Git-Mirrors/haveno
1
0
Fork 0
mirror of https://github.com/haveno-dex/haveno.git synced 2025-04-17 14:32:57 -04:00
Code Issues Packages Projects Releases Wiki Activity
haveno/scripts/install_whonix_qubes/INSTALL.md
PromptPunksFauxCough 34458cf3df
Install Haveno on Whonix + Qubes (#1628)
2025-03-16 10:11:17 -04:00

12 KiB
Raw Permalink Blame History

Haveno on Qubes/Whonix

Conventions:

  • # – Requires given linux commands to be executed with root privileges either directly as a root user or by use of sudo command

  • $ or % – Requires given linux commands to be executed as a regular non-privileged user

  • <VAR> – Used to indicate user supplied variable

Installation - Scripted & Manual (GUI + CLI):

Acquire release files:

In dispXXXX AppVM:

Clone repository
% git clone --depth=1 https://github.com/haveno-dex/haveno

Create TemplateVM, NetVM & AppVM:

Scripted

In dispXXXX AppVM:
Prepare files for transfer to dom0
% tar -C haveno/scripts/install_qubes/scripts/0-dom0 -zcvf /tmp/haveno.tgz .
In dom0:
Copy files to dom0
$ mkdir -p /tmp/haveno && qvm-run -p dispXXXX 'cat /tmp/haveno.tgz' > /tmp/haveno.tgz && tar -C /tmp/haveno -zxfv /tmp/haveno.tgz
$ bash /tmp/haveno/0.0-dom0.sh && bash /tmp/haveno/0.1-dom0.sh && bash /tmp/haveno/0.2-dom0.sh

GUI

TemplateVM
Via Qubes Manager:

  • Locate & highlight whonix-workstation-17 (TemplateVM)

  • Right-Click "whonix-workstation-17" and select "Clone qube" from Drop-Down

  • Enter "haveno-template" in "Name"

  • Click OK Button

NetVM
Via Qubes Manager:

  • Click "New qube" Button

  • Enter "sys-haveno" for "Name and label"

  • Click the Button Beside "Name and label" and Select "orange"

  • Select "whonix-gateway-17" from "Template" Drop-Down

  • Select "sys-firewall" from "Networking" Drop-Down

  • Tick "Launch settings after creation" Radio-Box

  • Click OK

  • Click "Advanced" Tab

  • Enter "512" for "Initial memory"

(Within reason, can adjust to personal preference)

  • Enter "512" for "Max memory"

(Within reason, can adjust to personal preference)

  • Tick "Provides network" Radio-Box

  • Click "Apply" Button

  • Click "OK" Button

AppVM
Via Qubes Manager:

  • Click "New qube" Button

  • Enter "haveno" for "Name and label"

  • Click the Button Beside "Name and label" and Select "orange"

  • Select "haveno-template" from "Template" Drop-Down

  • Select "sys-haveno" from "Networking" Drop-Down

  • Tick "Launch settings after creation" Radio-Box

  • Click OK

  • Click "Advanced" Tab

  • Enter "2048" for "Initial memory"

(Within reason, can adjust to personal preference)

  • Enter "4096" for "Max memory"

(Within reason, can adjust to personal preference)

  • Click "Apply" Button

  • Click "OK" Button

CLI

TemplateVM
In dom0:
$ qvm-clone whonix-workstation-17 haveno-template
NetVM
In dom0:
$ qvm-create --template whonix-gateway-17 --class AppVM --label=orange --property memory=512 --property maxmem=512 --property netvm=sys-firewall sys-haveno && qvm-prefs --set sys-haveno provides_network True

AppVM

In dom0:
$ qvm-create --template haveno-template --class AppVM --label=orange --property memory=2048 --property maxmem=4096 --property netvm=sys-haveno haveno
$ printf 'haveno-Haveno.desktop' | qvm-appmenus --set-whitelist – haveno

Build TemplateVM, NetVM & AppVM:

TemplateVM Using Precompiled Package via git Repository (Scripted)

In dispXXXX AppVM:
% qvm-copy haveno/scripts/install_qubes/scripts/1-TemplateVM/1.0-haveno-templatevm.sh

  • Select "haveno-template" for "Target" of Pop-Up

  • Click OK

In haveno-template TemplateVM:
% sudo bash QubesIncoming/dispXXXX/1.0-haveno-templatevm.sh "<PACKAGE_ARCHIVE_URL>" "<PACKAGE_PGP_FINGERPRINT>"

