Actions

Upgrading Whonix 11 to Whonix 12

From Whonix

warning Unfinished! Don't use yet!

Before you start[edit]

If you want to upgrade Whonix-Gateway ™ as well as Whonix-Workstation ™[edit]

1. Backup your data. (Ideally have a copy of your VM, so you can try again.)
2. Consider running the optional #Sanity Tests.
3. Upgrade Whonix-Workstation ™.
4. Power off Whonix-Workstation ™.
5. Upgrade Whonix-Gateway ™.
6. Restart Whonix-Gateway ™.
7. Restart Whonix-Workstation ™

If you only want to upgrade Whonix-Workstation ™[edit]

1. Backup your data. (Ideally have a copy of your VM, so you can try again.)
2. Consider running the optional #Sanity Tests.
3. Upgrade Whonix-Workstation ™.
4. Power off Whonix-Workstation ™.
5. Get Whonix-Gateway ™ 9.x.
6. Start Whonix-Gateway ™.
7. Start Whonix-Workstation ™

You can ignore the following errors.

Non-Critical Errors / Warnings[edit]

Should be reported if any.

Sanity Tests[edit]

sudo dpkg --audit ; echo $?

Expected output.

0
sudo dpkg --configure -a ; echo $?

Expected output:

0

Get package upgrades.

sudo apt-get update
sudo apt-get dist-upgrade

Test wise install python-qt4.

sudo apt-get install python-qt4 ; echo $?
## ... successful installation of python-qt4 ...
0

Known Issues[edit]

General[edit]

Qubes specific[edit]

Qubes specific.

apt-get not linked warning[edit]

*** OMINOUS WARNING ***: /usr/bin/apt-get is not linked to either apt-get.anondist or apt-get.anondist-orig

Can be ignored. (Something we ought to fix for Whonix ™ 12.)

warning: setlocale: LC_ALL:[edit]

Qubes specific.

/bin/bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
/bin/bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)

[1]

Configuring iptables-persistent dialog[edit]

Qubes specific. (ticket)

Package configuration                                                                                                 
 ┌───────────────────────────────────────┤ Configuring iptables-persistent ├───────────────────────────────────────┐  
 │                                                                                                                 │  
 │ Current iptables rules can be saved to the configuration file /etc/iptables/rules.v4. These rules will then be  │  
 │ loaded automatically during system startup.                                                                     │  
 │                                                                                                                 │  
 │ Rules are only saved automatically during package installation. See the manual page of iptables-save(8) for     │  
 │ instructions on keeping the rules file up-to-date.                                                              │  
 │                                                                                                                 │  
 │ Save current IPv4 rules?                                                                                        │  
 │                                                                                                                 │  
 │                                 <Yes>                                    <No>                                   │  
 │                                                                                                                 │  
 └─────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘  

Say no. (Just keep the default=N. Just press enter.)

interactive dpkg conflict resolution dialog /etc/xdg/autostart/nm-applet.desktop[edit]

Qubes specific.

Configuration file '/etc/xdg/autostart/nm-applet.desktop'
 ==> Modified (by you or by a script) since installation.
 ==> Package distributor has shipped an updated version.
   What would you like to do about it ?  Your options are:
    Y or I  : install the package maintainer's version
    N or O  : keep your currently-installed version
      D     : show the differences between the versions
      Z     : start a shell to examine the situation
 The default action is to keep your current version.
*** nm-applet.desktop (Y/I/N/O/D/Z) [default=N] ? 

Say yes. Press Y followed by enter. Would not be a big problem if you said no also. [2]

interactive dpkg conflict resolution dialog /etc/pulse/client.conf[edit]

Qubes specific.

Configuration file '/etc/pulse/client.conf'
 ==> Modified (by you or by a script) since installation.
 ==> Package distributor has shipped an updated version.
   What would you like to do about it ?  Your options are:
    Y or I  : install the package maintainer's version
    N or O  : keep your currently-installed version
      D     : show the differences between the versions
      Z     : start a shell to examine the situation
 The default action is to keep your current version.
*** client.conf (Y/I/N/O/D/Z) [default=N] ?

