Could you please try
sudo systemctl restart sdwdate after it succeeded once? Because first time its sets time using
date, subsequent ones using
sclockadj. Therefore it might work the first time but break later due to missing secomp whiltelisted syscalls.
I am not also wondering if removing/changing
SystemCallArchitectures setting would have been easier.
Also generally wondering if
SystemCallFilter is maintainable or will keep breaking when porting to the next version of Debian (
bullseye) or other platforms.
Oh, good catch, sorry for not checking that.
Opened another PR which now also works after restarting the service.
This is hard to expect.
Merged, and uploaded to Whonix developers repository.
@Patrick finally got time to check onion-grater
I did restart this a few time also. Anything else I should check?
Awesome, no, this one is straight forward to test.
@Patrick I realised that I missed one for sdwdate. The service started but the time never synched, now it does: