-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathDesktop.mw
365 lines (249 loc) · 14.3 KB
/
Desktop.mw
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
{{Header}}
{{Title|title=
Platform-specific Desktop Tips
}}
{{#seo:
|description={{project_name_long}} Platform-specific Desktop Tips and Tricks, RAM Adjusted Desktop Starter, Virtual Console, Full-Screen
}}
{{intro|
{{project_name_short}} Platform-specific Desktop Tips and Tricks, RAM Adjusted Desktop Starter, Virtual Console, Full-Screen
}}
= All Platforms =
== Disable Terminal Emulator Banner ==
The following greeting banner appears when a terminal shell <code>bash</code> prompt is opened.
<blockquote>Welcome to {{project_name_short}}!
https://www.{{project_clearnet}}
{{project_name_short}} Copyright (C) 2012 - 2025 ENCRYPTED SUPPORT LLC
{{project_name_short}} is Freedom Software, and you are welcome to redistribute it under certain conditions; type "{{project_name_short_lowercase}}-license" <enter> for details.
{{project_name_short}} is a compilation of software packages, each under its own copyright and license. The exact license terms for each program are described in the individual files in /usr/share/doc/*/copyright.
{{project_name_short}} GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law; for details type "{{project_name_short_lowercase}}-disclaimer" <enter>.
{{project_name_short}} is a derivative of Debian GNU/Linux and based on Tor.
{{project_name_short}} is produced independently from the Tor (r) anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else.
{{project_name_short}} is experimental software by means of concept and design.
Do not rely on it for strong anonymity.
Type: "{{project_name_short_lowercase}}" <enter> for help.
uwt INFO: Stream isolation for some applications enabled. uwt / torsocks will be automatically prepended to some commands. What is that? See:
uwt INFO: https://www.whonix.org/wiki/Stream_Isolation/Easy</blockquote>
To disable the banner, follow these steps.
{{Box|text=
'''1.''' {{Open_a__product_ws_terminal}}
'''2.''' Run the following command.
{{CodeSelect|code=
cp /etc/skel/.bashrc.{{project_name_short_lowercase}}-orig ~/.bashrc
}}
'''3.''' Done.
The process is now complete.
}}
See also: [[#Disable Virtual Console Banner|Disable Virtual Console Banner]].
== Shut Down {{project_name_short}} ==
To shut down {{project_name_short}}, open a terminal and run.
{{CodeSelect|code=
sudo poweroff
}}
Alternatively, use the menu option:
* [[Non-Qubes-Kicksecure|{{non_q_project_name_short}}]]: <code>Start Menu</code> → <code>Log Out</code> → <code>Shut Down</code>
* [[Qubes|{{q_project_name_long}}]]: <code>Blue Q button</code> → <code>Qubes Tools</code> → <code>Qubes Manager</code> → <code>{{project_name_gateway_vm}}</code> → <code>Shutdown</code>
{{Non-qubes-project}}
== Virtual Consoles ==
=== Using {{project_name_short}} as a Host Operating System ===
[[File:virtual_console.png|thumb|virtual console]]
[https://en.wikipedia.org/wiki/Virtual_console Virtual consoles] is a feature inherited from Debian GNU/Linux which is unfamiliar to many users. The following keyboard shortcuts activate the Debian (not {{project_name_short}}) feature:
* Text console: Press <code>Alt + Crtl + F1</code>
** Additional text consoles: Press <code>Alt + Crtl + F2</code> or <code>F3</code> and so on.
* Graphical console: Press <code>Alt + Crtl + F7</code>
See also [[Protection_Against_Physical_Attacks#Virtual_Consoles|Protection against Physical Attacks, Virtual Consoles]].
=== Virtual Machines ===
'''Table:''' ''Virtual Console Activation''
{| class="wikitable"
|-
! scope="col"| '''Platform'''
! scope="col"| '''Steps'''
|-
! scope="row"| KVM
| The desired virtual console key shortcut can be selected under the <code>Send Key</code> option in a VM's graphical window.
|-
! scope="row"| Qubes dom0
| Qubes dom0 inherited the same feature (<code>Alt + Crtl + F1</code>...).
|-
! scope="row"| Qubes VMs
| In order to access VMs in dom0, run: <ref>
This is not a real virtual console, but using login.
</ref> <code>sudo xl console vm-name</code>. Replace "vm-name" with the name of the actual VM, for example.
{{CodeSelect|code=
sudo xl console {{project_name_gateway_vm}}
}}
See also [https://github.com/QubesOS/qubes-issues/issues/5492 add Qubes host key to allow switching virtual console (ctrl + alt + F1) or SysRq for HVM].
|-
! scope="row"| VirtualBox
| The VirtualBox default is <code>Right Ctrl + F2</code>. <ref>
Inside VirtualBox, the <code>Alt + Ctrl</code> keys are already registered by the host operating system.
Host key can be changed using <code>VirtualBox</code> → <code>Global Settings</code> → <code>Input</code> → <code>Host Key</code>.
</ref>
* Text console: Press <code>Right Ctrl + F2 (F1, F2, F3, F4...)</code> for one or more text consoles.
