Can’t figure out what I’m doing wrong with tor not updating

Qubes-Whonix
1

I try to update whonix’s tor browser with whonix-workstation-17 → tor browser downloader
but it prints me an error of www.torproject.org coulnd not be reached etc.

I think it’s because my template is not connected to the internet?
But that’s the way it says on whonix docs: " Do not run Tor Browser Downloader by Whonix inside the Disposable Template (whonix-workstation-17-dvm)! It should only be run in the Template (whonix-workstation-17)"

I use latest Qubes

1 Like
2

Sys-Whonix running? Has network access?

1 Like
3

Yes to both

1 Like
4

That’s odd. Are you sure your currently active sys-Whonix is ​​listed as updatevm in the Qubes OS settings (specifically, not in the individual VM settings)? Perhaps you changed the name or created multiple sys-Whonixes?

1 Like
5

I’m pretty sure it’s ok, I didn’t change the defaults. How do I check it? What’s the tab/option name?

No. I use default settings.

Tried once again, same thing.

1 Like
6

Are you sure I need to run the whonix-workstation-17(the template) → Tor Browser Downloader(AnonDIst)?

maybe it’s something else I need to run instead?

1 Like
7

How did you come with this conclusion? because under network in qubes manager it read “default n/a” ?

Nevertheless whonix templates by default → sys-whonix → sys-firewall

And if you want to upgrade (going to be upgraded with apt full-upgrade) the TorBrowser for a dispVM it must be upgraded from the template that the dispVM based on, not from within the dispVM (otherwise you must do it every time because its going to be deleted).

1 Like
8

Yes

Yes, I got it already when Torprotector mentioned the sys-whonix

Well yeah, that’s why I try what I tried…

My disp is based on whonix-worstation-17-dvm, so I tried the whonix-workstation-17 → Tor Browser Downloader(AnonDIst)

When I do so, it starts like with a popup of Download… but doesn’t even start it and the Error popup comes in instead with:

ERROR: https://www.torproject.org could not be reached. 
Possible reasons: 
- https://www.torproject.org/dist/torbrowser is down 
- download location changed 
Please check: 
Start menu -> System -> systemcheck 
or in Terminal: systemcheck 
or in Terminal with debugging: systemcheck -v 
If systemcheck reports no problems with internet activity and downloading Tor Browser keeps failing, please report a bug! 
(Debugging information: curl_status_message: [91] - [Invalid SSL certificate status.])
1 Like
9

yeah thats wrong conclusion because it is N/A because its a template, and you will see this for all other templates (so its working without and you should not change the netVM to sys-whonix).

Ok can you do this step and post the output here?

1 Like
10

I use the defaults.
I didn’t change the netvm at any given step while trying.

Yeah, sure.
whonix-workstation-17 → terminal:


[template workstation user ~]% systemcheck -v                     
[INFO] [systemcheck] whonix-workstation-17 | Whonix-Workstation | TemplateVM | Mon Oct 13 01:29:43 PM UTC 2025
[INFO] [systemcheck] Environment variables test result: Ok.
[INFO] [systemcheck] Check sudo Result: OK
[INFO] [systemcheck] Whonix build version: 3:11.2-1
[INFO] [systemcheck] whonix-workstation-packages-dependencies-cli: 24.7-1
[INFO] [systemcheck] derivative_major_release_version /etc/whonix_version: 17
[INFO] [systemcheck] Whonix Support Status of this Major Version: Ok.
[INFO] [systemcheck] Spectre Meltdown Test: skipping since spectre_meltdown_check=false, ok.
[INFO] [systemcheck] Package Manager Consistency Check Result: Output of command dpkg --audit was empty, ok.
[INFO] [systemcheck] systemd journal check Result:
AppArmor:
########################################

