Tails HVM

Original forum link
https://forum.qubes-os.org/t/19012
Original poster
taradiddles
Editors
adw, deeplow
Created at
2023-06-02 05:55:38
Last wiki edit
2023-08-15 08:50:30
Revisions
3 revisions
Posts count
2
Likes count
1
Tags
configuration, hvm, privacy

Tails stands for The Amnesic Incognito Live System. It is a live operating system that aims to preserve your privacy and anonymity. Tails is intended to be booted off of a live CD and leave no trace on the computer it is run on, but using Tails this way requires the user to restart their computer every time they want to switch from their installed OS to Tails. Despite this, in case that method becomes cumbersome, Tails can be used inside virtualization software and Qubes.

To run Tails under Qubes:

  1. Read about creating and using HVM qubes

  2. Download and verify Tails from https://tails.boum.org in a qube, (saved as /home/user/Downloads/tails.iso on qube "isoVM" for purposes of this guide).

  3. Create a HVM

  4. Open dom0 Konsole and start Tails:

    qvm-start Tails --cdrom=isoVM:/home/user/Downloads/tails.iso
    
  5. Configure Tails at start up.

  6. Once the Tails qube has started, configure networking in the qube.

  7. Use Tails as normal.

Security

You will probably want to implement MAC spoofing.

There are added security concerns for Tails users when running it in a virtual machine. If you intend to do this, you should read the warnings from the Tails team about it. While the Qubes security model mitigates most of the risks identified, traces of the Tails session may remain on the disk. Live booting Tails, though less convenient, is always more secure than using it inside virtualization software or Qubes, because you don't run the added risk of the virtualization software or Host OS being compromised. Depending on your threat model, this might induce too much risk.

Troubleshooting

See the Tails Troubleshooting guide.


This document was migrated from the qubes-community project