[qubes-users] Re: OnionShare
> Valko quote: > I can confirm it works on whonix appvm and whonix templatevm also without > any modifications. I was under the impression that it wasn't usable in whonix yet, at least not safely. A search in whonix forums for onionshare shows progress being made but not ready yet. Do you have other info? http://kk63ava6.onion/wiki/Onionshare "Using onionshare in Whonix will most likely be possible with the next release, Whonix 14. By then, the documentation here will be updated." -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8a7be6f2cdebaead90213994586bbcc1.webmail%40localhost. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Updates, security
> On Sat, Jan 14, 2017 at 12:08:25AM -0000, haxy wrote: >> Going back to the first post. >> >> "Qubes repository will allow changing the >> "http" to "https" in the qubes entry /etc/apt/sources.list.d/." >> >> How would one implement that on a qubes-fedora template? >> >> Looking at Installing and updating software in VMs >> "http://qubesosmamapaxpa.onion/doc/software-update-vm/; >> >> It looks like https mirrors are used for fedora and that other entries >> in >> yum.repos.d including qubes-*.repo could be changed from http to https. >> >> Would that work? >> Although onion service would be preferred, might be a bit better than >> clearnet after exit node. >> >> > Yes, that will work as you think. The benefits are marginal. > > > Thanks Unman. A marginal benefit is still a benefit. Especially if easily done. Would be nice if the devs could make that change in an upcoming update, at least until onion service repos are implemented. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ba911d4c9ae83c66a0116d05b3f57af3.webmail%40localhost. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] OnionShare
>> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA512 >> >> On 2017-01-08 17:44, Unman wrote: >>> On Mon, Jan 09, 2017 at 01:16:01AM +, Unman wrote: >>>> On Mon, Jan 09, 2017 at 12:48:58AM -, haxy wrote: >>>>>> On Sun, Jan 08, 2017 at 11:50:37PM -, haxy wrote: >>>>>>>>> On Wed, Jan 04, 2017 at 03:02:48AM +, Unman wrote: >>>>>>>>>> On Wed, Jan 04, 2017 at 12:39:39AM -, haxy wrote: >>>>>>>>>>>> On Mon, Jan 02, 2017 at 11:35:22PM -, haxy wrote: >>>>>>>>>>>>> Does OnionShare work safely in Qubes? >>>>>>>>>>>>> >>>>>>>>>>>>> Gave it a try with an AppVm based on a qubes-debian template >>>>>>> but >>>>>>>>>> wasn't >>>>>>>>>>>>> able to get it working. >>>>>>>>>>>>> >>>>>>>>>>>>> Haven't been able to find any posts in the qubes users or >>>>>>>>>>>>> devel >>>>>>>>>> forums >>>>>>>>>>>>> about this. Did see some discussion on the whonix forum but >>>>>>> that >>>>>>>>>> looks >>>>>>>>>>>>> to >>>>>>>>>>>>> still be in the development stage. >>>>>>>>>>>>> >>>>>>>>>>>>> Would it be possible using a non-qubes debian or fedora hvm? >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> You don't say why you weren't able to get it working, or what >>>>>>> steps >>>>>>>>>> you >>>>>>>>>>>> took to troubleshoot the problem. >>>>>>>>>>>> I can confirm that it works fine on a standard Debian appVM. >>>>>>>>>>>> >>>>>>>>>>>> From your reference to whonix, I suspect that that is your >>>>>>> problem. >>>>>>>>>> I >>>>>>>>>>>> don't use whonix so cant check this but I believe that >>>>>>> onionshare >>>>>>>>>> relies >>>>>>>>>>>> on access to a tor control port opened with Tor Browser. I >>>>>>>>>>>> think >>>>>>>>>> that >>>>>>>>>>>> the whonix design would preclude this. >>>>>>>>>>>> >>>>>>>>>>>> You can try with a normal qube connected to sys-firewall. You >>>>>>> can't >>>>>>>>>> use >>>>>>>>>>>> the normal qubes torVM because that doesn't have the control >>>>>>> port >>>>>>>>>> open, >>>>>>>>>>>> but with some minor modifications you can fix this, and then >>>>>>>>>>>> try >>>>>>> to >>>>>>>>>> run >>>>>>>>>>>> onionshare there. >>>>>>>>>>>> >>>>>>>>>>>> I don't believe there are any "safety" issues. >>>>>>>>>>>> >>>>>>>>>>>> unman >>>>>>>>>>> >>>>>>>>>>> @ unman: Thanks and you are right. I should have included the >>>>>>> steps >>>>>>>>>>> taken to troubleshoot. >>>>>>>>>>> >>>>>>>>>>> Steps taken: >>>>>>>>>>> >>>>>>>>>>> 1. Using a cloned qubes-debian template created an AppVM. >>>>>>>>>>> 2. Installed onionshare via debian apt-get. >>>>>>>>>>> 3. Was able to open onionshare but not able to connect using >>>>>>>>>> sys-firewall >>>>>>>>>>> as the Net-VM. >>>>>>>>>>> 4. Deleted the AppVM, created new AppVM and reins