########################################

secomp:
########################################

########################################

warnings:
########################################
Oct 13 13:29:30 host panic-on-oops[1020]: kernel.panic_on_warn = 1
Oct 13 13:29:31 host qubes.StartApp+xfce4-terminal-dom0[1282]: (xfce4-terminal:1286): dbind-WARNING **: 13:29:31.931: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: The name org.a11y.Bus was not provided by any .service files
########################################

failed:
########################################
Oct 13 13:29:27 host kernel: tsc: Fast TSC calibration failed
Oct 13 13:29:28 host xl[686]: libxl: error: libxl_utils.c:815:libxl_cpu_bitmap_alloc: failed to retrieve the maximum number of cpus
Oct 13 13:29:28 host xl[686]: libxl: error: libxl_utils.c:815:libxl_cpu_bitmap_alloc: failed to retrieve the maximum number of cpus
Oct 13 13:29:28 host xl[686]: libxl: error: libxl_utils.c:815:libxl_cpu_bitmap_alloc: failed to retrieve the maximum number of cpus
Oct 13 13:29:30 host loginctl[1034]: Could not attach device: Failed to open device '/sys/devices/platform/pcspkr/input/*': No such device
Oct 13 13:29:31 host systemctl[1236]: Failed to connect to bus: No medium found
Oct 13 13:29:31 host qubes.StartApp+xfce4-terminal-dom0[1282]: Failed to connect to session manager: Failed to connect to the session manager: SESSION_MANAGER environment variable not defined
Oct 13 13:29:44 host sudo[2249]:     user : TTY=pts/0 ; PWD=/home/user ; USER=root ; COMMAND=/bin/systemctl --no-pager --no-block --no-legend --failed
########################################

errors:
########################################
Oct 13 13:29:27 host kernel: ACPI Error: No handler or method for GPE 00, disabling event (20240827/evgpe-839)
Oct 13 13:29:27 host kernel: ACPI Error: No handler or method for GPE 01, disabling event (20240827/evgpe-839)
Oct 13 13:29:27 host kernel: ACPI Error: No handler or method for GPE 03, disabling event (20240827/evgpe-839)
Oct 13 13:29:27 host kernel: ACPI Error: No handler or method for GPE 04, disabling event (20240827/evgpe-839)
Oct 13 13:29:27 host kernel: ACPI Error: No handler or method for GPE 05, disabling event (20240827/evgpe-839)
Oct 13 13:29:27 host kernel: ACPI Error: No handler or method for GPE 06, disabling event (20240827/evgpe-839)
Oct 13 13:29:27 host kernel: ACPI Error: No handler or method for GPE 07, disabling event (20240827/evgpe-839)
Oct 13 13:29:27 host kernel: RAS: Correctable Errors collector initialized.
Oct 13 13:29:28 host (udev-worker)[403]: Error running install command '/usr/bin/disabled-intelpmt-by-security-misc' for module pmt_class: retcode 1
Oct 13 13:29:28 host (udev-worker)[406]: Error running install command '/usr/bin/disabled-intelpmt-by-security-misc' for module pmt_class: retcode 1
Oct 13 13:29:28 host xl[686]: libxl: error: libxl_utils.c:815:libxl_cpu_bitmap_alloc: failed to retrieve the maximum number of cpus
Oct 13 13:29:28 host xl[686]: libxl: error: libxl_utils.c:815:libxl_cpu_bitmap_alloc: failed to retrieve the maximum number of cpus
Oct 13 13:29:28 host xl[686]: libxl: error: libxl_utils.c:815:libxl_cpu_bitmap_alloc: failed to retrieve the maximum number of cpus
Oct 13 13:29:29 host sdwdate-pre[669]: + gcc /usr/src/sdwdate/sclockadj.c -o /usr/libexec/sdwdate/sclockadj -ldl -D_GNU_SOURCE -Wdate-time -D_FORTIFY_SOURCE=3 -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wl,-z,relro -Wl,-z,now
Oct 13 13:29:31 host qubes.StartApp+xfce4-terminal-dom0[1282]: (xfce4-terminal:1286): dbind-WARNING **: 13:29:31.931: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: The name org.a11y.Bus was not provided by any .service files
########################################