* Graphical console: Press <code>Host Key + F7</code> for a graphical console inside VirtualBox.
|}
Due to technical limitations, an easier to understand presentation like <code>{{project_name_short}} username login:</code> or something similar cannot be shown. <ref>
The <code>login</code> program unfortunately does not provide this option.
</ref>
# Enter your username (this is most likely <code>user</code>) and press <code><enter></code>.
# Enter your password and press <code><enter></code>.
{{Default_Passwords}}
=== Disable Virtual Console Banner ===
This process is similar to [[#Disable Terminal Emulator Banner|Disable Terminal Emulator Banner]].
'''1.''' Open a [[#Virtual Consoles|virtual console]].
'''2.''' Run the following command to restore the original bashrc (untested). <ref>Please leave feedback if this step works correctly.</ref>
{{CodeSelect|code=
cp /etc/skel/.bashrc.whonix-orig ~/.bashrc
}}
<ref>
'''A)''' Run the following command.
{{CodeSelect|code=
sudo unlink /etc/motd
}}
</ref>
'''3.''' Done
The procedure is complete.
= {{non_q_project_name_short}} =
== Disable Autologin ==
[[File:Gui_login.png|thumb|graphical login screen (by login manager <code>LightDM</code>)]]
Autologin is enabled by default in the login manager by {{project_name_short}}.
* '''Host operating system:'''
** '''Simple login screen:''' Disabling autologin can be useful if the user wants to enable a login screen.
** '''No full disk encryption:''' Note, the login screen is <u>not</u> providing [[Full_Disk_Encryption|Full Disk Encryption (FDE)]]. The purpose of the login screen is elaborated in chapter [[Protection_Against_Physical_Attacks#Login_Screen|Login Screen]].
* '''VMs:''' It is not very useful to disable autologin to enable a login screen inside VMs. It's much more secure to have a login screen on the host operating system.
Apply the following instructions to enable the login prompt at boot.
This requires configuration of LightDM in {{project_name_short}}.
'''1.''' Disable LightDM autologin.
This is done by deleting the configuration files which enable autologin.
{{CodeSelect|code=
sudo rm /etc/lightdm/lightdm.conf.d/30_autologin.conf
}}
{{CodeSelect|code=
sudo rm /etc/lightdm/lightdm.conf.d/40_autologin.conf
}}
'''2.''' Linux user account password.
The user will need to [[Post_Install_Advice#Change_Passwords|set a Linux user account password]] if one has not already been set.
'''3.''' Reboot.
'''4.''' Done.
Autologin should be disabled after reboot and the user should see a login prompt after reboot.
'''Troubleshooting:''' See footnote for troubleshooting. <ref>
<u>GDM configuration.</u>
GDM is a login manager different from LightDM. Only very old versions of {{project_name_short}} come with GDM installed by default.
'''1.''' Open the GDM configuration file.
Note, if the file is empty that means it doesn't exist. In that case, skip this.
{{Open with root rights|filename=
/etc/gdm3/daemon.conf.dist
}}
'''2.''' Search for the following.
<pre>
AutomaticLoginEnable=true
AutomaticLogin=user
</pre>
'''3.''' Modify.
Out-comment, add a hash symbol ("<code>#</code>") in front of the two lines. Or replace the content, copy/paste the following which does the same.
{{CodeSelect|code=
#AutomaticLoginEnable=true
#AutomaticLogin=user
}}
'''4.''' Save.
</ref>
See also: [[Login]]
== Minimal RAM Required ==
{{project_name_short}} is based on Debian stable releases thus it will use similar [https://www.debian.org/releases/stable/amd64/ch02s05.en.html Memory and Disk Space Requirements] for Debian.
== RAM Adjusted Desktop Starter ==
{{RAM_Adjusted_Desktop_Starter}}
For more information, see [[RAM Adjusted Desktop Starter]].
== Disable the Graphical Desktop Environment ==
This is for advanced users only.
To stop the graphical desktop environment.
{{CodeSelect|code=
sudo systemctl stop gdm3
}}
To disable automatic start at boot of the graphical desktop environment.
{{CodeSelect|code=
sudo systemctl disable gdm3
}}
To restart the graphical desktop environment.
{{CodeSelect|code=
sudo systemctl start gdm3
}}
To re-enable automatic start at boot of the graphical desktop environment.
{{CodeSelect|code=
sudo systemctl enable gdm3
}}
To uninstall the graphical desktop environment software packages, not that understanding [[Debian Packages|{{project_name_short}} meta packages]] is prerequisite knowledge. Then package <code>non-qubes-whonix-gateway-xfce</code> / <code>non-qubes-whonix-workstation-xfce</code> can be removed. Or alternatively, download the {{project_name_short}} CLI version or build it from source code.
related: Using [[Other Desktop Environments|{{project_name_short}} with Other Desktop Environments such as GNOME, KDE, LXDE, MATE, ...)]]
== Use Full-screen Mode ==
It is recommended to work in full-screen; this feature is also inherited from [[VirtualBox]]. To activate and deactivate full-screen mode, press the VirtualBox Host Key + F. The current Host Key is visible in the bottom right corner of VirtualBox. The VirtualBox default is <code>Right Ctrl + F</code>.
