display manager - lightdm, gdm3, sddm or no display manager (startx)

Development
,
1

Whonix 15 was using lightdm. It was removed due to autologin heisenbug. [1] [2] [3]

Therefore Whonix 16 is using gdm3. It is also a good choice because it supports wayland (and fits with Gnome, which Whonix might be ported to, depending on many things such as feasibility, resource use, please use a dedicated forum thread (none might exist yet, see [4]).

[1] autologin not work sometimes · Issue #210 · canonical/lightdm · GitHub

[2] autologin is not working every time · Issue #191 · canonical/lightdm · GitHub

[3] Heisenbug - Wikipedia

[4] Search results for 'wayland' - Whonix Forum

1 Like
2

If this is doable during this release cycle, then it would exceed any other benefit of switching away including reduced resource usage.

1 Like
3

Dunno. I’ll know when I get to it. Depends on how many / any issues caused by wayland.

4
1 Like
5
1 Like
6
1 Like
7

display manager requirements:

  • in packages.debian.org
  • no dependency hell
  • wayland support
  • autologin supported without heisenbug
  • no hardcoding of desktop environment required in config for autologin

Not easy to find…

8

gdm3:

sddm:

  • in packages.debian.org
  • no dependency hell
  • wayland support
  • autologin supported
  • hardcoded Session=xfce config required (would be a technical debt making porting to other desktop environments harder)

lightdm:

1 Like
9
10

Debian bug report:
lightdm-autologin-greeter: out-comment defunct autologin-user=AUTOLOGIN-USER-NOT-CONFIGURED in /etc/lightdm/lightdm.conf.d/lightdm-autologin-greeter.conf

1 Like
11

Yet another option might be not using any display manager and instead use startx (or its wayland equivalent).

For that purpose RAM Adjusted Desktop Starter - Kicksecure (rads) could be modified.
(Whonix is based on Kicksecure.)
If no display manager is installed and if there is enough RAM and if startx is available, start it.
(Configurable.)

How about Whonix-Host?
(Would equally apply to Kicksecure host.)

  • Pre-configured style: Should have display manager and no default autologin? Also for logon password at every boot required.
  • Minimal style: autologin using startx by default. Display manager installation, logon password setup should be left to the user?

Display manager login password has limited use anyhow when already using Full Disk Encryption (FDE) → Protection against Physical Attacks.

1 Like
12

Might be fixed in Debian bookworm or bookworm + 1 as per Autologin in X11 does not work if session name is absolute path · Issue #1607 · sddm/sddm · GitHub.

13

Fixed in Debian bookworm.

Automatically rebooted a VM a few hundred times and no autologin heisenbug so far.

Whonix 15 was using gdm3.
Whonix 16 will switch back to lightdm.

1 Like
14

add accountservice to kicksecure-desktop-environment-essential-xfce

fixes:

localhost lightdm[911]: Error getting user list from org.freedesktop.Accounts: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.Accounts was not provided by any .service files

package lightdm Suggests: accountservice

add `accountservice` to `kicksecure-desktop-environment-essential-xfce` · Kicksecure/kicksecure-meta-packages@1f544bf · GitHub