Dark › Module 4 › Lesson 2
Whonix Named
Whonix named literacy covers two-VM gateway/workstation design and network isolation from whonix.org public docs — map architecture row on YOUR $DW_LAB before VM isolation hygiene.
Visual · t39_whonix_named
Whonix named literacy. $DW_LAB only. Original Cyberlium.
Opening
Whonix separates Tor gateway from workstation — literacy teaches two-VM architecture from whonix.org so $DW_LAB notes document isolation concepts, not criminal marketplace VMs.
Whonix uses a two-VM design: Whonix-Gateway runs Tor and Whonix-Workstation runs applications without direct network access — traffic routes through the gateway. Use-case literacy covers research VM separation on YOUR lab hypervisor if authorized — not criminal marketplace access. Document architecture row before any installation attempt. Cyberlium writes Whonix named row on YOUR $DW_LAB — gateway role, workstation isolation, use-case literacy note, refused marketplace boundary. Next: VM Isolation Hygiene.
1. Whonix components (named from whonix.org)
Two-VM design: Whonix-Gateway handles Tor connection; Whonix-Workstation runs applications. Isolation: workstation lacks direct network — routes via gateway per whonix.org wiki. Use case literacy: research VM separation on lab hypervisor — not criminal marketplace access.
On $DW_LAB, write Whonix architecture row — gateway role, workstation isolation, authorized lab use note.
Command guide
Try these commands — Whonix components (named from whonix.org)
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Whonix — https://www.whonix.org/ Whonix wiki — https://www.whonix.org/wiki/Documentation Tor Project — https://www.torproject.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
export DW_LAB=${DW_LAB:-$HOME/cyberlium-lab/t39-dw}
curl -sS https://www.whonix.org/ | head -10
cat > "$DW_HARDENED/whonix-named-literacy.txt" <<'EOF'
Whonix literacy (from whonix.org public docs):
Two-VM design: Whonix-Gateway (Tor) + Whonix-Workstation (apps)
Isolation: workstation lacks direct network — routes via gateway
Use case literacy: research VM separation — not criminal marketplace access
Lab: document architecture row — install only on YOUR lab hypervisor if authorized
EOFCommand — copy this
grep -E 'Two-VM|Isolation|marketplace' "$DW_HARDENED/whonix-named-literacy.txt"
Primary tools to practice this lesson: curl, grep. Reference sites: Whonix (https://www.whonix.org/); Whonix wiki (https://www.whonix.org/wiki/Documentation); Tor Project (https://www.torproject.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Why Whonix literacy complements Tails
Tails is live amnesic USB session; Whonix is persistent VM separation — different threat models and OPSEC tradeoffs. Privacy engineers choose based on scenario — literacy names both without mandating installation for every defender role.
Students document lab Whonix notes from whonix.org — production VM usage follows org virtualization policy.
3. Lab boundary
Forbidden: Whonix VMs for criminal marketplace access, employer data in Whonix workstation, skipping gateway isolation concept. Allowed: Whonix named card — architecture row from whonix.org with $DW_LAB literacy label.
Ship: Whonix named row for YOUR lab notes. Next: VM Isolation Hygiene.
4. What you ship: Whonix named row for $DW_LAB
Gateway/workstation roles, isolation note. Source = whonix.org. $DW_LAB named. chmod 600.
5. What you record before the next lesson
Date. Whonix named row. $DW_LAB named. File t39-m04-l02-whonix-named.txt chmod 600.
6. Wrong vs right: criminal markets vs YOUR OPSEC lab
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Skip gateway VM because 'workstation Tor is enough.' Use Whonix for unauthorized dark-web shopping.
Right
Write Whonix named row from whonix.org for YOUR $DW_LAB. Next: VM Isolation Hygiene.
Mission: draft Whonix architecture on YOUR lab notes
1) Name gateway and workstation roles. 2) Write isolation property in one sentence. 3) Note authorized lab use case. 4) Add refused marketplace boundary. chmod 600.
Stuck? Ask Cyberlium AI Mentor
Whonix architecture comes from whonix.org wiki — not criminal VM setup guides.
Knowledge Check
APPLY: Whonix named literacy on Cyberlium covers:
Multiple choice
Knowledge Check
APPLY: True or False: Whonix-Workstation routes traffic through Whonix-Gateway — no direct network.
True or False
Knowledge Check
APPLY: Whonix literacy on Cyberlium uses:
Multiple choice