Example:

% sudo bash QubesIncoming/dispXXXX/1.0-haveno-templatevm.sh "https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/haveno-linux-deb.zip" "ABAF11C65A2970B130ABE3C479BE3E4300411886"

TemplateVM Using Precompiled Package From git Repository (CLI)

In haveno-template TemplateVM:
Download & Import Project PGP Key

For Whonix On Qubes OS:

# export https_proxy=http://127.0.0.1:8082
# export KEY_SEARCH="<PACKAGE_PGP_FINGERPRINT>"
# curl -sL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x$KEY_SEARCH" | gpg --import

Example:

# export https_proxy=http://127.0.0.1:8082
# export KEY_SEARCH="ABAF11C65A2970B130ABE3C479BE3E4300411886"
# curl -sL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x$KEY_SEARCH" | gpg --import

For Whonix On Anything Other Than Qubes OS:

# export KEY_SEARCH="<PACKAGE_PGP_FINGERPRINT>"
# curl -sL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x$KEY_SEARCH" | gpg --import

Example:

# export KEY_SEARCH="ABAF11C65A2970B130ABE3C479BE3E4300411886"
# curl -sL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x$KEY_SEARCH" | gpg --import
Download Release Files

For Whonix On Qubes OS:

# export https_proxy=http://127.0.0.1:8082
# curl -sSLo /tmp/hashes.txt https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/1.0.18-hashes.txt
# curl -sSLo /tmp/hashes.txt.sig https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/1.0.18-hashes.txt.sig
# curl -sSLo /tmp/haveno.zip https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/haveno_amd64_deb-latest.zip
# curl -sSLo /tmp/haveno.zip.sig https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/haveno_amd64_deb-latest.zip.sig

Note:

Above are dummy URLS which MUST be replaced with actual working URLs

For Whonix On Anything Other Than Qubes OS:

# curl -sSLo /tmp/hashes.txt https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/1.0.18-hashes.txt
# curl -sSLo /tmp/hashes.txt.sig https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/1.0.18-hashes.txt.sig
# curl -sSLo /tmp/haveno.zip https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/haveno_amd64_deb-latest.zip
# curl -sSLo /tmp/haveno.zip.sig https://github.com/havenoexample/haveno-example/releases/download/v1.0.18/haveno_amd64_deb-latest.zip.sig

Note:

Above are dummy URLS which MUST be replaced with actual working URLs

Verify Release Files
# if gpg --digest-algo SHA256 --verify /tmp/hashes.txt.sig >/dev/null 2>&1; then printf $'SHASUM file has a VALID signature!\n'; else printf $'SHASUMS failed signature check\n' && sleep 5 && exit 1; fi
Verify Hash, Unpack & Install Package
# if [[ $(cat /tmp/hashes.txt) =~ $(sha512sum /tmp/haveno*.zip | awk '{ print $1 }') ]] ; then printf $'SHA Hash IS valid!\n' && mkdir -p /usr/share/desktop-directories && cd /tmp && unzip /tmp/haveno*.zip && apt install -y /tmp/haveno*.deb; else printf $'WARNING: Bad Hash!\n' && exit; fi
Verify Jar
# if [[ $(cat /tmp/desktop*.SHA-256) =~ $(sha256sum /opt/haveno/lib/app/desktop*.jar | awk '{ print $1 }') ]] ; then printf $'SHA Hash IS valid!\n' && printf 'Happy trading!\n'; else printf $'WARNING: Bad Hash!\n' && exit; fi

TemplateVM Building From Source via git Repository (Scripted)

In dispXXXX AppVM:
% bash haveno/scripts/install_qubes/scripts/1-TemplateVM/1.0-haveno-templatevm.sh "<JDK_PACKAGE_URL>" "<JDK_SHA_HASH>" "<SOURCE_URL>"

Example:

% bash haveno/scripts/install_qubes/scripts/1-TemplateVM/1.0-haveno-templatevm.sh "https://download.bell-sw.com/java/21.0.6+10/bellsoft-jdk21.0.6+10-linux-amd64.deb" "a5e3fd9f5323de5fc188180c91e0caa777863b5b" "https://github.com/haveno-dex/haveno"

  • Upon Successful Compilation & Packaging, A Filecopy Confirmation Will Be Presented

