Whonix Packages for Debian Hosts
| About this Whonix Packages for Debian Hosts Page | |
|---|---|
| Support Status | testing |
| Difficulty | medium |
| Maintainer | HulaHoop |
| Support | Support |
Introduction[edit]
Many of the packages developed under the Whonix umbrella can be thought of as independent projects in their own right. Their relevance applies to Debian hosts where they can increase privacy and security.
This guide will show how you can download these select packages from the Whonix repository. They can be downloaded stand-alone or combined.
HowTo[edit]
Complete the following steps to add the Whonix Signing Key to the system's APT keyring. [1]
Open a terminal.
Install curl.
Update the package lists.
sudo apt-get update
Upgrade the system.
sudo apt-get dist-upgrade
Install the curl package.
sudo apt-get install curl
The procedure of installing curl is now complete.
Download Whonix signing key.
If you are using a Qubes TemplateVM, run.
curl --proxy http://127.0.0.1:8082/ --tlsv1.2 --proto =https --max-time 180 --output ~/patrick.asc https://www.whonix.org/patrick.asc
If you are using Debian, run.
curl --tlsv1.2 --proto =https --max-time 180 --output ~/patrick.asc https://www.whonix.org/patrick.asc
Users can check Whonix Signing Key for better security.
Add Whonix signing key to APT trusted keys.
sudo apt-key --keyring /etc/apt/trusted.gpg.d/whonix.gpg add ~/patrick.asc
The procedure of adding Whonix signing key is now complete.
Add Whonix Repository.
Choose either, Option A OR Option B.
Option A: Add Whonix Onion Repository.
To add Whonix Onion Repository please press on expand on the right.
Note: Adding Whonix Onion Repository (this) should be preferred over adding Whonix Clearnet Repository (below).
Install apt-transport-tor from the Debian repository.
sudo apt-get install apt-transport-tor
Add Whonix's APT repository for default Whonix using Debian stable. At the time of writing this was stretch.
echo "tor+http://deb.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion stretch main contrib non-free" | sudo tee /etc/apt/sources.list.d/whonix.list
Option B: Add Whonix Clearnet Repository.
To add Whonix Clearnet Repository please press on expand on the right.
Add Whonix's APT repository for default Whonix using Debian stable. At the time of writing this was stretch.
echo "deb http://deb.whonix.org stretch main contrib non-free" | sudo tee /etc/apt/sources.list.d/whonix.list
Install package-name.
Update the package lists.
sudo apt-get update
Upgrade the system.
sudo apt-get dist-upgrade
Install the package-name package.
sudo apt-get install package-name
The procedure of installing package-name is now complete.
Supported Packages[edit]
pkg-manager-no-autoupdatesecurity-misctb-updatercorridor- Tor traffic whitelisting gateway - Debian focused fork of rustybird/corridor
Footnotes[edit]
- ↑
The following is unreliable due to gpg connectivity bugs.
This will hopefully be fixed in Debian buster.
sudo apt-key --keyring /etc/apt/trusted.gpg.d/whonix.gpg adv --keyserver hkp://ipv4.pool.sks-keyservers.net:80 --recv-keys 916B8D99C38EAF5E8ADC7A2A8D66066A2EEACCDA
- ↑ https://phabricator.whonix.org/T524