Re: [Whonix-devel] OpenBSD gateway development

[chiccofx <chi...@to...>]

adrelanos:
> How do you plan to replace grml-debootstrap, i.e. the step for creating
> a base VM image?
> 
> ------------------------------------------------------------------------------
> How ServiceNow helps IT people transform IT departments:
> 1. A cloud service to automate IT design, transition and operations
> 2. Dashboards that offer high-level views of enterprise services
> 3. A single system of record for all IT processes
> http://p.sf.net/sfu/servicenow-d2d-j
> _______________________________________________
> Whonix-devel mailing list
> Who...@li...
> https://lists.sourceforge.net/lists/listinfo/whonix-devel

I just recently started looking into whonix source code. I believe that
whonix would have to be built from inside an OpenBSD machine. This could
possibly break the workstation building process, but I believe that it
is easier to fix that from inside OpenBSD, than building OpenBSD inside
linux. OpenBSD introduces changes to the gcc, assembler, linker, etc.
This: http://www.openbsd.org/faq/faq5.html, illustrates the building
process.

Anyway, as it is limiting to only being able to build openbsd whonix
gateway from inside an openbsd machine it is not that hard to install it
on a virtual machine, since virtualbox HAS to be setup in advance to
whonix installation.

Of course this would only apply to the ones wanting to build from
source, and these could (or not?) be considered computer literate enough
to setup a OpenBSD virtual machine (that if they are not already using
one as host).

Also, the script can detect and only build an OpenBSD gateway if being
run from inside it (or asked to, or both), if not build the debian based
gateway. This is the price to pay for extra security, even smaller
attack surface on the gateway and less RAM needed for it, freeing RAM to
the workstation (to me this is the most nice, for performance reasons).

Cheers,
-- 
GPG: 12E9 BCD6 5298 70B5 6C4C  7F1C 8C70 D6ED 188C AACE