I'm on Ubuntu 24.04 LTS and I'm running Whonix as a VM inside VirtualBox. How exactly do I create a shared folder in Whonix?

I want to anonymously use Kali Linux in VirtualBox. But VirtualBox's network is also my IP address so I want to use Whonix gateway for my Kali Linux, not Whonix workstation. How do I configure Whonix gateway in Kali? How to connect Whonix gateway to Kali Linux? What's the command I should use?

I’ve had success in setting up and using whonix gateway and workstation on one machine. But I would like to set them up on different hosts, to spread out the memory and CPU requirements. I’ve not found out how to make the VMs talk to each other when they are on different hosts. The gateway seems to be working OK, as it did when running with the workstation on the same machine. Now the workstation is started on a different host, how do I make the workstation (or the host it is running on), aware of having to contact a gateway on a different host? Both hosts are running Linux Mint 17

I created a linux VM with 3 interfaces: a NAT interface for internet access (eth0 with ip in this range 192.168.84.0/24), a Host-only interface for communication with other VMs (eth1 with ip 192.168.10.10) and a VPN interface (tun0 that's up when connected to a VPN server and with ip into this range 10.182.0.0/16, this may change at every connection). My goal is to set up all the necessary instructions on how to route only the incoming and outgoing internet traffic from eth1 to go through tun0 and leave internet access to the other applications on the gateway (if necessary). I would like to create something similar to the Whonix Gateway (where connections are routed through TOR from the outside connected VM Workstation) but instead of using TOR I would like to use a generic VPN service, that would be accessed with OpenVPN or Wireguard. So I thought of some steps to do: 1. Enable IP forwarding on the Linux virtual machine by editing the /etc/sysctl.conf file and setting net.ipv4.ip_forward = 1 2. Add a new route for the host-only interface to route all traffic through the VPN interface with the following command:

sudo route add -net 192.168.10.0 netmask 255.255.255.0 gw 10.182.4.2 dev tun0

Here I'm not sure how to manage it if the IP of the tun0 changes. And if this is correct. 3. Set up iptables rules to redirect all incoming and outgoing traffic from the eth1 interface to the VPN interface, except for traffic coming from the gateway itself with the following commands:

sudo iptables -A FORWARD -i eth1 -o tun0 -j ACCEPT
sudo iptables -A FORWARD -i tun0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -o tun0 -j MASQUERADE
sudo iptables -t nat -A POSTROUTING -s 192.168.84.131 -o eth0 -j MASQUERADE

4. Make iptables rules persistent so install the iptables-persistent package by running the command:

sudo apt-get install iptables-persistent
sudo iptables-save > /etc/iptables/rules.v4

5. Configure the other virtual machine connected to the host-only network to use the Linux virtual machine as its default gateway and DNS server. So set the IP address to a unique address on the same subnet as the host-only network interface of the Linux virtual machine then set the default gateway to the IP address of the host-only network interface of the Linux virtual machine and finally set the DNS server to the IP address of the host-only network interface of the Linux virtual machine. But something is not working properly and from the other VM connected to the gateway through the host-only network I can't connect to the internet (when the VPN is connected on the GW). I'm no expert and I know I'm doing something wrong so can someone help me on simplify and adjust (remove or add instructions) this steps on how to create a linux VM gateway that connect to the internet through a VPN and share this and only this connection with another VM connected through a private network of the 2 VMs (so when the VPN is off the other VM connected to the gateway have no Internet connection). If all of this make sense ^_^ Thanks you so much

I executed sudo apt autoremove to free space in boot. I realized in hindsight that there are better ways to free space. I don't notice any problems on my host os, but when I start Whonix KVM it shows me an error message about being unable to find the command for initramfs-tools. I have to press any key to continue booting Whonix. I don't notice any problem while using Whonix, but I'm not experienced enough to understand what kind of issues the error message could cause. What I've tried: Restarting the computer. sudo apt install initramfs-tools It says it's already installed and up to date. sudo apt install qemu-kvm libvirt-clients libvirt-daemon-system bridge-utils libguestfs-tools genisoimage virtinst libosinfo-bin virt-manager It says they're already installed and up to date. I'm using the latest Whonix KVM version 16.0.3.1 The exact message I get while booting Whonix (same message in both Gateway and Workstation): Booting 'Whonix GNU/Linux' error: can't find command initramfs-tools loading linux 5.10.0-9-amd64... Loading initial ramdisk... Press any key to continue