ordering cycle:
########################################

########################################

To see this for yourself...
1. Open a terminal. (dom0 -> Start Menu -> Template: whonix-workstation-17 -> Terminal)
3. Run. sudo apparmor-info --boot
3. Run. sudo journalctl --boot | grep -i syscall=
4. Run. sudo journalctl --boot | grep -i warn
5. Run. sudo journalctl --boot | grep -i fail
6. Run. sudo journalctl --boot | grep -i error
7. Run. sudo journalctl --boot | grep -i "ordering cycle"

If you know what you are doing, feel free to disable this check.
Create a file /etc/systemcheck.d/50_user.conf and add:
systemcheck_skip_functions+=" check_journal "
[INFO] [systemcheck] Qubes Settings Test Result: Ok, qubes_vm_type is TemplateVM.
[INFO] [systemcheck] Check Kernel Messages Test Result: Found nothing remarkable, ok.
[INFO] [systemcheck] Whonix firewall systemd unit check Result: Ok.
[INFO] [systemcheck] Check Package Manager Running Result: None running, ok.
[INFO] [systemcheck] Tor Check Result: Skipped, because running in TemplateVM, ok.
[INFO] [systemcheck] Tor Config Check Result: Tor config ok.
[INFO] [systemcheck] Tor Running Check Result: Not running on Whonix-Gateway, ok.
[INFO] [systemcheck] Whonix Meta Packages Test Result: Meta package qubes-whonix-workstation installed, ok.
[INFO] [systemcheck] Whonix Unwanted Packages Test Result: None found.
[INFO] [systemcheck] Check Initializer Result: /var/lib/initializer-dist/status-files/first_run_initializer.fail does not exist, ok.
[INFO] [systemcheck] Check Virtualizer Result: Supported Virtualizer Qubes detected, continuing.
systemd-detect-virt result: qubes
[INFO] [systemcheck] PVClock Result: /sys/devices/system/clocksource/clocksource0/current_clocksource exist, is tsc.
[INFO] [systemcheck] Check Timezone Result: /etc/timezone, Etc/UTC matches Etc/UTC, ok.
[INFO] [systemcheck] Check Timezone Result: /usr/share/zoneinfo/Etc/UTC matches /etc/localtime, ok.
[INFO] [systemcheck] IP Forwarding Result: not running on Whonix-Gatway, skipping, ok.
[WARNING] [systemcheck] Check Logs Result: /home/user/.msgcollector/msgdispatcher-error.log exists. Please consider reporting any bugs inside this log.
(Be careful not to copy and paste personal information). You may delete this file now.
[INFO] [systemcheck] Check Logs Result: /run/systemcheck/.msgcollector/msgdispatcher-error.log does not exist, ok.
[INFO] [systemcheck] Check Logs Result: /var/lib/systemcheck/.msgcollector/msgdispatcher-error.log does not exist, ok.
[INFO] [systemcheck] Check Logs Result: /home/user/.cache/tb/torbrowser_updater_error.log does not exist, ok.
[INFO] [systemcheck] Check Hostname Result: "hostname --fqdn" output is "host.localdomain", ok.
