For users who are interested in trying out kloak within Whonix Workstation VMs on Qubes OS, you can now do so with a bit of manual effort. Work is underway to eventually make this unnecessary, but in the mean time here’s how you can enable it:
- Launch a terminal in the
whonix-workstation-17
template. - In
whonix-workstation-17
, runsudo apt install xserver-xorg-input-evdev
. This is the X.Org evdev driver, which is necessary for the keyboard input method kloak requires. - In
whonix-workstation-17
, runsudo apt install kloak
. - In
dom0
, runqvm-service whonix-workstation-17-dvm gui-agent-virtual-input-device on
to enable the evdev-based input method. - Shut down
whonix-workstation-17
and wait for it to fully shut down. - Launch a DispVM from
whonix-workstation-17-dvm
. - Open XFCE Terminal in the new DispVM.
- Ensure you can type.
- Run
sudo systemctl stop kloak && sudo /usr/sbin/kloak -d250 &
and ensure kloak starts properly. - Type a bit in the terminal, you should notice significant lag and randomized timing as what you type appears on the screen.
- Press Ctrl+C to terminate kloak, then run
sudo systemctl start kloak
to start kloak with default settings again. - See Keystroke Deanonymization - Whonix if you want to set persistent settings that customize kloak’s behavior (like setting a longer input delay to allow better randomization of keystrokes and mouse movements).
In the event you accidentally lock yourself out of your Whonix Workstation VM while doing this, simply open a dom0
terminal and run qvm-service whonix-workstation-17-dvm gui-agent-virtual-input-device off
, then shut down all Whonix Workstation VMs and start them up again. This will go back to the original input method.