Say yes. Press Y followed by enter. Would not be a big problem if you said no also.

Other Unlisted[edit]

Please post any issues in Whonix ™ support forums.

Upgrading[edit]

Downloading a new Whonix-Gateway ™ / Whonix-Workstation ™ will be probably easier than applying the following instructions for upgrading.

Backups are important as noted in above chapter #Before you start. Especially for Qubes users. [3]

Consider doing the #Sanity Tests described above. They'll check if your system is affected by obvious grave issues, that you must fix before attempting to upgrade. If your package manager is broken, for example because you mixed packages from Debian stable with packages from Debian testing, then the upgrade may fail in the middle leaving your system in a difficult to resolve situation.

Consider keeping the full terminal (Konsole) log. Even if everything apparently worked, there might be issues after reboot. In case of a bug report in the forums you would be asked to share the upgrading log so the issue can be investigated.

Make sure you read #Known Issues above.

Become root.

sudo su

Do a usual upgrade of your system's packages from Debian.

For Qubes users, before you proceed, it is strongly recommended that you apply the above #Qubes Pre Fixup.

Enable Whonix ™ jessie repository. Don't use the testers repository just yet. [Wait for new information.]

whonix_repository --enable --codename jessie

As a Qubes user, note that upgrades are currently only possible using Qubes' testing repository. Otherwise you run into grave issues. [4] Switch Qubes' sources from wheezy to jessie-testing in /etc/apt/sources.list.d/qubes-r3.list. (Non-Qubes users should skip Qubes specific steps.) [5] Once the related bug has been fixed, consider removing the "-testing" from /etc/apt/sources.list.d/qubes-r3.list.

sed -i "s/wheezy/jessie-testing/g" /etc/apt/sources.list.d/qubes-r3.list

Make the upgrade process less interactive. Optional. (Mostly Qubes specific unless you installed apt-listchanges.)

export APT_LISTCHANGES_FRONTEND=text

Enable extensive debugging so reporting eventual bugs becomes easier.

export DEBDEBUG=1

Update your package lists.

apt-get update

Upgrade.

apt-get dist-upgrade || apt-get -f install || apt-get dist-upgrade

It is recommended to have the whonix-gateway / whonix-workstation package installed to make sure nothing is broken. (If you like to uninstall it later as per Whonix Debian Packages, you're free to do so. Still, it is recommended to re-install it before removal to make sure you're as close to official package selection as possible.)

If you are upgrading Whonix-Gateway ™...

apt-get install whonix-gateway

If you are upgrading Whonix-Workstation ™...

apt-get install whonix-workstation

Get rid of old packages.

apt-get autoremove

Remember to store the terminal (Konsole) log. (File → Save Output As)

Reboot required.

reboot

Footnotes[edit]

  1. Debian Template: rely on existing tool for base image creation
  2. https://github.com/QubesOS/qubes-issues/issues/1095#issuecomment-129236062
  3. Qubes has some more issues with distribution upgrades.
  4. Cite error: Invalid <ref> tag; no text was provided for refs named qubes-grave-issues
  5. Once the fixed packages migrate into stable we can drop the "-testing".
    sed -i "s/wheezy/jessie/g" /etc/apt/sources.list.d/qubes-r3.list
    

[advertisement] Looking to Sell Your Company? Contact me.


Do you wonder why Whonix will always be free? Check out Why Whonix is Freedom Software.

https | (forcing) onion
Follow: Twitter.png Facebook.png 1280px-Gab text logo.svg.png Rss.png 1024px-Telegram 2019 Logo.svg.png

Share: Twitter | Facebook

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation.

Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)

Whonix ™ is a derivative of and not affiliated with Debian. Debian is a registered trademark owned by Software in the Public Interest, Inc.

Whonix ™ is produced independently from the Tor® anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else.

By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix ™ is provided by ENCRYPTED SUPPORT LP. See Imprint.