[INFO] [systemcheck] Check Hostname Result: "hostname" output is "host", ok.
[INFO] [systemcheck] Check Hostname Result: "hostname --ip-address" output is "127.0.0.1", ok.
[INFO] [systemcheck] Check Hostname Result: "hostname --ip-address" output is "localdomain", ok.
[INFO] [systemcheck] Entropy Available Check Result: ok. /proc/sys/kernel/random/entropy_avail: 256
[INFO] [systemcheck] Check non-freedom Result: Ok, no non-freedom packages found. For more information, see:
https://www.whonix.org/wiki/Avoid_nonfreedom_software
[INFO] [systemcheck] Whonix APT Repository: Disabled.
When the Whonix team releases an update, it will be NOT be installed.
Please read https://www.whonix.org/wiki/Trust to understand the risk.
You are free to manually update from source code.
If you want to change this, use:
    sudo repository-dist
[INFO] [systemcheck] Qubes UpdatesProxy Status Files Check: Ok.
[INFO] [systemcheck] Qubes UpdatesProxy Reachability Test: Trying to reach local Qubes UpdatesProxy... PROXY_SERVER: http://127.0.0.1:8082/
[INFO] [systemcheck] Qubes UpdatesProxy Reachability Result: Ok, torified update proxy reachable.
[INFO] [systemcheck] Qubes UpdatesProxy Connectivity Test: Skipped, because not using --leak-tests (--show-ip), ok.
[INFO] [systemcheck] check_tor_socks_or_trans_port SocksPort: Skipped, because not using --leak-tests (--show-ip), ok.
[INFO] [systemcheck] check_tor_socks_or_trans_port TransPort: Skipped, because not using --leak-tests (--show-ip), ok.
[INFO] [systemcheck] check_tor_socks_or_trans_port UpdatesProxy: Skipped, because not using --leak-tests (--show-ip), ok.
[INFO] [systemcheck] check_stream_isolation : Skipped, because not using --leak-tests (--show-ip), ok.
[INFO] [systemcheck] Debian Package Update Check: Checking for software updates via apt-get... ( Documentation: https://www.whonix.org/wiki/Update )
Get:1 tor+https://fasttrack.debian.net/debian bookworm-fasttrack InRelease [12.9 kB]
Hit:2 tor+https://deb.debian.org/debian bookworm InRelease                     
Hit:3 https://deb.qubes-os.org/r4.2/vm bookworm InRelease
Hit:4 tor+https://deb.debian.org/debian bookworm-updates InRelease
Hit:5 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Hit:6 tor+https://deb.debian.org/debian bookworm-backports InRelease
Fetched 12.9 kB in 2s (6,922 B/s)
Reading package lists... Done
[INFO] [systemcheck] sudo apt-get dist-upgrade --simulate output:
Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
[INFO] [systemcheck] Debian Package Update Check Result: No updates found via apt-get.
[INFO] [systemcheck] Warrant Canary Check: Skipping on Whonix-Workstation, ok.
[INFO] [systemcheck] Please donate!
   See: https://www.whonix.org/wiki/Donate
[template workstation user ~]%
1 Like
11

