM type) that are applicable. [3]
Release Upgrade
[edit]- Backup all data, ideally have a clone of the VM(s) so it is possible to try again (if necessary).
- Perform the usual standard ("everyday") update instructions.
- Run systemcheck
. - View
release-upgradecommand version: cat /usr/sbin/release-upgrade | grep version= - Check
release-upgradecommand version. It should be a minimum of3.3, and displayversion="3.3". - Consider keeping the full release upgrade log output. It will be required for Support in case there are issues.
- Read Platform Specific Notices.
- Perform the automated release upgrade using the
release-upgradecommand: sudo release-upgrade - If everything went well, at the end it will show:
INFO: OK. (release-upgrade version: 3.3) Release upgrade success.
- Re-run the repository-dist utility to update your derivative APT sources list from the old
.listto the new.sourcesformat. [4] This is a very minor issue if forgotten. It can be done at any later time. systemcheck will point this out if it has not been done yet. - Reboot.
- Optional, recommended: Re-install Meta Packages and Safely Run Autoremove
Support the Future of Whonix
[edit]Whonix is made possible thanks to the donation of people like you.
Please support the Whonix development with a donation.
Footnotes
[edit]- ↑
This method is still possible. All the automated
release-upgradescript does is perform actions which the user could perform manually. If a manual release upgrade is desired, emulate what the
release-upgradescript is doing. The manual release upgrading procedure is undocumented due to the size of the instructions and duplication involved. - ↑
- decide availability of Kicksecure, and Whonix 18 (Debian trixie based) on Qubes R4.2 versus R4.3

- Whonix 18 issue in Qubes R4.2 sdwdate-gui:
sdwdate.ConnectCheckdenied messages
(despite the name, sdwdate-gui issue, not sdwdate issue)
- decide availability of Kicksecure, and Whonix 18 (Debian trixie based) on Qubes R4.2 versus R4.3
- ↑
https://forums.whonix.org/t/qubes-whonix-18-released-major-release-upgrade/22517/7

- ↑
https://forums.kicksecure.com/t/apt-sources-list-one-line-format-versus-deb822-style-format/267

We believe security software like Whonix needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 13 year success story and maybe DONATE!