Host key can be changed using <code>VirtualBox</code> → <code>Global Settings</code> → <code>Input</code> → <code>Host Key</code>.
Full-screen mode leads to the {{project_name_short}} (and Debian) default resolution and color depth of <code>1920x1080x24</code>.
{{Anchor|Whonixcheck / Timesync Writing to tty1}}
== Xfce Scaling ==
A number of displays found in high-end laptops and desktops have High Dots Per Inch (HiDPI), providing a high resolution in a relatively small format. High-resolution mode can cause problems with certain software and the following adjustments may be necessary to improve HiDPI presentation in Xfce. <ref name=HiDPI>https://wiki.archlinux.org/title/HiDPI#Xfce</ref>
'''Table:''' ''Xfce Scaling Options''
{| class="wikitable"
|-
! scope="col"| '''Configuration'''
! scope="col"| '''Description'''
|-
! scope="row"| Fonts
| Change the DPI (dots per inch) parameter as follows: <ref name=HiDPI />
* <code>Settings Manager</code> → <code>Appearance</code> → <code>Fonts</code> → <code>DPI</code> → <code>Increase</code>
For example, it is reported that a value of <code>180</code> or <code>192</code> seems to work well on Retina screens, but trial and error may be necessary to get a more precise number for the relevant display.
|-
! scope="row"| gtk2 Menus and Buttons
| Follow these steps to change the default icon sizes of gtk2 menus, buttons and so on: <ref name=HiDPI />
* <code>Settings Manager</code> → <code>Settings Editor</code> → <code>xsettings</code> → <code>Gtk</code> → <code>IconSizes</code> → in row <code>Value</code> → add the following line.
{{CodeSelect|breaklines=true|code=
gtk-large-toolbar=96,96:gtk-small-toolbar=64,64:gtk-menu=64,64:gtk-dialog=96,96:gtk-button=64,64:gtk-dnd=64,64
}}
Note that the "gtk-dnd" parameter is for the icons during drag'n'drop, while the others are self-evident based on their name. Any value supported by the icon theme can be used.
|-
! scope="row"| System Tray Icon Size
| Follow these steps to enlarge icons in the system tray: <ref name=HiDPI />
# <code>Right-click on system tray</code>: aim for empty space / top pixels / bottom pixels, so the the icons are not activated themselves.
# <code>Properties</code> → <code>Set "Maximum icon size"</code> to <code>32</code>, <code>48</code> or <code>64</code>.
|-
! scope="row"| Task Bar Size
| To change the size of the task bar:
* <code>Right-click on empty space in task bar</code> → <code>Panel</code> → <code>Panel Preferences</code> → <code>Row Size (Pixels)</code> → <code>move slider</code>
|-
! scope="row"| Window Manager Style
| Xfwm has two hidpi themes: Default-hdpi and Default-xhdpi. Change the theme as follows: <ref name=HiDPI />
* <code>Settings Manager</code> → <code>Window Manager</code> → <code>Style</code> → <code>Theme</code> → <code>Default-hdpi</code> or <code>Default-xhdpi</code>
|-
|}
{{Anchor|Xfce Settings Reset}}
== Default Home Folder Configuration Files Reset ==
Before following these instructions to wipe the whole Xfce settings folder and restore defaults, it is recommended to backup existing Xfce settings.
{{Box|text=
'''1.''' Open a [[Desktop#Virtual_Consoles|virtual console]].
'''2.''' Logout from and stop Xfce by halting {{project_name_short}} default <code>login manager</code> <code>gdm3</code>.
{{CodeSelect|code=
sudo systemct stop gdm3
}}
'''3.''' Trash folder <code>~/.config/xfce4</code>.
'''4.''' Delete the <code>first-boot-skel.done</code> file.
{{CodeSelect|code=
sudo rm /var/cache/anon-base-files/first-boot-skel.done
}}
'''5.''' Re-add {{project_name_short}} Xfce configuration files.
{{CodeSelect|code=
sudo /usr/libexec/helper-scripts/first-boot-skel
}}
'''6.''' Restart the display manager to restart Xfce.
{{CodeSelect|code=
sudo systemctl restart gdm3
}}
'''7.''' Done.
The process has been completed.
}}
= {{q_project_name_short}} =
== Avoid VM Full Screen Mode ==
It is unrecommended to allow [[Qubes|{{q_project_name_short}}]] or other VMs to [https://www.qubes-os.org/doc/how-to-enter-fullscreen-mode/ completely "own" the full screen]. Overriding Qubes' GUI virtualization daemon restrictions means the colored decorations drawn by each VM window will not be visible. In this case, a malicious application might not actually release the full screen (while it appears normal), or the full desktop may be emulated so users are tricked into entering sensitive information inside false "trusted" domains. <ref>https://www.qubes-os.org/doc/how-to-enter-fullscreen-mode/</ref>
= See Also =
* [[Keyboard Layout]]
= Footnotes =
{{reflist|close=1}}
{{Footer}}
[[Category:Documentation]]