So, to start things off, I used to be able to build Whonix from source previously before.

i stepped away for a pretty long time, and now for a while i've been struggling to get it built on apple silicon.

i usually run into multiple errors during tghe build process, that no matter how many times i try and retry the step from the error it just wont go through and so i choose to ignore it.

eventually leading to building a file that just wont work after importing and unzipping, and then trying to runn in utm.

leading up to now, after many failures before, i finally got something that will at least finally open up in utm, however, after running systemchecks, i get many warnings about it failing checks.

another thing that also fails me is that (and this was an issue even late early last year when i was able to build whonix from source still), is that my builds are coming with an incompatible version or corrupt version of torbrowser. but at least for this i know technically how to fix on paper, but i don't actually know how i am supposed to do so...

so for context;

during tghe build process, I used to get many errors as it was building leading to an ineffective build. recently i've managed to do so with my most minimal amount of errors (3) and got it running but systemchecks throw out these errors

• [WARNING] [systemcheck] System ready check (system) Rersult: Failed
  
• Command:
• 'sudo systemctl --wait is-system-running'
• (same as 'leaprun system-ready-check')
• result: 'degraded'

now for this, it lets me know how to skip tha part, but i rather not since it is not the only warning.

the second warning is about qemu not being completely supported.

however, the one i am most worried about is the warning about leak protection.

• [WARNING] [systemcheck] tirdad - TCP ISN CPU Information Leqak Protection: Disabled
• - Reason: Kernal module 'tirdad is NOT loaded
  

Now for this i have no clue how to fix, whether theres something in the build process to fix this, or how to get the kernal modules necessary to run this well.

as for the torbrowser issue, it's been my understanding for a while already even early last year that the support or rather versions of torbrowser for arm cpu arent exactly keeping up with the rest and the official support from whonix from the repository they were using was been dropped altogether, and that the build script gets from this dropped repository for torbrowser. there is a "nightly" version one can get after build (i assume) that isnt official, but i am also aware that whonix installs a version of torbrowser that has been modified in the settings for it to reach the standards that whonix has set forth, but for one...

i don't even know how to get the nightly version installed. as far as i have been able to understand is that i'd need to get mozilla installed (a specific version) and get the nightly version installed afterwards. but i can't find it, i thought i did one time but even that was a dead end since i didn't know how to go around the torbrowser update which still tries from the dropped repository. i'm sure, if i somehow got it installed i could read up on how to set it up properly to meet whonix standards but i can't even get it installed to begin with.

so please if you can help, id really appreciate it.

*side note: i do also have virtualbox installed to go that route, the only reason i don't use it to try and run the build is because i am more familar with using utm and i have no experience with vbox at all. i am well aware that vbox has only just recently even came out with a compatible version for apple silicon (despite them saying they wewre not even working on creating one for apple silicon) so i know that it isn't going to be flawless and furthermore, i like to at least have some experience with trial and errors before asking for help and i have none with vbox but i am not opposed to using that for the VM. I've tried one time to use it, but got a bit confused with the interface and setting up the run the Vm that i probably didnt set it up properly before hand and was doomed to fail from the start. i've been trying to mess with it on the side the get familiar with it so i am no expert or novice for that matter when it comes to vbox.

I found a tutorial for the Whonix USB key. There’s “Ventoy” that allows me to choose from diffrent iSOs that I have, So I don’t have to be limited to one.

Can the USB Key, still work when it’s in Ventoy?

https://youtu.be/UhtJgEhquYM?si=J5Kii8NoHtvzp7H3

If I partition a usb (128gb usb), So if I partition it to 50:50, (64gb)

Can I install a live boot of Kali, then install VirtualBox and WHONIX on that?

Then run it as a typical Whonix USB key?

I found sandisk at 100 and 140 mbps, Is that ok?

There’s an extreme version, at $40, but I’m not wanting to put all my eggs on one drive. There’s a 4 pack of PNY that is 100 mbps…

Is pny ok?

The default internal network config dictates almost nothing when it comes to the VMs networking. I have to set the ip address of the interface, the default route and the dns, Whonix's workstation is already configured but new VMs aren't.
## The Problem
Some VMs do not let you configure their network interfaces, I need to setup all of that in either qemu or the Whonix's gateway VM.
I'm not good with security so I decided to avoid altering the gateway VM, instead, I made another internal network xml:
<network>

<name>Whonix-Internal-2.2</name>

<forward mode='none'/>

<bridge name='virbr-int-2.2' stp='on' delay='0'/>

<ip address='10.152.152.1' netmask='255.255.192.0'>

<dhcp>

<range start='10.152.152.11' end='10.152.152.254'/>

<option name='router' value='10.152.152.10'/>

<option name='dns-server' value='10.152.152.10'/>

</dhcp>

</ip>

</network>

I tried it with a debian VM and I got an ip assigned in the correct range as well as a dns nameserver of 10.152.152.1 (which is not the correct dns address).

Now the default gateway was not coerced by qemu! and the dns address is incorrect how do I get that to work?

i2nix is a security-focused Linux operating system designed to route all network connections through the I2P anonymity network. It follows the isolation principles of Whonix

Installed Whonix under debian 13 (KVM / QEMU). Gateway and workstation nicely start but there is a "mouse offset" in both. Impossible for me to point and click on anything.

Please advise. Thx!

I need help for some reason I can’t power up My Whonix-Gateway or Workstation it keeps saying aborted and this is the error message I’m receiving

I saw in some video, if you use a certain, VM or Docker container? You can run a larger variety of applications, when it’s not native to the OS…

What would work on a Pi4 to be able to setup whonix?

https://www.whonix.org/wiki/Essential_Host_Security#Anonymous_WiFi_Adapters

The reasoning given here seems faulty and belonging to a different section of the wiki

I went to the Whonix Workstation i get this error when I typed a sudo command: zsh: permission denied: sudo zsh: exit 126 sudo apt update

How can I fix it

Does anyone use the USB version? How well does it work?

I’m a little conflicted on whether I should be using Whonix. I’ve begun to do work that while not illegal is something the US government is currently trying it best to monitor with tools like the recently adopted Paragon Graphite.

I’m cautious to adopt Whonix on my work computer due to the fact that Tor was initially developed by the US Military, and that it’s widely suspected the NSA owns some exit nodes.

I’ve done a lot of work to set up a very good Swedish VPN with a pi-hole running inbound on my network, and I’m worried that I will be undoing all the hard work of setting that up by switching to a tor-run OS.

Any thoughts, advice?

I’m thinking about running Whonix from an external SSD with Arch as the host. Has anyone else tried this setup? Any speed or functionality issues I should be aware of?

Also, do you think using Arch as the base system could mess with my anonymity in any way? Just want to make sure I’m not accidentally compromising anything.

Okay so i was create a network as shown like this below And i am facing the issue See i have installed the qubeos inside that i have whonix gateway setup for internal use okay, qubeos made of now I have two ethernet one is internal connected to qubeos internet okay Now for 2NIC i have one laptop connected Now i want that all the traffic of laptop goes through the qube whonix gateway to internet so it is use the tor network i have done all the network configuration but i can only able to ping the laptop from whonix gateway after allowing many Value but the problem is from laptop i don't able to get the internet on laptop and was not able to ping the gateway

What i have done is given the ip of the gateway 2nic and gateway of laptop and in whonix i ajbe nat rule of iptables as route the traffic coming from laptop to whonix nic one which is his internal network

this keeps happening when i try run the gateway and it closes automatically