Messy output you have, this is mine:

[template workstation user ~]% systemcheck -v
[INFO] [systemcheck] whonix-workstation-17 | Whonix-Workstation | TemplateVM | Mon Oct 13 02:27:46 PM UTC 2025
[INFO] [systemcheck] Environment variables test result: Ok.
[INFO] [systemcheck] Check ‘privleapd --check-config’ Result: OK
[INFO] [systemcheck] Check ‘leaprun check-privleap’ Result: OK
[INFO] [systemcheck] Check ‘leaprun check-privleap-environment-variables’ Result: OK
[INFO] [systemcheck] Check ‘leaprun check-sudo’ Result: OK
[INFO] [systemcheck] Whonix build version: 3:14.1-1
systemcheck - Security Check Application
[INFO] [systemcheck] whonix-workstation-packages-dependencies-cli: 25.1-1
[INFO] [systemcheck] derivative_major_release_version /etc/whonix_version: 17
[INFO] [systemcheck] Whonix Support Status of this Major Version: Ok.
[INFO] [systemcheck] Spectre Meltdown Test: skipping since spectre_meltdown_check=false, ok.
[INFO] [systemcheck] Package Manager Consistency Check Result: Output of command dpkg --audit was empty, ok.
[WARNING] [systemcheck] systemd journal check Result:
########################################
Oct 13 14:27:12 host qubes.SetMonitorLayout±dom0[1202]: xrandr: failed to parse ‘QB1366x768’ as a mode specification
Oct 13 14:27:37 host qubes.VMShell±dom0[1562]: Failed to connect to session manager: Failed to connect to the session manager: SESSION_MANAGER environment variable not defined
########################################
If you know what you are doing, feel free to disable this check.
Create a file /etc/systemcheck.d/50_user.conf and add:
systemcheck_skip_functions+=" check_journal "
[INFO] [systemcheck] Qubes Settings Test Result: Ok, qubes_vm_type is TemplateVM.
[INFO] [systemcheck] Check Kernel Messages Test Result: Found nothing remarkable, ok.
[INFO] [systemcheck] Whonix firewall systemd unit check Result: Ok.
[INFO] [systemcheck] Check Package Manager Running Result: None running, ok.
[INFO] [systemcheck] Tor Check Result: Skipped, because running in TemplateVM, ok.
[INFO] [systemcheck] Tor Config Check Result: Tor config ok.
[INFO] [systemcheck] Tor Running Check Result: Not running on Whonix-Gateway, ok.
[INFO] [systemcheck] Whonix Meta Packages Test Result: Meta package qubes-whonix-workstation installed, ok.
[INFO] [systemcheck] Whonix Unwanted Packages Test Result: None found.
[INFO] [systemcheck] Check Initializer Result: /var/lib/initializer-dist/status-files/first_run_initializer.fail does not exist, ok.
[INFO] [systemcheck] Check Virtualizer Result: Supported virtualizer Qubes detected.
systemd-detect-virt result: qubes
[INFO] [systemcheck] PVClock Result: /sys/devices/system/clocksource/clocksource0/current_clocksource exist, is tsc.
[INFO] [systemcheck] Check Timezone Result: /etc/timezone, Etc/UTC matches Etc/UTC, ok.
[INFO] [systemcheck] Check Timezone Result: /usr/share/zoneinfo/Etc/UTC matches /etc/localtime, ok.
[INFO] [systemcheck] IP Forwarding Result: not running on Whonix-Gatway, skipping, ok.
[INFO] [systemcheck] Check Logs Result: /home/user/.msgcollector/msgdispatcher-error.log does not exist, ok.
[INFO] [systemcheck] Check Logs Result: /run/systemcheck/.msgcollector/msgdispatcher-error.log does not exist, ok.
[INFO] [systemcheck] Check Logs Result: /var/lib/systemcheck/.msgcollector/msgdispatcher-error.log does not exist, ok.
[INFO] [systemcheck] Check Logs Result: /home/user/.cache/tb/torbrowser_updater_error.log does not exist, ok.
[INFO] [systemcheck] Check Hostname Result: “hostname --fqdn” output is “host.localdomain”, ok.
[INFO] [systemcheck] Check Hostname Result: “hostname” output is “host”, ok.
[INFO] [systemcheck] Check Hostname Result: “hostname --ip-address” output is “127.0.0.1”, ok.
[INFO] [systemcheck] Check Hostname Result: “hostname --ip-address” output is “localdomain”, ok.
[INFO] [systemcheck] Entropy Available Check Result: ok. /proc/sys/kernel/random/entropy_avail: 256
[INFO] [systemcheck] Check non-freedom Result: Ok, no non-freedom packages found. For more information, see:
Avoid Non-Freedom Software
[INFO] [systemcheck] Operating system (OS) (Debian) support status: Supported (until 2026-06-10)
See also: Operating System Software and Updates
[INFO] [systemcheck] user-sysmaint-split-check installation check result: Enabled
sysmaint - System Maintenance User
[INFO] [systemcheck] user-sysmaint-split session detection result: SYSMAINT Session.
[INFO] [systemcheck] Whonix Login Security Check:
±---------±-------------------------------------+
| Users | Password GUI Autologin |
±---------±-------------------------------------+
| root | Restricted (Absent) Disabled |
| user | Locked (Absent) Disabled |
| sysmaint | Absent Enabled |
±---------±-------------------------------------+

