Debian¶

Debian-specific template adjustments. Note that Whonix is Debian-based and some customizations may work there as well.

Additional AppArmor Profiles¶

apt install -y apparmor-profiles apparmor-profiles-extra

Vim as Default Editor¶

apt install -y vim
update-alternatives --set editor /usr/bin/vim.nox

Enable APT Sandbox¶

Create /etc/apt/apt.conf.d/90sandbox:

APT::Sandbox::Seccomp "true";

Allow tor+http:// URLs in `sources.list`¶

Create /etc/apt/apt.conf.d/00tor-proxy:

# Allow updates via sys-whonix and sys-onion. In
# TemplateVMs this gets overridden by 01qubes-proxy.

Acquire::tor::proxy "socks5h://10.152.152.10:9050/";

Note

10.152.152.10 is the IP Whonix uses to contact Whonix GW from Whonix WS and for compatibility the Onion Qube uses the same.