Hello reddit/DNM community.
OpenBazaar & Qubes seems to be the 2 next level things to come. After some researches here & there I managed to get those working with Whonix, in the way it's meant for in Qubes... I'm using Qubes 4.0 RC for this (surely same way in 3.2)
All credit to /r/wombat2combat for original whonix guide, and /r/Overgrowth_Vendor for Qubes/linux
But it seems that it was lacking for the assembly of both.So here is my little stone.
Starting from a "Clean & New" Qubes OS 4.0 install, with Whonix packages
Update dom0
in dom0 terminal type:sudo qubes-dom0-update
Update Whonix-ws & Whonix-gw templateVMs :
launch "whonix-gw" "Konsole"
launch "whonix-ws" "Konsole"
type in both VMs terminal windows :sudo apt-get update && apt-get dist-upgrade
(optional/recommended) Onionize whonix repositories :
follow the dedicated chapter in this link for both whonix-gw & whonix-ws templates
https://www.whonix.org/wiki/Security_Guide
again execute commandsudo apt-get update && apt-get dist-upgrade
Shutdown 2 templateVMs "whonix-ws & whonix-gw" and also ProxyVM name "sys-whonix"
this permits "sys-whonix" which is gateway for Tor traffic, to be populated upon restart, with updated packages we just done, inside "whonix-gw" template...Don't touch anymore your "whonix-ws" & "whonix-gw" templates, unless for updating trough above method. !
Clone your clean "whonix-ws" template and name it something like "OB-template"
Start your newly created "OB-template" and execute a refresh inside "VM setting - Applications Tab", so that you can activate "Konsole"
Open domain "anon-whonix" and launch "Tor Browser Dowloader", then launch Tor Browser to download Openbazaar latest packages here:
https://www.openbazaar.org/download/
You need the "Linux 64 bits .deb" version in Qubes/whonixFrom domain "anon-whonix", launch "Dolphin" application and naviguate to find your just downloaded OpenBazaar binaries. (assuming you already checked Hash - out of scope here)
Use Qubes secure file transfert to send the downloaded & verified package to your "OB-template" TemplateVM.
Right-click on file, then "Action" & "Send to VM"*In my case I was unable to make transfert directly from "anon-whonix" domain failed file copy. I had to use an intermediary "fedora" based AppVM (the "untrusted" one).
Let's get back to our "OB-template" , "Konsole" window, now type in terminal :
sudo su
cd QubesIncoming
cd untrusted (if you had same bug as step above), or
cd anon-whonix (if previous file transfert did work)
dirThe version of the package downloaded should now be listed. At time of writing, actual version is openbazaar2_2.0.21_amd64.deb, please input next command accordingly...
Time to install ! type command :dpkg -i openbazaar2_2.0.21_amd64.deb
Openbazaar will not launch yet. Now we need to install packages dependencies :
apt-get -f install
At time of writing, there is a missing dependencie ( libXss1 ) that need to be manually installed :
apt-get install libXss1
We now have a fully functionnal Template for Openbazaar, based on Whonix workstation which will not interfere with original whonix-ws one...
But don't launch Openbazaar from here. That's not what templatesVM in Qubes are meant for. Let's create a Domain & AppVM !
- In Qubes menu, select "Create Qubes VM"
name your new VM something like "OB-vm" (important to differentiate from the template "OB-template")
type : "AppVM"
template : "OB-template"
networking: "sys-whonix"
checkbox "launch settings after creation"In the next pop-up "VM settings" window, you can now select which AppVM to activate for this "OB-vm" domain.
We select "Konsole" & " Openbazaar" and exit with OK.Now we can launch Openbazaar directly or trough terminal by issuing command :
openbazaar2
This permits to monitor what's going on in the backend..
That's all folks ! Openbazaar is now isolated on it's own qube and networking is done directly trough TOR (via "sys-whonix)
Remember to ALWAYS start Openbazaar from the AppVM under domain named "OB-vm", and NEVER, from the "OB-template" (which should not be allocated any networking).
- It is needed to add the update of this newly created OB-template, along with the usual routine of updating others TemplateVMs.
- It is also needed to manually upgrade Openbazaar package with futures updates..
I think I'm having a panic attack.