You can adjust these settings using “Manage Passwords” and “Manage GUI Autologin”
in the System Maintenance Panel.
See also: Login Security
[INFO] [systemcheck] su access check: Locked down - only account root can use su.
See also: Strong Linux User Account Isolation
[INFO] [systemcheck] Secure Boot: Unavailable Reason: Qubes detected.
Qubes issue: enable Linux kernel gpg verification in grub and/or enable EFI Secure Boot for Qubes / Xen guests · Issue #5241 · QubesOS/qubes-issues · GitHub
See also: Secure Boot
[WARNING] [systemcheck] tirdad - TCP ISN CPU Information Leak Protection: Disabled

  • Reason: Qubes detected.
  • Known Qubes issue: Use in-vm kernel for Whonix (and possibly Kicksecure) · Issue #9570 · QubesOS/qubes-issues · GitHub
  • No need to report this.
    [INFO] [systemcheck] Whonix APT Repository: Enabled.
    When the Whonix team releases BOOKWORM updates,
    they will be AUTOMATICALLY installed (when you run apt-get dist-upgrade)
    along with updated packages from the Debian team. Please read Placing Trust in Whonix to understand the risk.
    If you want to change this, use:
    sudo repository-dist
    [INFO] [systemcheck] Qubes UpdatesProxy Status Files Check: Ok.
    [INFO] [systemcheck] Qubes UpdatesProxy Reachability Test: Trying to reach local Qubes UpdatesProxy… PROXY_SERVER: http://127.0.0.1:8082/
    [INFO] [systemcheck] Qubes UpdatesProxy Reachability Result: Ok, torified update proxy reachable.
    [INFO] [systemcheck] Qubes UpdatesProxy Connectivity Test: Skipped, because not using --leak-tests (–show-ip), ok.
    [INFO] [systemcheck] check_tor_socks_or_trans_port SocksPort: Skipped, because not using --leak-tests (–show-ip), ok.
    [INFO] [systemcheck] check_tor_socks_or_trans_port TransPort: Skipped, because not using --leak-tests (–show-ip), ok.
    [INFO] [systemcheck] check_tor_socks_or_trans_port UpdatesProxy: Skipped, because not using --leak-tests (–show-ip), ok.
    [INFO] [systemcheck] check_stream_isolation : Skipped, because not using --leak-tests (–show-ip), ok.
    [INFO] [systemcheck] Debian Package Update Check: Checking for software updates via apt-get… ( Documentation: Operating System Software and Updates )
    Hit:1 Index of /r4.3/vm/ bookworm InRelease
    Hit:2 tor+https://deb.whonix.org bookworm InRelease
    Hit:3 tor+https://deb.kicksecure.com bookworm InRelease
    Hit:4 tor+https://deb.debian.org/debian bookworm InRelease
    Get:5 tor+https://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
    Get:6 tor+https://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
    Get:7 tor+https://deb.debian.org/debian bookworm-backports InRelease [59.4 kB]
    Get:8 tor+https://deb.debian.org/debian bookworm-backports/main amd64 Packages.diff/Index [63.3 kB]
    Get:9 tor+https://deb.debian.org/debian bookworm-backports/main amd64 Packages T-2025-10-12-2010.18-F-2025-10-12-2010.18.pdiff [1324 B]
    Get:9 tor+https://deb.debian.org/debian bookworm-backports/main amd64 Packages T-2025-10-12-2010.18-F-2025-10-12-2010.18.pdiff [1324 B]
    Fetched 227 kB in 4s (57.7 kB/s)
    Reading package lists…
    [INFO] [systemcheck] apt-get dist-upgrade --simulate output:
    Reading package lists…
    Building dependency tree…
    Reading state information…
    Calculating upgrade…
    0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
    [INFO] [systemcheck] Debian Package Update Check Result: No updates found via apt-get.
    [INFO] [systemcheck] Warrant Canary Check: Skipping on Whonix-Workstation, ok.
    [INFO] [systemcheck] Please donate!
    See: Donating to Whonix
    zsh: exit 1 systemcheck -v
    [template workstation user ~]%

Does internal upgrade of the template working? sudo apt update && sudo apt full-upgrade ?

Have you tried to reinstall fresh and recheck?

1 Like
12

How do I make it not messy then?

I guess. This is what I got:

[template workstation user ~]% sudo apt update && sudo apt full-upgrade
Get:1 tor+https://fasttrack.debian.net/debian bookworm-fasttrack InRelease [12.9 kB]
Hit:2 https://deb.qubes-os.org/r4.2/vm bookworm InRelease                      
Hit:3 tor+https://deb.debian.org/debian bookworm InRelease
Hit:4 tor+https://deb.debian.org/debian bookworm-updates InRelease
Hit:5 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Hit:6 tor+https://deb.debian.org/debian bookworm-backports InRelease
Fetched 12.9 kB in 4s (3,028 B/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
[template workstation user ~]%

No. It’s default and I’m kinda noob. I thought it should just work

1 Like
13

How ‘user’ is running sudo without having this output:

template workstation user ~]% sudo apt update && sudo apt full-upgrade
zsh: permission denied: sudo
zsh: exit 126 sudo apt update
[template workstation user ~]%

Where are whonix and kicksecure repositories ??

Compared to normal WS template:

[template workstation root ~]# apt update && apt full-upgrade
Hit:1 tor+https://deb.debian.org/debian bookworm InRelease
Hit:2 tor+https://deb.kicksecure.com bookworm InRelease
Hit:3 tor+https://deb.debian.org/debian bookworm-updates InRelease
Hit:4 tor+https://deb.whonix.org bookworm InRelease
Hit:5 Index of /r4.3/vm/ bookworm InRelease
Hit:6 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Hit:7 tor+https://deb.debian.org/debian bookworm-backports InRelease
Reading package lists… Done
Building dependency tree… Done
Reading state information… Done
All packages are up to date.
Reading package lists… Done
Building dependency tree… Done
Reading state information… Done
Calculating upgrade… Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
[template workstation root ~]#

I dunno what you have done (i will assume you are not troller), so what you need for surely is to reinstall your whonix templates (link mentioned above on how to, or you can delete and install again, up to you which way you want to go).

1 Like
14

You make me worry. For real.
Like how come I got this then??? It’s a fresh install and I never touched whonix templates. All I did is played with regular templates, specifically the debian(regular) and the minimal one.

How do I investigate if my system is compromised or whatever?

I don’t have much data on this machine anyways and I can re-install with kinda ease the whole system, even though I wanted to wait for the 4.3, but I want to understand why I got this

1 Like
15

Hard to impossible, since you are a newbie you might done stuff wrong.

While you are light/not much you have on your machine, i suggest to install 4.3 rc2, its working good at the moment (and when the new stable release gonna come you dont need to reinstall, just regular upgrades enough).

Make sure you activated or your machine has these criteria:

1 Like
16

Activated what?

My machine does meet the hardware requirements.

Didn’t know I could do that without implications, thanks. I’ll give it a go then.

1 Like
17

vt-x, vt-d.. BIO/UEFI stuff (search online how to activate these which are mentioned in qubes hcl list).

Awesome, you welcome.

1 Like
18

Oh, got it. It’s activated, otherwise I wouldn’t be able to use the system.

Thank you and Torprotector for help

3 Likes
19

Your tb-updater package version is outdated, because…

You lack Whonix APT repository. Can be enabled as per:

Then upgrade.

Then should be fixed.

Disregard everything else said in this forum thread such as:

  • No need for Template re-installation.
  • No need for hardware comparability checks (just only because of this issue).
  • BIOS.

Old Template. user-sysmaint-split was introduced during Whonix 17 lifetime, not at the beginnging.

2 Likes