I use Whonix downloaded gateway and custom OS as Whonix workstation (in VirtualBox). To connect the workstation to the gateway I need to manually set Address, Mask and Gateway to 10.152.152.10, 255.255.192.0, 10.152.152.10. But I can do it only after OS install. Is it possible to make Whonix gateway ethernet automatically detected by the workstation OS? I want a gateway to be determined automatically during the installation of the OS, as if it is a simple internet, like NAT. Hope for your help!

When I try to connect to a ssh server from Whonix. This message display. Does anyone know the problem? $ ssh user@193.203.202.241 uwtwrapper uwt wrapper ERROR: /usr/bin/ssh.anondist-orig does not exist.

I got this message in my whonix VM while trying to access a link The following link will be opened in x-www-browser (/usr/bin/whichbrowser). Be careful if x-www-browser (usr/bin/whichbrowser) is already running as your activities might get linked. I'm a complete noob and still learning, so if anyone could explain this to me in easy to understand/nontechnical terms that would be great. Also, is this a concern in regards to privacy/security especially as it pertains to my Host OS (Windows 10). Also, I want to put out there that I received this message sometime after changing my default browser on my host OS (don't know if that's related in any way). Thanks again. I appreciate all and any of your help.

hi I'm using Debian 10 and trying to run whonix on virtualbox but when run its two modules throws an error: "fail in opening sesion" details: "VT-x is disabled in the Bios for all CPU modes (VERR_VMX_MSR_ALL_VMX_DISABLED)" result code: NS_ERROR_FAILURE (0x80004005) component: ConsoleWrap interfaz: IConsole {872da645-4a9b-1727-bee2-5585105b9eed} and in terminal: "Qt WARNING : QStandardPaths: XDG_RUNTIME_DIR not set, defaulting to '/tmp/runtime-root' know what i must to do to run it? thx

Installed remmina and now trying to run it with sudo remmina. But getting this: No protocol specified ** (remmina:9005): WARNING **: Could not open X display No protocol specified Unable to init server: Could not connect: Connection refused (remmina:9005): Gtk-WARNING **: cannot open display: :0 Any ideas how to fix it?

I followed the instructions for installing Whonix on Linux and I got stuck at installing Virtualbox from Debian backports. I get the following errors after step 3 ([here](https://www.whonix.org/wiki/VirtualBox)) : W: GPG error: http://cdn-fastly.deb.debian.org/debian stretch-backports InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553 NO_PUBKEY 7638D0442B90D010 E: The repository 'http://http.debian.net/debian stretch-backports InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. I tried to replace the recommended line sudo su -c "echo -e 'deb http://http.debian.net/debian stretch-backports main contrib' > /etc/apt/sources.list.d/backports.list" with sudo su -c "echo -e 'deb http://ftp.debian.org/debian stretch-backports main' > /etc/apt/sources.list.d/backports.list" I got that information from the Debian website: https://backports.debian.org/Instructions/ *Note:* I removed the old backports.list before adding the new with following command: sudo rm /etc/apt/sources.list.d/backports.list Well I get quite the same error with the recommended instructions on the Debian site. I wonder now, what to do. Can't I just install virtualbox from the Ubuntu repo? It's a little confusing, since the references on the [whonix page](https://www.whonix.org/wiki/VirtualBox) at the end of the line "Package virtualbox should be installed from Debian backports." are not working. The browser is just jumping at the top of the site.

Does Whonix Linux distro hide your IP address if the traffic goes through a malicious Tor exit node or does it just hide the IP address against malicious software?

I've read somewhere that Whonix OS will force all connections through Tor. And I also read about Torsocks who seem to do the same thing. So what's the difference between them? And which one is safer to use?

