How to persistently install Dino 0.2.0-1~bpo10+1 on Tails 4.16+ with Torsocks

deprecated

- 2021-03-20 -

• Boot a clean Tails 4.16+ from USB stick (or make sure you have activated the following options on your existing Tails and you know what you are doing)
• Create and configure the Persistent Storage
  • choose Applications -> Tails -> Configure persistent volume
  • activate these options
    • Personal Data
    • Welcome Screen
    • Network Connections
    • Additional Software
    • Dotfiles
• Restart Tails
• Welcome Screen
  • unlock Persistent Storage
  • Additional settings -> Administration Password -> Set Administration Password
  • Start Tails
• Configure Network Connection
• Open Terminal
  
  • choose Applications -> System Tools -> Terminal
  • amnesia@amnesia:~$
    • echo -e '/home/amnesia/.local/share/dino source=dino' | sudo tee -a /live/persistence/TailsData_unlocked/persistence.conf > /dev/null
  • exit Terminal
• Restart Tails
• Open Terminal
  • amnesia@amnesia:~$
    • sudo apt update
      • The update must finish without errors! Sometimes there are connection problems with debian update server. If the update fails, retry some minutes later.
    • sudo apt install dino-im/buster-backports
  • choose "Install Every Time" in GUI, the package is saved in the Persistent Storage and will be reinstalled automatically every time you start Tails. The package will also be updated automatically when you connect to the internet. Installing additional software can take a while at startup, you will be notified when istallation is completed. You can check the success by clicking the Date/Time icon in Tails.
  • wait some seconds until "[INFO] Adding to additional packages list: {'dino-im'}" appears in the terminal, then press ENTER
  • amnesia@amnesia:~$
    • sudo sed -i 's/dino-im$/dino-im\/buster-backports/' /live/persistence/TailsData_unlocked/live-additional-software.conf
    • The following instructions will create a start shell script and add a Desktop Icon named DinoTails to your desktop, so you can start DinoTails just by clicking. If you don't want to use the Desktop Icon, skip these instructions to start DinoTails from terminal or ALT+F2 with "torsocks dino-im".
    • echo -e '#!/bin/bash\n\ntorsocks dino-im' | tee /live/persistence/TailsData_unlocked/dino/DinoTails.sh > /dev/null
    • chmod 700 /live/persistence/TailsData_unlocked/dino/DinoTails.sh
    • echo -e '[Desktop Entry]\nVersion=1.0\nEncoding=UTF-8\nName=DinoTails\nType=Application\nTerminal=false\nExec=/live/persistence/TailsData_unlocked/dino/DinoTails.sh\nIcon=im.dino.Dino\nStartupNotify=true\n' | tee /home/amnesia/Desktop/DinoTails.desktop > /dev/null
    • mkdir -p /live/persistence/TailsData_unlocked/dotfiles/Desktop
    • cp -r /home/amnesia/Desktop/DinoTails.desktop /live/persistence/TailsData_unlocked/dotfiles/Desktop/DinoTails.desktop
  • exit Terminal
• Start Tor Browser
  • register a (test-)XMPP-account with stable OMEMO support, for example try anonym.im
    • https://anonym.im:5281/register_web
  • register a second account to test DinoTails by chatting with yourself on the same system
    
  • close Tor Browser
• Click right mouse button on the DinoTails-Icon on the desktop
  • choose Allow Launching, repeat this once after every reboot
• Double-click on the DinoTails-Icon to start Dino with Torsocks
  • if you start Dino from the application menu "Applications -> Internet -> Dino", it won't use Torsocks
    • this won't be a security issue, it just won't work because connections will be denied by firewall
• Dino starts in GUI
  • set up account, sign in with JID
    • you can also set up two accounts and test DinoTails by chatting with yourself on the same system
  • click the "+"-button (Start Conversation) and choose "Start Conversation"
  • click on the "+"-button in the "Start Conversation" window, again the new "+"-button to open window "Add Contact", fill in the JID of your contact you want to write to, click "add"
    • you can only use OMEMO encryption after your contact has accepted your contact list - request in GUI and vice versa
  • start a test conversation
  • !!!WARNING!!! Dino does not use encryption by default !!!WARNING!!!
    • you have to initially enable encryption in the conversation window by clicking the lock-symbol and choose OMEMO! Future messages and file transfers to this contact will be encrypted with OMEMO automatically
    • every chat partner has to enable encryption separately
    • if only one of two chat partner has activated OMEMO, only this part of the communication will be encrypted
    • the same with file transfer
    • if you get a message "This contact does not support OMEMO" make sure that your chatpartner has accepted the request to add him to your contact list and you accepted vice versa
  • !!!WARNING!!! Dino does not use encryption by default !!!WARNING!!!
  • close Dino
• you can now use Dino, stop it, shutdown your computer, reboot Tails, deactivate the Administator Password, start Tails
• your Dino account settings, keys, contacts, conversations, files and avatars will be stored in /live/persistence/TailsData_unlocked/dino/ and you can now peristently use Dino on Tails just by (Allow Launching and) clicking the DinoTails Desktop Icon

Congratulations, have secure fun with DinoTails!

External Links:

• https://tails.boum.org
• https://dino.im
• https://github.com/dino/dino/wiki/Distribution-Packages
• https://anonym.im
• and a special thanks to sajolida

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License