Kali Linux

[sdika]

Any guides to get Kali Linux working in Qubes?  Is there anyone working on a template?

[Eric]

At this point I think it has to be done as an HVM domain - it would be great to get a template up and going, though. from the Qubes or Offensive Security community.

One suggestion seems to be just adding the Kali repos to a debian-8 template and going from there. Not sure how complete that is.

[Eric]

Like suggested in this post:
https://groups.google.com/d/msg/qubes-users/abycwxvHYSM/z1FZ-EkPCAAJ

[Achim Patzner]

> Am 07.02.2016 um 10:01 schrieb Eric <akta...@gmail.com>:
>
> At this point I think it has to be done as an HVM domain - it would be great to get a template up and going, though. from the Qubes or Offensive Security community.
>
> One suggestion seems to be just adding the Kali repos to a debian-8 template and going from there. Not sure how complete that is.

It’s taking a bit more than just adding the repos and installing whatever you want. Many of the packages contain GUI applications which will in turn have dependencies on X components which will pull in the entire X environment of Kali. So you should either know how to repair your X environment to adapt it to working in Qubes again or pull in single applications, compiling them one by one yourself (appealing to me, I always preferred compiling the FreeBSD ports myself over installing someone else’s binaries).

It is not impossible, but creating a “real” template-kali as part of the debian-tools (just as it has been done with the Ubuntu templating) might be a better idea.


Achim

[bow...@gmail.com]

On Sunday, 7 February 2016 09:19:26 UTC, Achim Patzner wrote:

Hi,

I've tried the following and as mentioned it broke X. Here are the steps I followed if anyone want to pursue it further:
1- debian-8 template clone
2- sudo vi /etc/apt/sources.list
deb http://http.kali.org/kali kali-rolling main contrib non-free
3- open firewall (temp)
4- gpg --key-server hkp://key.gnupg.net --recv-key 7D8D0BF6 (this is the key ID I found on Kali web site)
5- close firewall
6- gpg --list-keys --with-fingerprint 7D8D0BF6
7- gpg --export --armor 7D8D0BF6 > kali.asc
8- sudo apt-key add kali.asc
9- sudo apt-key list
10- sudo apt-get update
11- sudo halt
12- backup template (cloned...)
13- sudo apt-get install kali-linux-full --> installs fine but break the template X settings. As mentioned, X packaged need to be masked prior to this, I did not take the time to look-up how to do that...

Tested by creating an AppVM based on this template and launched gnome-template which never appeared as Qubes GUI protocol was no longer present to grab the window output and push it to Dom0.

I've read an article about package pinning which might be a good way to set priority so that Qubes has priority over Kali for the packages it manages, however I am not sure what would happen with dependent packages, but it should work...

[bow...@gmail.com]

Well it does not...
sudo vi /etc/apt/preferences

Package: *
Pin: origin deb.qubes-os.org
Pin-Priority: 550

This is not sufficient. accessing via sudo xl console kali
/home/user/.xsession-errors gives
/usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server
/usr/bin/xinit: unable to connect to X server: Connection refused
/usr/bin/xinit: server error