VirtualBox/Other Versions

Introduction

The virtualization platform is an essential component of a secure Whonix system. A vulnerable virtualizer may provide opportunities for attackers to perform a breakout from a virtual machine in order to undo the security by isolation features that Whonix provides. The decision to install an alternative virtualizer should not be taken lightly.

Recommended Version

Whonix recommends installing the package contained in the Debian Stable repository.

Install from Debian Stable

Latest Stable VirtualBox package information

[select code]

sudo apt-get install virtualbox linux-headers-$(uname -r)

sudo apt-get install virtualbox linux-headers-$(uname -r)

To install VirtualBox Guest Additions:

[select code]

sudo apt-get install virtualbox-guest-x11

sudo apt-get install virtualbox-guest-x11

Newer Versions

At the time of writing, the latest major release of VirtualBox is Version 5.

Keeping in mind the warnings above, you should only install this version if having the new features is a requirement for you.

There are two preferred methods that can be used to install a newer version of VirtualBox and these are recommended over downloading, verifying, and installing binaries manually. The two repositories below are maintained by different teams, Debian and Virtualbox.org, respectively.

Install from Debian Testing via Backports

Latest Testing VirtualBox package information

Open /etc/apt/sources.list.d/backports.list in an editor with root rights.

If you are using a graphical Whonix or Qubes-Whonix, run.

[select code]

kdesudo kwrite /etc/apt/sources.list.d/backports.list

kdesudo kwrite /etc/apt/sources.list.d/backports.list

If you are using a terminal-only Whonix, run.

[select code]

sudo nano /etc/apt/sources.list.d/backports.list

sudo nano /etc/apt/sources.list.d/backports.list

Add the following line:

[select code]

deb http://http.debian.net/debian jessie-backports main contrib

deb http://http.debian.net/debian jessie-backports main contrib

(Change "jessie" to the current name of your stable distribution.)

[select code]

sudo apt-get update
sudo apt-get -t jessie-backports install virtualbox

sudo apt-get update sudo apt-get -t jessie-backports install virtualbox

To install VirtualBox Guest Additions:

[select code]

sudo apt-get -t jessie-backports install virtualbox-guest-x11

sudo apt-get -t jessie-backports install virtualbox-guest-x11

Install from Oracle Repository

Latest Oracle VirtualBox package information

Open /etc/apt/sources.list.d/oracle.list in an editor with root rights.

If you are using a graphical Whonix or Qubes-Whonix, run.

[select code]

kdesudo kwrite /etc/apt/sources.list.d/oracle.list

kdesudo kwrite /etc/apt/sources.list.d/oracle.list

If you are using a terminal-only Whonix, run.

[select code]

sudo nano /etc/apt/sources.list.d/oracle.list

sudo nano /etc/apt/sources.list.d/oracle.list

Add the following line:

[select code]

deb http://download.virtualbox.org/virtualbox/debian jessie contrib

deb http://download.virtualbox.org/virtualbox/debian jessie contrib

(Change "jessie" to the current name of your stable distribution.)

Add Oracle's signing key to apt-get keyring:

[select code]

curl --tlsv1.2 --proto =https https://www.virtualbox.org/download/oracle_vbox_2016.asc

curl --tlsv1.2 --proto =https https://www.virtualbox.org/download/oracle_vbox_2016.asc

Check fingerprint:

[select code]

sudo apt-key adv --fingerprint B9F8D658297AF3EFC18D5CDFA2F683C52980AECF

sudo apt-key adv --fingerprint B9F8D658297AF3EFC18D5CDFA2F683C52980AECF

Should show.

Key fingerprint = B9F8 D658 297A F3EF C18D 5CDF A2F6 83C5 2980 AECF
uid                  Oracle Corporation (VirtualBox archive signing key) <info@virtualbox.org>

Install VirtualBox:

[select code]

sudo apt-get update
sudo apt-get install virtualbox-5.0

sudo apt-get update sudo apt-get install virtualbox-5.0

VirtualBox Guest Additions ISO is included in the package. Mount ISO in guest virtual machine to install. Instructions

---

Random News:

Have you read our Documentation, Technical Design and Developer Portal links yet?

---

https | (forcing) onion

Share: Twitter | Facebook

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.

Whonix is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Libre Software license as Whonix itself. (Why?)