Platform-specific Desktop Tips

Whonix ®

Download

Windows Linux Mac VirtualBox KVM Qubes USB ISO (coming soon) More options Source Code

About

Overview Features Whonix vs VPNs Why Open Source? Project Activities Contributors Mission & Vision

Docs

Documentation FAQ Troubleshooting

Community

Forums Contribute

Support

Self Support First Policy Search Engines, Docs and AI Support (Limited) Reporting Bugs Contact (Restricted)

Tools Upload file Special pages Recent changes Print Version Page meta What links here Related changes Page information

Page Read Edit History Move Protection Unwatch Watch Delete Purge

User Preferences Watchlist Contributions Logout Create account Login

Donate

Whonix Platform-specific Desktop Tips and Tricks, RAM Adjusted Desktop Starter, Virtual Console, Full-Screen

All Platforms

Disable Terminal Emulator Banner

The following greeting banner appears when a terminal shell bash prompt is opened.

Welcome to Whonix!

https://www.whonix.org

Whonix Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP Whonix is Freedom Software, and you are welcome to redistribute it under certain conditions; type "whonix-license" <enter> for details. Whonix is a compilation of software packages, each under its own copyright and license. The exact license terms for each program are described in the individual files in /usr/share/doc/*/copyright.

Whonix GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law; for details type "whonix-disclaimer" <enter>.

Whonix is a derivative of Debian GNU/Linux and based on Tor.

Whonix is produced independently from the Tor (r) anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else.

Type: "whonix" <enter> for help. uwt INFO: Stream isolation for some applications enabled. uwt / torsocks will be automatically prepended to some commands. What is that? See:

uwt INFO: https://www.whonix.org/wiki/Stream_Isolation/Easy

To disable the banner, follow these steps.

1. Open a terminal.

If you are using Qubes-Whonix^™, complete the following steps.

Qubes App Launcher (blue/grey "Q") → Whonix-Workstation™ App Qube (commonly named anon-whonix) → Xfce Terminal

If you are using a graphical Whonix with Xfce, run.

Start Menu → Xfce Terminal

2. Run the following command.

cp /etc/skel/.bashrc.whonix-orig ~/.bashrc

The process is now complete.

See also: Disable Virtual Console Banner.

Shut Down Whonix

To shut down Whonix, open a terminal and run.

sudo poweroff

Alternatively, use the menu option:

• Qubes-Whonix^™: Blue Q button → sys-whonix → Shutdown
• Non-Qubes-Whonix: Start → Leave...

Virtual Consoles

On the Host

Virtual consoles is a feature inherited from Debian GNU/Linux which is unfamiliar to many users. The following keyboard shortcuts activate the Debian (not Whonix) feature:

• Text console: Press Alt + Crtl + F1
  • Additional text consoles: Press Alt + Crtl + F2 or F3 and so on. Try these in case F1 is not functional.
• Graphical console: Press Alt + Crtl + F7

Virtual Machines

Table: Virtual Console Activation

Platform	Steps
KVM	The desired virtual console key shortcut can be selected under the Send Key option in a VM's graphical window.
Qubes dom0	Qubes dom0 inherited the same feature (Alt + Crtl + F1...).
Qubes VMs	In order to access VMs in dom0, run: sudo xl console vm-name. Replace "vm-name" with the name of the actual VM, for example. sudo xl console sys-whonix See also add Qubes host key to allow switching virtual console (ctrl + alt + F1) or SysRq for HVM.
VirtualBox	The VirtualBox default is Right Ctrl + F2. Text console: Press Right Ctrl + F2 (F1, F2, F3, F4...) for one or more text consoles. Graphical console: Press Host Key + F7 for a graphical console inside VirtualBox.

Due to technical limitations, an easier to understand presentation like Whonix username login: or something similar cannot be shown.

1. Enter your username (this is most likely user) and press <enter>.
2. Enter your password and press <enter>.

• Default username: user
• Default password: No password required. (Passwordless login.)

Banner Explanation

In the Whonix case, the virtual console will show host login:. This can be confusing and has nothing to do with the actual host that Whonix is running on. The string host is retrieved from file /etc/hostname which for privacy reasons is set to host in Whonix. Therefore do not enter your host (the system Whonix is running on) username or host password.

Due to technical limitations, an easier to understand presentation like Whonix username login: or something similar cannot be shown.

Login Instructions

1. Note the Banner Explanation.
2. Enter your username (this is most likely user) and press <enter>.
3. Enter your password and press <enter>.

• Default username: user
• Default password: No password required. (Passwordless login.)

Disable Virtual Console Banner

This process is similar to Disable Terminal Emulator Banner.

1. Open a virtual console.

2. Run the following command to restore the original bashrc (untested).

cp /etc/skel/.bashrc.whonix-orig ~/.bashrc

3. Done.

The procedure is complete.

Non-Qubes-Whonix

Disable Autologin

Not very useful inside VMs, see also Login Screen.

This requires configuration of both GDM (old versions) and LightDM (newer versions) of Whonix.

1. Open file /etc/gdm3/daemon.conf.dist in an editor with root rights.

Non-Qubes-Whonix^™

This box uses sudoedit for better security.

sudoedit /etc/gdm3/daemon.conf.dist

Qubes-Whonix^™

NOTES:

• When using Qubes-Whonix, this needs to be done inside the Template.

sudoedit /etc/gdm3/daemon.conf.dist

• After applying this change, shutdown the Template.
• All App Qubes based on the Template need to be restarted if they were already running.
• This is a general procedure required for Qubes and unspecific to Qubes-Whonix^™.

Others and Alternatives

• This is just an example. Other tools could achieve the same goal.
• If this example does not work for you or if you are not using Whonix, please refer to this link.

sudoedit /etc/gdm3/daemon.conf.dist

2. Search for the following.

AutomaticLoginEnable=true
AutomaticLogin=user

3. Modify.

Out-comment, add a hash symbol ("#") in front of the two lines. Or replace the content, copy/paste the following which does the same.

#AutomaticLoginEnable=true #AutomaticLogin=user

4. Save.

5. Disable LightDM autologin.

sudo rm /etc/lightdm/lightdm.conf.d/30_autologin.conf

sudo rm /etc/lightdm/lightdm.conf.d/40_autologin.conf

7. Reboot.

7. Done.

Autologin should be disabled after reboot.

RAM Adjusted Desktop Starter

RAM Adjusted Desktop Starter will not start the desktop environment. The terminal-based Whonix-Gateway^™ can be used instead.

When booting up, a prompt will appear offering to prevent Xfce from starting. Users can also manually press Ctrl + C for the same effect.

By default, Whonix-Gateway VMs are configured with 1280 MB virtual RAM. This can be reduced on systems with low available resources.

• If total RAM is more than 512 MB, the default desktop environment (Xfce) is started.
• If total RAM is less than 512 MB (for example, the minimum 256 MB RAM requirement), Xfce is not started.

Users with low RAM resources should find this convenient because Whonix-Gateway RAM can be reduced to 256 MB and still function.

Further, if something needs configuring or checking, 512 MB RAM can be assigned to automatically boot into the graphical Xfce desktop. Additional settings are available in folder /etc/rads.d to configure this feature: additional RAM can be added (but still not choosing to boot into a desktop environment), different display managers can be used and so on. See file /etc/rads.d/30_default.conf for configuration examples.

For more information, see RAM Adjusted Desktop Starter.

Disable Graphical Desktop Environment

TODO

Use Full-screen Mode

It is recommended to work in full-screen; this feature is also inherited from VirtualBox. To activate and deactivate full-screen mode, press the VirtualBox Host Key + F. The current Host Key is visible in the bottom right corner of VirtualBox. The VirtualBox default is Right Ctrl + F.

