I think I can no longer get and install updates. It says this:
updatecheck: Software updates check failure
‘leaprun system-ready-check’ failed.
system_ready_check_output:‘degraded’
Please run systemcheck
I did run systemcheck but I dont understand what I need to do to fix
Can you share the output of systemcheck here? (Even better would be the output of systemcheck --verbose --leak-tests. In either event you should check the output for sensitive information and redact it before posting it.)
Output from running systemcheck --verbose --leak-tests
I dont know what I am looking at
Thank you for your help
[WARNING] [systemcheck] System ready check (system) Result: Failed.
Debugging information:
Command:
leaprun system-ready-check (runs 'systemctl --wait is-system-running' as root via privleap)
result: 'degraded'
[INFO] [systemcheck] System ready check (user) Result: OK.
[INFO] [systemcheck] AppArmor Check Result: OK.
[INFO] [systemcheck] Environment Variables Test Result: OK.
[INFO] [systemcheck] Account 'sysmaint' present in group 'privleap': Yes
[INFO] [systemcheck] Check 'privleapd --check-config' Result: OK.
[INFO] [systemcheck] Check 'leaprun check-privleap' Result: OK.
[INFO] [systemcheck] Check 'leaprun check-privleap-environment-variables' Result: OK.
[INFO] [systemcheck] Check 'leaprun check-sudo' Result: OK.
[INFO] [systemcheck] Check 'sudo' Result: OK.
[INFO] [systemcheck] Check 'pkexec /usr/libexec/systemcheck/pkexec-test' Result: OK.
[INFO] [systemcheck] Whonix build version[1]: 18.2.1.9
Links:
[1] https://www.whonix.org/wiki/Systemcheck#Build_Version
[INFO] [systemcheck] dist-general-cli: 37.8-1
[INFO] [systemcheck] derivative_major_release_version /etc/whonix_version: 18
[INFO] [systemcheck] Whonix Support Status of this Major Version: OK.
[INFO] [systemcheck] Check manual page (man) Result: OK.
[INFO] [systemcheck] Spectre Meltdown Test: skipping since spectre_meltdown_check=false, OK.
[ERROR] [systemcheck] Package Manager Consistency Check Result: Failed.
Was an apt dist-upgrade interrupted?
Recommendation:
Try to complete the upgrade process. To fix, click "Open Terminal" in the System Maintenance Panel, then run:sudo dpkg --configure -a
Debugging information:
Output of command dpkg --audit was non-empty!
dpkg_audit_output:
dpkg: error: unable to check lock file for dpkg database directory /var/lib/dpkg: Permission denied
[WARNING] [systemcheck] systemd 'system' units check result: One or more units failed to load.
A possible system issue was detected. There is no need to panic. This is not a serious security problem. However, it may impact other system checks.
Some systemd 'system' units may be stuck in a failed, activating, or deactivating state.
Output of leaprun read-systemctl-logs-failed-units-pretty (runs 'systemctl --state=failed,activating,deactivating list-units' as root via privleap):
########################################
UNIT LOAD ACTIVE SUB DESCRIPTION
* canary.service loaded failed failed canary
Legend: LOAD -_ Reflects whether the unit definition was properly loaded.
ACTIVE -_ The high-level unit activation state, i.e. generalization of SUB.
SUB -_ The low-level unit activation state, values depend on unit type.
1 loaded units listed.
########################################
To check manually:
1. Open a terminal. (Start Menu - System - Terminal)
2. Run:
leaprun read-systemctl-logs-failed-units-pretty
If you know what you are doing, feel free to disable this check.
Create a file /etc/systemcheck.d/50_user.conf and add:
systemcheck_skip_functions+=" check_services_do "
[INFO] [systemcheck] systemd 'user' units check result: OK.
[INFO] [systemcheck] systemd critical journal messages check result (current boot): OK.
[INFO] [systemcheck] systemd critical journal messages check result (previous boot): OK.
