# -*- mode: yaml; indent-tabs-mode: nil; tab-width: 2; coding: utf-8-unix -*- --- PROXY_TIME_DAEMON: sdwdate PROXY_GPG_KEYERVER_URL: hkps:// proxy_masked_services: - apt-daily-upgrade # List of proxy packages to install. proxy_debs_inst: # Install packages to allow apt to use a repository over HTTPS: - apt - apt-transport-tor - apt-utils - apt-transport-https - bootlogd - ca-certificates - debsums - debsecan - apt-listbugs - dnsmasq - ntpdate - bzip2 - corkscrew - console-data - cron - curl - less - mg - netcat - ncat - openssl - passwd - patch - pciutils - perl - perl-base - sudo - unzip - xsltproc - zip - openssh-client - openssh-server - openssh-sftp-server - nmap - wireless-tools - software-properties-common - lsof - ifupdown - iproute2 - iptables - iputils-ping - htop - iotop - jnettop - iw - jq - python3-argcomplete - libnet-ifconfig-wrapper-perl # I need this for Ubuntu even though it come in the bootstrap - 2 setuptools, 1 pip # - pip # for pip - python3-pkg-resources - python3-pip - python3-setuptools # - python3-wheel # Install packages to allow apt to use a repository over HTTPS: # niceities from testforge - file - findutils - gcc - gdisk - gnupg - gnupg-utils - gnupg2 - gpg - gpg-agent - gpg-wks-client - gpg-wks-server - grep - groff-base - haveged - hostname - init - init-system-helpers - inotify-tools - install-info - iso-codes - kbd - keyboard-configuration - klibc-utils - login - lsb-base - lsb-release - lynx - make - man-db - mount - nano - ncurses-base - ncurses-bin - ncurses-term - net-tools - netbase - parted - pinentry-curses - pm-utils - policykit-1 - policykit-1-gnome - policyrcd-script-zg2 - powermgmt-base - procps - psmisc - python-six - rsync - sed - strace - tar - traceroute - tzdata - upower - util-linux - wget - xz-utils - geoip-bin - nss-plugin-pem - torsocks - whois - yamllint - python3-impacket - python3-altgraph proxy_qemu_guest_debs_inst: - qemu-guest-agent proxy_pips2_inst: [] proxy_pips3_inst: - jq proxy_pips_reinstall: # pip prerequisites #? - distlib #? - lockfile - jq # pip itself? NO # # whonix general - acpi-support - acpi-support-base - acpid - adduser - busybox - console-common - console-data - console-setup - console-setup-linux - coreutils - cpio cntlm_pid_file: /var/run/cntlm/cntlm.pid # BOX_OS_FLAVOR in ['WhonixGateway']}}" proxy_gateway_debs_inst: [] # BOX_OS_FLAVOR in ['KickSecure', 'WhonixGateway', 'WhonixWorkstation'] proxy_xfce_debs_inst: - apt-transport-https - libnetfilter-conntrack3 - dnsmasq-base - dnsmasq - firmware-linux-free - firmware-misc-nonfree - firmware-amd-graphics - firmware-linux-nonfree - firmware-linux - firmware-atheros - firmware-iwlwifi #linux-headers-5.8.0-0.bpo.2-amd64 #linux-image-5.8.0-0.bpo.2-amd64 - ntpdate - corkscrew - cron - mg # No package matching 'liblua5.3' is available # - liblua5.3 - netcat-traditional - netcat - ncat - xsltproc - openssh-client - openssh-server - openssh-sftp-server - nmap-common - libgfortran5 - libblas3 - libncurses-dev - libreadline-dev - nmap - wireless-tools - gir1.2-glib-2.0 - gir1.2-packagekitglib-1.0 - python3-dbus - libgirepository-1.0 - python3-gi - python3-pycurl - python3-software-properties - software-properties-common - ifupdown - libpcap0.8 - libnfnetlink0 - libnftnl11 - libiptc0 - libnetfilter-conntrack3 - iptables - htop - iotop - libpcap0.8 - jnettop - python3-argcomplete - libnet-ifconfig-wrapper-perl # I need this for Ubuntu even though it come in the bootstrap - 2 setuptools, 1 pip #pip #! python-cryptography #! python3-pkg-resources #! apython3-pip #! python3-setuptools #! python3-wheel - install-info - lynx-common - lynx - ncurses-term - rsync - traceroute - tzdata - geoip-bin - nss-plugin-pem - torsocks - whois ## non-qubes-whonix-gateway-xfce - xauth # kicksecure-desktop-applications-recommended : Depends: monero-gui - libpackagekit-glib2-18 # kicksecure-xfce-vm: kicksecure-cli-vm, kicksecure-xfce, kicksecure-network-conf-gui, non-qubes-audio, non-qubes-vm-enhancements-gui, kicksecure-desktop-applications-recommended ## The following NEW packages will be installed: ## apt-transport-https corkscrew cron dnsmasq dnsmasq-base ## firmware-amd-graphics firmware-atheros firmware-iwlwifi firmware-linux ## firmware-linux-free firmware-linux-nonfree firmware-misc-nonfree geoip-bin ## gir1.2-glib-2.0 gir1.2-packagekitglib-1.0 htop ifupdown install-info iotop # No package matching 'liblua5.3' is available## # xiptables jnettop libblas3 libgfortran5 libgirepository-1.0-1 libip6tc0 ## libiptc0 libiw30 liblinear3 liblua5.3-0 liblua5.3-0-dbg liblua5.3-dev ## libncurses-dev libnet-ifconfig-wrapper-perl libnetfilter-conntrack3 ## libnfnetlink0 libnftnl11 libpackagekit-glib2-18 libpcap0.8 libreadline-dev ## lynx lynx-common mg ncat ncurses-term netcat netcat-traditional nmap ## nmap-common nss-plugin-pem ntpdate openssh-client openssh-server ## openssh-sftp-server polipo python3-argcomplete python3-dbus python3-gi ## python3-pycurl python3-software-properties rsync scurl ## software-properties-common torsocks traceroute whois wireless-tools xauth ## xsltproc # RAW complete overlap whonix_gateway_debs: - apparmor - apparmor-utils - arc-theme - auditd - basez - bash - bash-completion - bc - bind9-host - binutils - binutils-common - binutils-x86-64-linux-gnu - bsdmainutils - bsdtar - bsdutils - bubblewrap - cryptsetup - cryptsetup-bin - cryptsetup-initramfs - cryptsetup-run - dash - dbus - dbus-user-session - dconf-gsettings-backend - dconf-service - debconf - debsums - desktop-file-utils - dialog - dictionaries-common - diffutils - dirmngr - distro-info-data - dkms - dmidecode - dmsetup - dnsutils - dpkg - dpkg-dev - e2fslibs - e2fsprogs - eatmydata - elpa-auto-complete - elpa-concurrent - elpa-ctable - elpa-deferred - elpa-epc - elpa-jedi - elpa-jedi-core - elpa-popup - elpa-python-environment - exo-utils - faketime - fdisk - fontconfig - fontconfig-config - fonts-dejavu-core - gettext-base - gir1.2-atk-1.0 - gir1.2-freedesktop - gir1.2-gdkpixbuf-2.0 - gir1.2-glib-2.0 - gir1.2-gtk-3.0 - gir1.2-pango-1.0 - glib-networking - glib-networking-common - glib-networking-services - gnome-brave-icon-theme - gnome-colors-common - gnome-icon-theme - gnome-themes-extra - gnome-themes-extra-data - gnustep-base-common - gnustep-base-runtime - gnustep-common - gpgconf - gpgsm - gpgv - hicolor-icon-theme - jitterentropy-rngd - linux-headers-amd64 - linux-image-amd64 - live-boot - live-boot-initramfs-tools - live-tools - locales - mawk - menu - mime-support - most - mousepad - nyx - obfs4proxy - onioncircuits - openvpn - os-prober - p7zip - p7zip-full - pv - pymacs - pypy - pypy-ipaddress - pypy-lib - pypy-pkg-resources - pypy-setuptools - pypy-stem - python - python-m2crypto - python-minimal - python-pip-whl - python-pyasn1 - python-six - python-yaml - python2 - python2-minimal - python2.7 - python2.7-minimal - python3 - python3-apparmor - python3-dateutil - python3-distutils - python3-gevent - python3-gi - python3-greenlet - python3-ipy - python3-jedi - python3-lib2to3 - python3-libapparmor - python3-minimal - python3-parso - python3-pkg-resources - python3-psutil - python3-pycountry - python3-pyqt5 - python3-scapy - python3-sdnotify - python3-sip - python3-six - python3-socks - python3-stem - python3-virtualenv - python3-yaml - python3.7 - readline-common - secure-delete - sensible-utils - shared-mime-info - sound-theme-freedesktop - spectre-meltdown-checker - spice-vdagent - sysfsutils - systemd - systemd-sysv - sysvinit-utils - tor - tor-geoipdb - torsocks - ucf - udev - udisks2 - unar - vanguards - virt-what - virtualenv - vrms # whonix - wmctrl - xxd - zenity - zenity-common - zlib1g - zsh - zsh-common - zulucrypt-cli - zulupolkit proxy_libvirt_debs_inst: - libvirt-daemon-system - libvirt-clients - libvirt-daemon - usbutils - usb.ids - libvirt-doc - virt-manager - privoxy proxy_libs_debs: [] proxy_services: # console-setup.sh Debian - in /usr/local/etc/local.d/Whonix-Lati.rc - "{{ 'console-setup' if ansible_distribution in ['Ubuntu', 'Debian'] else '' }}" - bootlogd - "{{ 'privoxy' if BOX_WHONIX_PROXY_HOST != '' else '' }}" # FixMe: tie in with # - "{{ 'privoxy' if PRIV_TOR_TYPE == 'client' else ''}}"