Unlike with Whonix 13, I find it quite difficult to run Whonix 14 under Debian stretch via KVM. Scaling the screen to full screen does work sometimes but sometimes it does not. The first indicator is an error window indicating "KdeSudo: No command arguments supplied! Usage: kdesudo ...". Then, the host mouse if often (but not always) not connected to the guest screen. When the guest screen is operational, picking a higher screen resolution does not seem to be reboot persistent. Finally, I often get the error "drm:qxl_enc:commit [qxl] ERROR head number too large or missing monitors config" after restarting the Workstation which did scale once before. Can anyone please be so kind to point me to a suitable next step?

am running whonix inside virtual machine. Last time I have added debian testing and unstable repositories, than installed firejail from testing, made apt-get update and also apt-get upgrade, and got black screen after reboot. I saw this picture when tried to log in using console: File /etc/ld.so.preload was empty, I removed it, errors left screen but black screen still here. I don't know how to fix it. If I am pressing Host+F1, then logging and do: sudo apt-get update && sudo apt-get dist-upgrade I will see very weird picture: last kernel log in attachment

I'm trying to install Hexchat on Whonix, but the download gave me an exe file that is asking me what to open it with. What do I open it with? Do I have to download Unix/Linux version or what?

My goal to launch browser safety, for this task I need use firejail (exists in backports repository) and firetools (not exists in main and in backports). Are there any ways install firetools on whonix distributive? Information I've found about it is only: > Firetools is in sid and stretch only but its dependencies will create a mess even with pinning.

I've read about [multiple Whonix-Workstations](https://www.whonix.org/wiki/Multiple_Whonix-Workstations) and would like to clarify. Is it correct that: 1. If I want one Whonix-Gateway and multiple Whonix-Workstations in KVM I just need to edit Whonix-Workstation's /etc/network/interfaces.d/30_non-qubes-whonix file by changing the last octet of the IP address (e.g. 10.152.152.11 to 10.152.152.12 if it's the second Workstation or 10.152.152.11 to 10.152.152.13 if it's the third Workstation, etc.)? 2. If I want to add another Workstation and want to use separate Gateway for that Workstation in KVM I need to create new internal network by changing the name attribute in Whonix's network XML file (e.g. Whonix to Whonix2 if it's the second Gateway or Whonix to Whonix3 if it's the third Gateway, etc.) and accordingly change the line ` in both Gateway's and Workstation's XML files? And if it's the first Workstation for that Gateway (but not the first Workstation on the host) there is no need to change the IP address as in the first paragraph because we created network (e.g. Whonix2, Whonix3, etc.) that's completely separate and independent from previously created networks? And generally IP addressess of different networks in KVM are completely independent (e.g. we can have one Gateway with Whonix network name and three Workstations using that Gateway with IP addresses 10.152.152.11, 10.152.152.12, 10.152.152.13 and at the same time another Gateway with Whonix2 network name and three Workstations using that Gateway with the same IP addresses (10.152.152.11, 10.152.152.12, 10.152.152.13`)?

I've tried installing and booting both Whonix 13.0.0.1.4 and Whonix14.0.0.2.6, downloaded and verified from Whonix's onion mirror. In both cases and with both VMs I got this same result. A black screen with "Booting from Hard Disk... Boot failed: not a bootable disk. No bootable device." To install them I followed this guide (https://www.whonix.org/wiki/KVM) , the only thing I've done differently is to download alternative packages for libvirt-bin, as suggested by apt: [sudo] password for thoreau: Reading package lists... Done Building dependency tree Reading state information... Done Package libvirt-bin is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source However the following packages replace it: libvirt-daemon-system libvirt-dev libvirt-clients E: Package 'libvirt-bin' has no installation candidate thoreau@Thoreau:~/Installers/Whonix$ And that's it. I'm stuck and don't even know what seems to be the problem. If there's any more information that I could provide, please ask.

So I've been trying to setup a vpn in whonix workstation but it is proving somewhat difficult for me. Specific vpn is nord vpn and I was following [their instructions for command line install](https://nordvpn.com/tutorials/linux/openvpn/) but it fails at step 4 as it cannot download the ca and config files. I then downloaded them in another system and then put them in whonix workstation. When trying to copy the files into cd /etc/openvpn I am unable to do so because I don't have root permissions. From memory I can use gksudo to operate file manager as root and put the files where they need to be. gksudo isn't a recognised command however so that stopped me again. I don't really want to wreck my system by tapping around in the commandline too much; is there an easy way to put the files where they need to go?? If I had the network manager in whonix workstation it would also be alot easier but again it is hard to get installed etc.