[qubes-users] Re: Updates, security
> Going back to the first post. > > "Qubes repository will allow changing the > "http" to "https" in the qubes entry /etc/apt/sources.list.d/." > > How would one implement that on a qubes-fedora template? > > Looking at Installing and updating software in VMs > "http://qubesosmamapaxpa.onion/doc/software-update-vm/; > > It looks like https mirrors are used for fedora and that other entries in > yum.repos.d including qubes-*.repo could be changed from http to https. > > Would that work? > Although onion service would be preferred, might be a bit better than > clearnet after exit node. > Sorry, thought this would merge with the previous Updates, security post. Link here: https://groups.google.com/forum/?_escaped_fragment_=topic/qubes-users/MZ4Lnene4FM#!topic/qubes-users/MZ4Lnene4FM -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7d91cb8b3a6a000b82e5cf18dc244e33.webmail%40localhost. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Updates, security
Going back to the first post. "Qubes repository will allow changing the "http" to "https" in the qubes entry /etc/apt/sources.list.d/." How would one implement that on a qubes-fedora template? Looking at Installing and updating software in VMs "http://qubesosmamapaxpa.onion/doc/software-update-vm/; It looks like https mirrors are used for fedora and that other entries in yum.repos.d including qubes-*.repo could be changed from http to https. Would that work? Although onion service would be preferred, might be a bit better than clearnet after exit node. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5fcd1f8e782a906fb5d9b1430ee885e7.webmail%40localhost. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] OnionShare
>> On Wed, Jan 04, 2017 at 03:02:48AM +, Unman wrote: >>> On Wed, Jan 04, 2017 at 12:39:39AM -, haxy wrote: >>> > > On Mon, Jan 02, 2017 at 11:35:22PM -, haxy wrote: >>> > >> Does OnionShare work safely in Qubes? >>> > >> >>> > >> Gave it a try with an AppVm based on a qubes-debian template but >>> wasn't >>> > >> able to get it working. >>> > >> >>> > >> Haven't been able to find any posts in the qubes users or devel >>> forums >>> > >> about this. Did see some discussion on the whonix forum but that >>> looks >>> > >> to >>> > >> still be in the development stage. >>> > >> >>> > >> Would it be possible using a non-qubes debian or fedora hvm? >>> > >> >>> > >> >>> > > >>> > > You don't say why you weren't able to get it working, or what steps >>> you >>> > > took to troubleshoot the problem. >>> > > I can confirm that it works fine on a standard Debian appVM. >>> > > >>> > > From your reference to whonix, I suspect that that is your problem. >>> I >>> > > don't use whonix so cant check this but I believe that onionshare >>> relies >>> > > on access to a tor control port opened with Tor Browser. I think >>> that >>> > > the whonix design would preclude this. >>> > > >>> > > You can try with a normal qube connected to sys-firewall. You can't >>> use >>> > > the normal qubes torVM because that doesn't have the control port >>> open, >>> > > but with some minor modifications you can fix this, and then try to >>> run >>> > > onionshare there. >>> > > >>> > > I don't believe there are any "safety" issues. >>> > > >>> > > unman >>> > >>> > @ unman: Thanks and you are right. I should have included the steps >>> > taken to troubleshoot. >>> > >>> > Steps taken: >>> > >>> > 1. Using a cloned qubes-debian template created an AppVM. >>> > 2. Installed onionshare via debian apt-get. >>> > 3. Was able to open onionshare but not able to connect using >>> sys-firewall >>> > as the Net-VM. >>> > 4. Deleted the AppVM, created new AppVM and reinstalled via debian >>> > apt-get. Although onionshare appeared to install properly, >>> onionshare >>> was >>> > not accessable via konsole nor visible in file manager. >>> > 5. Installed in the cloned template with the same results. >>> > >>> > unman quote: I can confirm that it works fine on a standard Debian >>> appVM. >>> > >>> > As I'm unsure, are you referring to an AppVM based on the included >>> qubes >>> > debian template? >>> > >>> > Maybe a problem with the debian repo? Did you install via debian >>> repo >>> or >>> > do a build? >>> > >>> >>> I used a qube based on the standard Debian template. >>> Cloned with git and installed the dependencies, and the TBB. >>> Started the TorBrowser. >>> Ran the onionshare-gui script. >>> Tested the connection to TorBrowser from File-Settings. >>> Shared a file. >>> >>> I'll check using the Debian package. >>> >> >> OK, well apart from the huge dependencies pulled in, everything seemed >> to work. >> Created qube based on standard Debian template. >> Installed the onionshare package with apt-get. >> Started onionshare-gui from xterm. >> I had to start TBB - why? The install pulled in tor and started it. >> Once TBB running and checked, I could share files. >> >> In view of your later email I'd suggest testing with a standard TBB. >> You can follow progress from the term where you started onionshare, and >> you should see the connection established to the control port and then >> the HS being set up. >> Obviously you will need to test the TBB is working. >> >> unman >> >> >> > @ unman: Thanks for your help! Onionshare working now. > Found that "searching" for onionshare after install would only work as > root. > > Also, you were right about testing with standared TBB version. > Using the hardened version results in: > >
Re: [qubes-users] OnionShare
> On Wed, Jan 04, 2017 at 03:02:48AM +, Unman wrote: >> On Wed, Jan 04, 2017 at 12:39:39AM -0000, haxy wrote: >> > > On Mon, Jan 02, 2017 at 11:35:22PM -, haxy wrote: >> > >> Does OnionShare work safely in Qubes? >> > >> >> > >> Gave it a try with an AppVm based on a qubes-debian template but >> wasn't >> > >> able to get it working. >> > >> >> > >> Haven't been able to find any posts in the qubes users or devel >> forums >> > >> about this. Did see some discussion on the whonix forum but that >> looks >> > >> to >> > >> still be in the development stage. >> > >> >> > >> Would it be possible using a non-qubes debian or fedora hvm? >> > >> >> > >> >> > > >> > > You don't say why you weren't able to get it working, or what steps >> you >> > > took to troubleshoot the problem. >> > > I can confirm that it works fine on a standard Debian appVM. >> > > >> > > From your reference to whonix, I suspect that that is your problem. >> I >> > > don't use whonix so cant check this but I believe that onionshare >> relies >> > > on access to a tor control port opened with Tor Browser. I think >> that >> > > the whonix design would preclude this. >> > > >> > > You can try with a normal qube connected to sys-firewall. You can't >> use >> > > the normal qubes torVM because that doesn't have the control port >> open, >> > > but with some minor modifications you can fix this, and then try to >> run >> > > onionshare there. >> > > >> > > I don't believe there are any "safety" issues. >> > > >> > > unman >> > >> > @ unman: Thanks and you are right. I should have included the steps >> > taken to troubleshoot. >> > >> > Steps taken: >> > >> > 1. Using a cloned qubes-debian template created an AppVM. >> > 2. Installed onionshare via debian apt-get. >> > 3. Was able to open onionshare but not able to connect using >> sys-firewall >> > as the Net-VM. >> > 4. Deleted the AppVM, created new AppVM and reinstalled via debian >> > apt-get. Although onionshare appeared to install properly, onionshare >> was >> > not accessable via konsole nor visible in file manager. >> > 5. Installed in the cloned template with the same results. >> > >> > unman quote: I can confirm that it works fine on a standard Debian >> appVM. >> > >> > As I'm unsure, are you referring to an AppVM based on the included >> qubes >> > debian template? >> > >> > Maybe a problem with the debian repo? Did you install via debian repo >> or >> > do a build? >> > >> >> I used a qube based on the standard Debian template. >> Cloned with git and installed the dependencies, and the TBB. >> Started the TorBrowser. >> Ran the onionshare-gui script. >> Tested the connection to TorBrowser from File-Settings. >> Shared a file. >> >> I'll check using the Debian package. >> > > OK, well apart from the huge dependencies pulled in, everything seemed > to work. > Created qube based on standard Debian template. > Installed the onionshare package with apt-get. > Started onionshare-gui from xterm. > I had to start TBB - why? The install pulled in tor and started it. > Once TBB running and checked, I could share files. > > In view of your later email I'd suggest testing with a standard TBB. > You can follow progress from the term where you started onionshare, and > you should see the connection established to the control port and then > the HS being set up. > Obviously you will need to test the TBB is working. > > unman > > > @ unman: Thanks for your help! Onionshare working now. Found that "searching" for onionshare after install would only work as root. Also, you were right about testing with standared TBB version. Using the hardened version results in: "Can't connect to Tor control port on port [9051, 9151]. OnionShare requires Tor Browser to be running in the background to work. If you don't have it you can get it from https://www.torproject.org/.; Works with standard TBB. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/aac7fb542677d1411eec0c3c185f8d46.webmail%40localhost. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] OnionShare
Another thought not related to the inability to access onionshare the second time... Could using TBB hardened vice stable version make the connection fail? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/63a7fc2b8cd911bb078e5aa8fe3feee8.webmail%40localhost. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] OnionShare
> On Mon, Jan 02, 2017 at 11:35:22PM -0000, haxy wrote: >> Does OnionShare work safely in Qubes? >> >> Gave it a try with an AppVm based on a qubes-debian template but wasn't >> able to get it working. >> >> Haven't been able to find any posts in the qubes users or devel forums >> about this. Did see some discussion on the whonix forum but that looks >> to >> still be in the development stage. >> >> Would it be possible using a non-qubes debian or fedora hvm? >> >> > > You don't say why you weren't able to get it working, or what steps you > took to troubleshoot the problem. > I can confirm that it works fine on a standard Debian appVM. > > From your reference to whonix, I suspect that that is your problem. I > don't use whonix so cant check this but I believe that onionshare relies > on access to a tor control port opened with Tor Browser. I think that > the whonix design would preclude this. > > You can try with a normal qube connected to sys-firewall. You can't use > the normal qubes torVM because that doesn't have the control port open, > but with some minor modifications you can fix this, and then try to run > onionshare there. > > I don't believe there are any "safety" issues. > > unman @ unman: Thanks and you are right. I should have included the steps taken to troubleshoot. Steps taken: 1. Using a cloned qubes-debian template created an AppVM. 2. Installed onionshare via debian apt-get. 3. Was able to open onionshare but not able to connect using sys-firewall as the Net-VM. 4. Deleted the AppVM, created new AppVM and reinstalled via debian apt-get. Although onionshare appeared to install properly, onionshare was not accessable via konsole nor visible in file manager. 5. Installed in the cloned template with the same results. unman quote: I can confirm that it works fine on a standard Debian appVM. As I'm unsure, are you referring to an AppVM based on the included qubes debian template? Maybe a problem with the debian repo? Did you install via debian repo or do a build? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/d9cee31f9b667534fd695f3ec64c487e.webmail%40localhost. For more options, visit https://groups.google.com/d/optout.
