- default-dispvm: whonix-ws-{{ whonix.whonix_version }}-dvm

[adrelanos]

Please very carefully review.
Untested.

- default-dispvm: whonix-ws-{{ whonix.whonix_version }}-dvm similar to https://github.com/QubesOS/qubes-mgmt-salt-dom0-virtual-machines/blob/master/qvm/anon-whonix.sls#L34

Would that work?

Would this fail if whonix-ws-14-dvm does not (yet) exist?

Reason: was somehow still set to whonix-ws-dvm on my system which leads to confusion.
Use case: opening links from Whonix-Gateway such as when seeing some link in konsole or whonixcheck, it could be opened safely in a DispVM based on whonix-ws-14-dvm.

What this is NOT: disposable sys-whonix

//@viq

[marmarek]

Would this fail if whonix-ws-14-dvm does not (yet) exist?

Yes. And it will not exists because whonix-ws-14-dvm creation depends on sys-whonix (to be set as netvm), so is created later.
To solve this, create separate state (can be in the same file) that set default-dispvm, but depends on both sys-whonix and whonix-ws-14-dvm, something like (untested):

sys-whonix-default-dispvm:
  qvm.prefs:
    - name: sys-whonix
    - default-dispvm: whonix-ws-{{ whonix.whonix_version }}-dvm
    - require:
      - qvm: whonix-ws-{{ whonix.whonix_version }}-dvm
      - qvm: sys-whonix

[marmarek]

Is it supported configuration to have whonix-gw + sys-whonix only, but not whonix-ws etc? If yes, this change would break such configuration (can be avoided by setting default-dispvm to none here and setting it to whonix-ws-14-dvm only after creating the latter).

[adrelanos]

Marek Marczykowski-Górecki:

Is it supported configuration to have whonix-gw + sys-whonix only

Yes.