[tor-bugs] #7681 [Tor bundles/installation]: Wrap Tails inside a VM, where the outer VM runs Tor and handles the network

[Tor Bug Tracker & Wiki]

#7681: Wrap Tails inside a VM, where the outer VM runs Tor and handles the network
--------------------------------------+-------------------------------------
 Reporter:  arma                      |          Owner:       
     Type:  defect                    |         Status:  new  
 Priority:  normal                    |      Milestone:       
Component:  Tor bundles/installation  |        Version:       
 Keywords:                            |         Parent:  #7680
   Points:                            |   Actualpoints:       
--------------------------------------+-------------------------------------

Comment(by proper):

 Replying to [comment:4 arma]:
 > See also http://sourceforge.net/projects/whonix/

 Speaking as am maintainer of [http://whonix.sourceforge.net/ Whonix]. As a
 two VM system (can also run without any VMs), it can already run Flash
 without leaking IP. See
 [https://sourceforge.net/projects/whonix/screenshots/flash_leak_test.png
 Screenshot 1] or alternatively
 [http://whonix.sourceforge.net/screenshots/flash_leak_test_both_transport.png
 Screenshot 2]. It works overall very reliable.

 I am not sure, of what you are aiming for in this ticket, but I think
 Whonix might already do a big part of it and for any other "confine flash
 inside a VM" or "build anonymous VM" questions, I can help out as well.

 Is this "boot USB, run some Linux as host, run something as VM to let it
 run unsafe applications" approach really what you want? It may also not be
 the solution for the frequently requested "Flash over Tor" feature. If
 most users were willing to leave their main operating system, they could
 use Tails on CD or Tails on USB. In that case you would tell them, "use
 Tails" and deprecate TBB, but you didn't and as far I know, don't plan on
 doing so. - If you want this or not, I plan to create an USB installer for
 Whonix and help is welcome.

 Maybe what you want from user perspective is rather "some magic box, which
 runs Tor Browser and Flash, which can be started on any major operating
 system"? Whonix could be tweaked to do that as well. (Take Whonix virtual
 machine images; enable automatic apt updates; Visually hide the Gateway;
 use portable Virtual Box or other portable virtualizer; Reduce Virtual Box
 user interface to one big start and stop button) - Whonix would be also a
 good platform to start with. I am certainly interested.

 As for the Winon, I'd appreciate more information, source code etc. Since
 Whonix and Winon share concepts and goals, it would be a good to avoid
 duplicate effort.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7681#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online