  • Select "haveno-template" for "Target" of Pop-Up

  • Click OK

In haveno-template TemplateVM:
% sudo apt install -y ./QubesIncoming/dispXXXX/haveno.deb

NetVM (Scripted)

In dispXXXX AppVM:
$ qvm-copy haveno/scripts/install_qubes/scripts/2-NetVM/2.0-haveno-netvm.sh

  • Select "sys-haveno" for "Target" Within Pop-Up

  • Click "OK" Button

In sys-haveno NetVM:

(Allow bootstrap process to complete)

% sudo zsh QubesIncoming/dispXXXX/2.0-haveno-netvm.sh

NetVM (CLI)

In sys-haveno NetVM:
Add onion-grater Profile
# onion-grater-add 40_haveno
Restart onion-grater Service
# systemctl restart onion-grater.service
# poweroff

AppVM (Scripted)

In dispXXXX AppVM:
$ qvm-copy haveno/scripts/install_qubes/scripts/3-AppVM/3.0-haveno-appvm.sh

  • Select "haveno" for "Target" of Pop-Up

  • Click OK

In haveno AppVM:
% sudo zsh QubesIncoming/dispXXXX/3.0-haveno-appvm.sh

AppVM (CLI)

In haveno AppVM:
Adjust sdwdate Configuration
# mkdir /usr/local/etc/sdwdate-gui.d
# printf "gateway=sys-haveno\n" > /usr/local/etc/sdwdate-gui.d/50_user.conf
# systemctl restart sdwdate
Prepare Firewall Settings via /rw/config/rc.local
# printf "\n# Prepare Local FW Settings\nmkdir -p /usr/local/etc/whonix_firewall.d\n" >> /rw/config/rc.local
# printf "\n# Poke FW\nprintf \"EXTERNAL_OPEN_PORTS+=\\\\\" 9999 \\\\\"\\\n\" | tee /usr/local/etc/whonix_firewall.d/50_user.conf\n" >> /rw/config/rc.local
# printf "\n# Restart FW\nwhonix_firewall\n\n" >> /rw/config/rc.local
View & Verify Change
# tail /rw/config/rc.local

Confirm output contains:

  # Poke FW
  printf "EXTERNAL_OPEN_PORTS+=\" 9999 \"\n" | tee /usr/local/etc/whonix_firewall.d/50_user.conf

  # Restart FW
  whonix_firewall
Restart whonix_firewall
# whonix_firewall
Create haveno-Haveno.desktop
# mkdir -p /home/$(ls /home)/\.local/share/applications
# sed 's|/opt/haveno/bin/Haveno|/opt/haveno/bin/Haveno --torControlPort=9051 --socks5ProxyXmrAddress=127.0.0.1:9050 --useTorForXmr=on|g' /opt/haveno/lib/haveno-Haveno.desktop > /home/$(ls /home)/.local/share/applications/haveno-Haveno.desktop
# chown -R $(ls /home):$(ls /home) /home/$(ls /home)/.local/share/applications
View & Verify Change
# tail /home/$(ls /home)/.local/share/applications/haveno-Haveno.desktop

Confirm output contains:

  [Desktop Entry]
  Name=Haveno
  Comment=Haveno
  Exec=/opt/haveno/bin/Haveno --torControlPort=9051 --socks5ProxyXmrAddress=127.0.0.1:9050 --useTorForXmr=on
  Icon=/opt/haveno/lib/Haveno.png
  Terminal=false
  Type=Application
  Categories=Network
  MimeType=
Poweroff
# poweroff

Remove TemplateVM, NetVM & AppVM:

Scripted

In dom0:
$ bash /tmp/haveno/0.3-dom0.sh

GUI

Via Qubes Manager:

  • Highlight "haveno" (AppVM)

  • Click "Delete qube"

  • Enter "haveno"

  • Click "OK" Button

  • Highlight "haveno-template" (TemplateVM)

  • Click "Delete qube"

  • Enter "haveno-template"

  • Click "OK" Button

  • Highlight "sys-haveno" (NetVM)

  • Click "Delete qube"

  • Enter "sys-haveno"

  • Click "OK" Button

CLI

In dom0:
$ qvm-shutdown --force --quiet haveno haveno-template sys-haveno && qvm-remove --force --quiet haveno haveno-template sys-haveno