Skip to content

Instantly share code, notes, and snippets.

@ChristopherA
Last active February 6, 2023 23:52
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ChristopherA/66f154dd963c0df3526f4864d917e375 to your computer and use it in GitHub Desktop.
Save ChristopherA/66f154dd963c0df3526f4864d917e375 to your computer and use it in GitHub Desktop.
Tails OS Tips #tails #tor #privacy

Tails OS Tips

#tails #tailsos #tips #links

https://gist.github.com/search?q=u%3Achristophera+tails

Version Details

  • Current Tails: v 4.25 (2021-12-07)
  • Based on: Debian GNU/Linux 10.11 “Buster”
  • Linux kernel: version 5.10
  • Browser: Tor Browser 12.0.2 anonymous web browser
  • Tor Browser based on: Mozilla’s Firefox 91.4.0 ESR web browser
  • Tor: Tor 0.4.6.8
  • Next release: ~ 2022-01-08

Persistent Storage

Remember:

You can compromise your security if you open the Persistent Storage from another operating system.

Dotfiles

New files added to home directory ~/ are not saved persistently. The persistent dotfiles are saved in cd /live/persistence/TailsData_unlocked/dotfiles/ and symlinked after Persistent boot to your home directory ~/. Changes made to existing files will be persistent.

My Tails Dotfiles

If you are using the SSH and the terminal a lot in Tails, you may find these dotfiles useful. I suggest you download it to your own repo and not use Github pull and push as they are not available via .onion and are certainly keeping logs.

  1. Enable Persistence (Applications->Tails->Configure Persistent Volume)
  2. Enable Dotfiles
  3. Reboot
  4. Start Tails with Persistence & Password
  5. Clone to Persistent storage
git clone https://github.com/ChristopherA/bash-dotfiles-for-tails.git /live/persistence/TailsData_unlocked/dotfiles/
  1. Reboot

Backup Tails Persistent Data to other Tails

To properly preserve owner and unix permissions, it is best to backup Tails to another copy of Tails.

Boot from the first tails with other copy of Tails not plugged in. After boot, plugin the backup copy of Tails, and unlock it from

rsync -PaSHAXv --del /live/persistence/TailsData_unlocked/ /media/amnesia/TailsData

Source

Restore Tails Persisent Data

rsync -PaSHAXv --del /media/amnesia/TailsData/ /live/persistence/TailsData_unlocked

Source

Privacy Practices

My Tails Dotfiles

If you are using the SSH and the terminal a lot in Tails, you may find these dotfiles useful. I suggest you download it to your own repo and not use Github pull and push as they are not available via .onion and are certainly keeping logs.

  1. Enable Persistence (Applications->Tails->Configure Persistent Volume)
  2. Enable Dotfiles
  3. Reboot
  4. Start Tails with Persistence & Password 5
git clone https://github.com/ChristopherA/bash-dotfiles-for-tails.git /live/persistence/TailsData_unlocked/dotfiles/

Reboot

Testing Leakage

Browser Leaks W H I C H Am I Unique?

Mac-flavored Keyboard

NOTE: this setting is not preserved in Persistence by default.

  1. Boot with admin password
  2. Install gnome-tweaks-tool 2. Package Manager 1. Go to Applications->System Tools->Synaptic Package Manager 2. Enter admin password 3. Search for gnome-tweaks 4. Select and mark gnome-tweaks for Installation
    1. User Terminal:
      1. Go to Applications->System Tools->Terminal
      2. Enter admin password
      3. Install sudo apt-get install gnome-tweak-tool
  3. Go to Applications->System Tools->Tweaks
    1. Go to Keyboard & Mouse->Additional Layout Options->Alt/Win behavior
    2. Select Ctrl is mapped to Win and the usual Ctrl keys

Scripts

NOTE: Both of these do not work

Test 1:

#!/bin/sh

touch ~/.Xmodmap
~/.Xmodmap - <<EOF
remove Lock = Caps_Lock
remove Control = Control_L
keysym Control_L = Caps_Lock
keysym Caps_Lock = Control_L
add Lock = Control_L
add Control = Control_L
EOF
xmodmap ~/.Xmodmap

Test 2:

# Windows and Mac keyboards - GUI (Physical Alt is Ctrl, Physical Super is Alt, Physical Ctrl is Super)
setxkbmap -option;setxkbmap -option altwin:ctrl_alt_win

# Windows and Mac keyboards - Terminal Apps (Physical Alt is Super, Physical Super is Alt, Physical Ctrl is Ctrl)
setxkbmap -option;setxkbmap -option altwin:swap_alt_win

# Apple keyboard without hid_apple - GUI
setxkbmap -option;setxkbmap -option ctrl:swap_lwin_lctl,ctrl:swap_rwin_rctl

# Apple keyboard without hid_apple - GUI
setxkbmap -option;setxkbmap -option ctrl:swap_lwin_lctl,ctrl:swap_rwin_rctl

# Apple keyboard without hid_apple - Terminal
setxkbmap -option;setxkbmap -option altwin:alt_super_win

Force ugprade

If for some reason after startup the upgrade Tails check does not start an upgrade, run in Terminal:

tails-upgrade-frontend-wrapper
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment