Whonix VPS — nested virt and official KVM images

Whonix is two VMs, so RAM sets the floor: Sentry (4 GB, $6/mo annual) minimum. Nested KVM, official whonix.org images, crypto, no passport.
Der Artikeltext ist auf Englisch. Header, Katalog und Kasse sind übersetzt.
VPS from $3* (fund $50+), storage 1–5 TB NVMe from $24/mo annual-eff, dedicated with IPMI from $30.80/mo. Crypto invoice, no KYC.
Launch nowWhy this lander exists
Cloudzy and XmrCloud own the “Whonix VPS” query because they put the distro name on a page. Nested virt and custom ISO are already standard on every KVM we rent, so here is the query match — with an honest sizing note: Whonix is a pair of VMs. The 2 GB Scout is not enough. Start at Sentry, $6/mo on the annual term (2 vCPU / 4 GB / 60 GB NVMe; $7.50 list), or take Ranger ($10/mo annual, 8 GB) when a workstation desktop joins the pair.
How to do it without cargo-cult ISOs
- Provision Sentry in Reykjavik or Zurich when jurisdiction is the reason you searched. Every city bills the same list price.
- Check the nested flag first —
grep -E 'vmx|svm' /proc/cpuinfo— then load the nested module your distro documents. - Fetch the official Whonix KVM qcow2 from whonix.org's KVM wiki, verify signatures, and skip the random “Whonix ISO” mirrors.
- Give the Gateway the only NIC with a default route; the Workstation reaches the internet through the Gateway and nothing else.
Sizing beyond a slice: when the Gateway/Workstation pair shares the host with heavier services, dedicated metal with IPMI and ECC starts at $38.50 list; archives and media belong on storage tiers from 1 TB to 5 TB NVMe, $24/mo annual at the entry size.
Adjacent reading: hosting onion services, running an exit (AUP unchanged), a privacy-tools stack and token-only signup.
Deploy Sentry for nested Whonix
Deploy nowVs Cloudzy / XmrCloud
They monetize the keyword. On our side: twenty-one locations, XMR at checkout, no KYC on any tier, and dedicated metal when two nested VMs on a shared host stop being the right primitive. Nested virt is part of the SKU here, not a ticket you open.
More rankings and guides
- VPS for a privacy tools stack
- How to run a Tor exit relay
- Anonymous VPS opsec guide
- Limits of no-KYC anonymity
- Best privacy jurisdictions 2026
- How to buy an anonymous VPS
Scout or Sentry?
Sentry is the realistic floor for Gateway plus Workstation — 4 GB at $6/mo annual. The Scout's 2 GB will swap.
Custom ISO besides Whonix?
Any KVM-bootable x86_64 image works: pfSense, OpenBSD, NixOS and the rest. You upload it.
Do you allow Tor?
Relays, onion services and Whonix routing, yes. CSAM and attacks remain banned by the AUP.
Is dedicated better for the whole pair?
If you want Gateway and Workstation on silicon you do not share, yes — metal with IPMI and ECC starts at $38.50 list, $30.80 annual-eff.
Ready to launch?
Build the box — VPS, storage or bare metal — create the password, pay the invoice that follows.