Whonix ™ Packages for Debian Hosts and Whonix ™ Host Enhancements

*About this Packages for Debian Hosts* Page**
Support Status	testing
Difficulty	medium
Contributor	HulaHoop ^[archive]
Support	Support

Introduction[edit]

Many of the packages developed under the Whonix ™ umbrella can be thought of as independent projects in their own right. They are directly relevant to Debian hosts because they can increase privacy and security.

This guide shows how to download these select packages from the Whonix ™ repository; they can be downloaded stand-alone or combined.

How-to: Install Whonix ™ Packages[edit]

Complete the following steps to add the Whonix ™ Signing Key to the system's APT keyring.

Open a terminal.

Package curl needs to be installed.

Install curl.

1. Update the package lists.

sudo apt update

sudo apt update

2. Upgrade the system.

sudo apt full-upgrade

sudo apt full-upgrade

3. Install the curl package.

Using apt command line parameter --no-install-recommends is in most cases optional.

sudo apt install --no-install-recommends curl

sudo apt install --no-install-recommends curl

4. Done.

The procedure of installing curl is complete.

Download Whonix ™ Signing Key. ^[1]

If you are using Debian, run.

curl --tlsv1.3 --proto =https --max-time 180 --output derivative.asc https://www.whonix.org/derivative.asc

curl --tlsv1.3 --proto =https --max-time 180 --output derivative.asc https://www.whonix.org/derivative.asc

If you are using a Qubes Debian Template, run.

curl --proxy http://127.0.0.1:8082/ --tlsv1.3 --proto =https --max-time 180 --output derivative.asc https://www.whonix.org/derivative.asc

curl --proxy http://127.0.0.1:8082/ --tlsv1.3 --proto =https --max-time 180 --output derivative.asc https://www.whonix.org/derivative.asc

Users can check Whonix ™ Signing Key for better security.

Add Whonix ™ signing key to APT trusted keys.

sudo cp derivative.asc /usr/share/keyrings/derivative.asc

sudo cp derivative.asc /usr/share/keyrings/derivative.asc

The procedure of adding Whonix ™ signing key is now complete.

Add Whonix ™ Repository.

Choose either: Option A, Option B OR Option C.

Option A: Add Whonix ™ Onion Repository.

To add Whonix ™ Repository over Onion please press on expand on the right.

Install apt-transport-tor from the Debian repository.

sudo apt install apt-transport-tor

sudo apt install apt-transport-tor

Add Whonix ™ APT repository for default Whonix ™ using Debian stable. At the time of writing this was bullseye.

echo "deb [signed-by=/usr/share/keyrings/derivative.asc] tor+http://deb.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list

echo "deb [signed-by=/usr/share/keyrings/derivative.asc] tor+http://deb.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list

Option B: Add Whonix ™ Clearnet Repository over Tor.

To add Whonix ™ Repository over torified clearnet please press on expand on the right.

Install apt-transport-tor from the Debian repository.

sudo apt install apt-transport-tor

sudo apt install apt-transport-tor

Add Whonix ™ APT repository for default Whonix ™ using Debian stable. At the time of writing this was bullseye.

echo "deb [signed-by=/usr/share/keyrings/derivative.asc] tor+https://deb.whonix.org bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list

echo "deb [signed-by=/usr/share/keyrings/derivative.asc] tor+https://deb.whonix.org bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list

Option C: Add Whonix Clearnet Repository over clearnet.

To add Whonix ™ Repository over clearnet please press on expand on the right.

Add Whonix ™ APT repository for default Whonix ™ using Debian stable. At the time of writing this was bullseye.

echo "deb [signed-by=/usr/share/keyrings/derivative.asc] https://deb.whonix.org bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list

echo "deb [signed-by=/usr/share/keyrings/derivative.asc] https://deb.whonix.org bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list

Install package-name.

1. Update the package lists.

sudo apt update

sudo apt update

2. Upgrade the system.

sudo apt full-upgrade

sudo apt full-upgrade

3. Install the package-name package.

Using apt command line parameter --no-install-recommends is in most cases optional.

sudo apt install --no-install-recommends package-name

sudo apt install --no-install-recommends package-name

4. Done.

The procedure of installing package-name is complete.

Supported Packages[edit]

lkrg (GitHub ^[archive])
hardened-malloc (GitHub ^[archive])
kloak (GitHub ^[archive])
security-misc (GitHub ^[archive])
tb-updater (GitHub ^[archive])
tb-starter ^[archive]
grub-live (GitHub ^[archive])
monero-gui (GitHub ^[archive])
virtualbox (VirtualBox Integration) (maintained by Patrick)

Packages Looking for a Contributor[edit]

corridor: Tor traffic whitelisting gateway - Debian focused. This is a GitHub ^[archive] fork ^[archive] of rustybird/corridor ^[archive] ^[2]

Footnotes[edit]

↑ See Secure Downloads to understand why curl and the parameters --tlsv1.3 --proto =https are used instead of wget.
↑ https://phabricator.whonix.org/T524 ^[archive]