-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathAnbox.mw
More file actions
141 lines (103 loc) · 5.32 KB
/
Copy pathAnbox.mw
File metadata and controls
141 lines (103 loc) · 5.32 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
{{Header}}
{{title|title=
Anbox - Run Android Applications and Games
}}
{{#seo:
|description=Anbox allows Android applications and mobile games to run inside {{project_name_long}}.
|image=Anbox_apps_short.png
}}
{{archived}} __NOINDEX__
https://anbox.io/ redirects to https://github.com/anbox which says it is deprecated.
[[File:anbox_apps_short.png|thumb|800px|center]]
[[File:Androidosicon.png|Android OS Icon|150px|thumb]]
{{intro|
Anbox allows Android applications and mobile games to run inside {{project_name_short}}.
}}
= Introduction =
{{Community_Support|scope=page}}
= Installation =
To use Anbox with {{project_name_short}}, apply the following steps.
'''1.''' Follow the general {{Kicksecure}} specific instructions.
{{upstream_wiki}}
'''2.''' Follow {{project_name_short}} specific instructions.
'''3.''' Done.
Other {{project_name_short}} specific notices can be found below.
= Anbox Configuration =
== Derivative Specific ==
Disabling [[{{project_name_workstation_short}} Firewall|{{project_name_workstation_long}} Firewall]] is unfortunately required. Otherwise there would be no network access. <ref>
This is because Anbox comes with its own bridged network. Whitelisting that interface in {{project_name_workstation_short}} firewall is [[Unsupported|undocumented]] and might require source code modifications. [[Reporting_Bugs#Patches_are_Welcome|Patches are Welcome]].
</ref>
{{mbox
| image = [[File:Ambox_warning_pn.svg.png|40px]]
| text = Warning:
* This reduces security! Especially when using [[Multiple_Whonix-Workstations|multiple {{project_name_workstation_short}}]] behind the same {{project_name_gateway_long}}.
** Still no risk of clearnet IP leaks. <ref>
* [[Dev/Technical_Introduction#Security_Overview|{{project_name_short}} Security Overview]]
* [[Whonix-Workstation_Firewall#Purpose|purpose of Whonix-Workstation firewall]]
* [[Dev/Technical_Introduction#With_more_technical_terms|technical details why firewall even without firewall {{project_name_short}} is still leak-proof]]
* Forum discussion: [https://forums.whonix.org/t/when-i-turn-off-the-whonix-workstation-firewall-am-i-still-safe/13826 When I turn off the Whonix-Workstation™ Firewall, am I still safe?]
</ref>
}}
{{Box|text=
'''1.''' Inside {{project_name_workstation_short}}.
({{q_project_name_long}}: inside StandaloneVM (better!) or Template).
{{CodeSelect|code=
sudo systemctl mask {{project_name_short_lowercase}}-firewall
}}
'''2.''' Disable [https://www.kicksecure.com/wiki/Systemcheck systemcheck] in {{project_name_workstation_short}} Firewall.
{{Box|text=
{{Open with root rights|filename=
/etc/systemcheck.d/50_user.conf
}}
Paste.
{{CodeSelect|code=
systemcheck_skip_functions+=" check_{{project_name_short_lowercase}}_firewall_systemd_status "
}}
Save.
}}
'''3.''' Reboot.
This is required to unload {{project_name_workstation_short}} firewall rules and to have Anbox load its firewall rules.
{{CodeSelect|code=
sudo reboot
}}
}}
= Android x86 as a Workstation =
There are both distinct advantages and disadvantages of running Android applications in Android x86 Workstation. <ref>https://forums.whonix.org/t/integrate-anbox-into-whonix-workstation/9642</ref>
{| class="wikitable"
|+ ''Android x86 Workstation Advantages and Disadvantages''
|-
! '''Category'''
! '''Notes'''
|-
! Bootloader / Ramdisk
| It is possible to use Magisk to achieve root permissions and hide root from applications on Android x86. <ref>Some individuals have already achieved this.</ref>
|-
! Flexibility
|
* It is possible to use <code>adb</code> if Android x86 uses the same internal network as the Gateway and Workstation. <ref>Also, it may be possible to run ssh-server on {{project_name_workstation_short}} and connect the Android x86 through Termux or similar.</ref>
* Root access - Android x86 has a pre-installed superuser binary and manager so root access works out of the box. Applications with root access will work without any additional setup.
|-
! Networking
| Android x86 provides a virtual Wi-Fi interface (<code>wlan0</code>) so applications think that a real Wi-Fi connection is established (Anbox uses a bridge network interface).
|-
! Operating System
| The full Android stack implemented as Android x86 is a full operating system which requires hardware virtualization.
|-
! Security
| This configuration is less secure than utilizing a {{project_name_workstation_short}}. <ref>Although it may have more flexibility, as static IP connections on the Android x86 Workstation have been accomplished.</ref>
|-
! Software
| Any version of Android from 4.x to 9.x can be installed.
|-
! Speed
| This configuration is slower than anbox installation as Android x86 VM does not provide any type of Guest Additions meaning no graphic card drivers are supported.
|-
|}
To check running anbox within kicksecure (same applied for {{project_name_workstation_short}}) check [https://www.kicksecure.com/wiki/Anbox#Anbox_inside_Kicksecure_%E2%84%A2_Advantages_and_Disadvantages Anbox inside Kicksecure ™ Advantages and Disadvantages]
= Forum Discussion =
* [https://forums.whonix.org/t/running-android-apps-inside-whonix-workstation-proof-of-concept/7441/11 Running Android Apps inside Whonix-Workstation - Anbox - Proof of concept]
* [https://forums.whonix.org/t/integrate-anbox-into-whonix-workstation/9642 Integrate Anbox into Whonix-Workstation]
= Footnotes =
<references />
{{Footer}}
[[Category: Design]]