How to persistently install Dino 0.2.0~git29.2021-02-10.0626bad8 on Tails 4.15.1 with Torsocks

deprecated

- 2021-02-14 -

Boot a clean Tails 4.15.1 from USB stick
Create and configure the Persistent Storage
- choose Applications -> Tails -> Configure persistent volume
- activate these options
  - Personal Data
  - Welcome Screen
  - Network Connections
  - Additional Software
  - GnuPG
  - Dotfiles
Restart Tails
Welcome Screen
- unlock Persistent Storage
- Additional settings -> Administration Password -> Set Administration Password
- Start Tails
Configure Network Connection
Open Terminal
- choose Applications -> System Tools -> Terminal
- amnesia@amnesia:~$
  - sudo install -d -m 755 /live/persistence/TailsData_unlocked/apt-sources.list.d
  - echo "/etc/apt/sources.list.d source=apt-sources.list.d,link" | sudo tee -a /live/persistence/TailsData_unlocked/persistence.conf > /dev/null
  - echo "deb tor+https://download.opensuse.org/repositories/network:/messaging:/xmpp:/dino/Debian_10/ /" | sudo tee -a /live/persistence/TailsData_unlocked/apt-sources.list.d/DinoTails.list > /dev/null
  - sudo chown root:root /live/persistence/TailsData_unlocked/apt-sources.list.d/DinoTails.list
  - sudo chmod 644 /live/persistence/TailsData_unlocked/apt-sources.list.d/DinoTails.list
- exit Terminal
Shutdown Tails and reboot, unlock Persistent Storage, (Administrator Password is set automatically), start Tails
Open Terminal
- amnesia@amnesia:~$
  - curl -fsSL --socks5-hostname localhost:9050 https://download.opensuse.org/repositories/network:messaging:xmpp:dino/Debian_10/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/network_messaging_xmpp_dino.gpg > /dev/null
  - sudo apt update
    - The update must finish without errors! Sometimes there are connection problems with debian update server. If the update fails, retry some minutes later.
  - sudo apt install dino
- choose "Install Every Time" in GUI, the package is saved in the Persistent Storage and will be reinstalled automatically every time you start Tails. The package will also be updated automatically when you connect to the Internet. Installing additional software can take a while at startup, you will be notified when istallation is completed. You can check the success by clicking the Date/Time icon in Tails.
- wait some seconds until "[INFO] Adding to additional packages list: {'dino-im'}" appears in the terminal, then press ENTER
- amnesia@amnesia:~$
  - mkdir -p /live/persistence/TailsData_unlocked/Persistent/DinoTails/dino
  - echo -e '#!/bin/bash\n\nrm -f/home/amnesia/.local/share/dino\nln -s /live/persistence/TailsData_unlocked/Persistent/DinoTails/dino /home/amnesia/.local/share/dino\ntorsocks dino' | tee/live/persistence/TailsData_unlocked/Persistent/DinoTails/DinoTails.sh > /dev/null
  - chmod 700 /live/persistence/TailsData_unlocked/Persistent/DinoTails/DinoTails.sh
  - echo -e '[Desktop Entry]\nVersion=1.0\nEncoding=UTF-8\nName=DinoTails\nType=Application\nTerminal=false\nExec=/live/persistence/TailsData_unlocked/Persistent/DinoTails/DinoTails.sh\nIcon=im.dino.Dino\nStartupNotify=true\n' |tee /home/amnesia/Desktop/DinoTails.desktop > /dev/null
  - mkdir -p /live/persistence/TailsData_unlocked/dotfiles/Desktop
  - cp -r /home/amnesia/Desktop/DinoTails.desktop /live/persistence/TailsData_unlocked/dotfiles/Desktop/DinoTails.desktop
- exit Terminal
Start Tor Browser
- register a (test-)XMPP-account with stable OMEMO support, for example try anonym.im
  - https://anonym.im:5281/register_web
- register a second account to test DinoTails by chatting with yourself on the same system
- close Tor Browser
Click right mouse button on the DinoTails-Icon on the desktop
- choose Allow Launching, repeat this once after every reboot
Double-click on the DinoTails-Icon to start Dino with Torsocks
- if you start Dino from the application menu "Applications -> Internet -> Dino", it won't use Torsocks and the Dino configuration and data directory won't be linked
  - this won't be a security issue, it just won't work because connections will be denied by firewall and Dino won't find it's configuration without being linked before
Dino starts in GUI
- set up account, sign in with JID
  - you can also set up two accounts and test DinoTails by chatting with yourself on the same system
- click the "+"-button (Start Conversation) and choose "Start Conversation"
- click on the "+"-button in the "Start Conversation" window, again the new "+"-button to open window "Add Contact", fill in the JID of your contact you want to write to, click "add"
  - you can only use OMEMO encryption after your contact has accepted your contact list - request in GUI and vice versa
- start a test conversation
- !!!WARNING!!! Dino does not use encryption by default !!!WARNING!!!
  - you have to initially enable encryption in the conversation window by clicking the lock-symbol and choose OMEMO! Future messages and file transfers to this contact will be encrypted with OMEMO automatically
  - every chat partner has to enable encryption separately
  - if only one of two chat partner has activated OMEMO, only this part of the communication will be encrypted
  - the same with file transfer
  - if you get a message "This contact does not support OMEMO" make sure that your chatpartner has accepted the request to add him to your contact list and you accepted vice versa
- !!!WARNING!!! Dino does not use encryption by default !!!WARNING!!!
- close Dino
you can now use Dino, stop it, shutdown your computer, reboot Tails, deactivate the Administator Password, start Tails
your Dino account settings, keys, contacts, conversations, files and avatars will be stable and you can now peristently use Dino on Tails just by (Allow Launching and) clicking the DinoTails desktop icon

Congratulations, have secure fun with DinoTails!

External Links:

Timo Hinrichs

dinotails@t-hinrichs.net

https://t-hinrichs.net/DinoTails/DinoTails.html

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License