Host key can be changed using VirtualBox → Global Settings → Input → Host Key.

Full-screen mode leads to the Whonix (and Debian) default resolution and color depth of 1920x1080x24. Having a common value for these identifiers reduces the fingerprinting risk to the user. Full-screen mode also helps to prevent users from accidentally launching applications on the host (such as a clearnet browser), instead of within Whonix.

Xfce Scaling

A number of displays found in high-end laptops and desktops have High Dots Per Inch (HiDPI), providing a high resolution in a relatively small format. High-resolution mode can cause problems with certain software and the following adjustments may be necessary to improve HiDPI presentation in Xfce.

Table: Xfce Scaling Options

Configuration	Description
Fonts	Change the DPI (dots per inch) parameter as follows: Settings Manager → Appearance → Fonts → DPI → Increase For example, it is reported that a value of 180 or 192 seems to work well on Retina screens, but trial and error may be necessary to get a more precise number for the relevant display.
gtk2 Menus and Buttons	Follow these steps to change the default icon sizes of gtk2 menus, buttons and so on: Settings Manager → Settings Editor → xsettings → Gtk → IconSizes → in row Value → add the following line. gtk-large-toolbar=96,96:gtk-small-toolbar=64,64:gtk-menu=64,64:gtk-dialog=96,96:gtk-button=64,64:gtk-dnd=64,64 Note that the "gtk-dnd" parameter is for the icons during drag'n'drop, while the others are self-evident based on their name. Any value supported by the icon theme can be used.
System Tray Icon Size	Follow these steps to enlarge icons in the system tray: Right-click on system tray: aim for empty space / top pixels / bottom pixels, so the the icons are not activated themselves. Properties → Set "Maximum icon size" to 32, 48 or 64.
Task Bar Size	To change the size of the task bar: Right-click on empty space in task bar → Panel → Panel Preferences → Row Size (Pixels) → move slider
Window Manager Style	Xfwm has two hidpi themes: Default-hdpi and Default-xhdpi. Change the theme as follows: Settings Manager → Window Manager → Style → Theme → Default-hdpi or Default-xhdpi

Default Home Folder Configuration Files Reset

Before following these instructions to wipe the whole Xfce settings folder and restore defaults, it is recommended to backup existing Xfce settings.

1. Open a virtual console.

2. Logout from and stop Xfce by halting Whonix default login manager gdm3.

sudo systemctl stop gdm3

3. Delete folder ~/.config/xfce4.

rm -r ~/.config/xfce4

4. Delete the first-boot-skel.done file.

sudo rm /var/cache/anon-base-files/first-boot-skel.done

5. Re-add Whonix Xfce configuration files.

sudo /usr/libexec/helper-scripts/first-boot-skel

6. Restart lightdm to restart Xfce.

sudo systemctl restart gdm3

7. Done.

The process has been completed.

Qubes-Whonix

Avoid VM Full Screen Mode

It is unrecommended to allow Qubes-Whonix or other VMs to completely "own" the full screen. Overriding Qubes' GUI virtualization daemon restrictions means the colored decorations drawn by each VM window will not be visible. In this case, a malicious application might not actually release the full screen (while it appears normal), or the full desktop may be emulated so users are tricked into entering sensitive information inside false "trusted" domains.

See Also

• Keyboard Layout

Footnotes

Whonix The most watertight privacy operating system in the world.

Dark mode

Follow us on social media

Supported by Power Up Privacy

Whonix is proudly supported until 2025 by Power Up Privacy, a privacy advocacy group that seeks to supercharge privacy projects with resources so they can complete their mission of making our world a better place. (Strictly subject to our sponsorship policy.)

At Whonix we value freedom and trust, supporting Open Source and Freedom Software

By using this website, you acknowledge you have read, understood, and agree to be bound by these agreements: Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint 2012- 2024 ENCRYPTED SUPPORT LP

Your support makes
all the difference!

We believe security software like Whonix needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!