[WARNING] [systemcheck] systemd journal check result (current boot):
########################################
AVC apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/systemcheck/canary" name="/usr/libexec/helper-scripts/has.bsh" comm="canary" requested_mask="r" denied_mask="r"
Oct 23 11:07:26 host audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=canary comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 23 11:07:26 host systemd[1]: canary.service: Failed with result 'exit-code'.
Oct 23 11:07:26 host systemd[1]: canary.service: Main process exited, code=exited, status=1/FAILURE
Oct 23 11:07:27 host audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=canary comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 23 11:07:27 host audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=canary comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 23 11:07:27 host systemd[1]: Failed to start canary.service - canary.
Oct 23 11:07:27 host systemd[1]: canary.service: Failed with result 'exit-code'.
Oct 23 11:07:27 host systemd[1]: canary.service: Main process exited, code=exited, status=1/FAILURE
Oct 23 11:07:58 host kernel: tsc: Marking TSC unstable due to check_tsc_sync_source failed
Oct 23 11:07:58 host systemd-modules-load[228]: Failed to find module 'tirdad'
Oct 23 11:07:59 host kernel: RTR0DbgKrnlInfoOpen: /proc/kallsym method failed. get_user_pages address off by +0x7ac8e670
Oct 23 11:07:59 host kernel: WARNING: CPU: 0 PID: 335 at kernel/rcu/tree_plugin.h:826 rcu_sched_clock_irq+0x7cb/0xb60
Oct 23 11:07:59 host kernel: vboxguest: module verification failed: signature and/or required key missing - tainting kernel
Oct 23 11:08:05 host systemd-modules-load[504]: Failed to find module 'tirdad'
Oct 23 11:08:08 host kernel: vboxsf: SHFL_FN_MAP_FOLDER failed for 'shared': share not found
########################################
If you know what you are doing, feel free to disable this check.
Create a file /etc/systemcheck.d/50_user.conf and add:
systemcheck_skip_functions+=" check_journal "
[WARNING] [systemcheck] systemd journal check result (previous boot):
########################################
AVC apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/systemcheck/canary" name="/usr/libexec/helper-scripts/has.bsh" comm="canary" requested_mask="r" denied_mask="r"
Oct 23 09:54:44 host audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=canary comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 23 09:54:44 host systemd[1]: canary.service: Failed with result 'exit-code'.
Oct 23 09:54:44 host systemd[1]: canary.service: Main process exited, code=exited, status=1/FAILURE
Oct 23 09:54:45 host audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=canary comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 23 09:54:45 host audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=canary comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 23 09:54:45 host systemd[1]: Failed to start canary.service - canary.
Oct 23 09:54:45 host systemd[1]: canary.service: Failed with result 'exit-code'.
Oct 23 09:54:45 host systemd[1]: canary.service: Main process exited, code=exited, status=1/FAILURE
Oct 23 09:56:52 host kernel: tsc: Marking TSC unstable due to check_tsc_sync_source failed
Oct 23 09:56:52 host systemd-modules-load[228]: Failed to find module 'tirdad'
Oct 23 09:56:53 host kernel: RTR0DbgKrnlInfoOpen: /proc/kallsym method failed. get_user_pages address off by +0x4688e670
Oct 23 09:56:53 host kernel: WARNING: CPU: 1 PID: 327 at kernel/rcu/tree_plugin.h:826 rcu_sched_clock_irq+0x7cb/0xb60
Oct 23 09:56:53 host kernel: vboxguest: module verification failed: signature and/or required key missing - tainting kernel
Oct 23 09:56:59 host systemd-modules-load[491]: Failed to find module 'tirdad'
Oct 23 09:57:02 host kernel: vboxsf: SHFL_FN_MAP_FOLDER failed for 'shared': share not found
Oct 23 10:29:25 host fwupd[3815]: 10:29:25.518 FuEngine failed to add device /sys/devices/pci0000:00/0000:00:0d.0/ata1/host0/target0:0:0/0:0:0:0/block/sda/sda1: failed to subclass open: failed to open /dev/sda1: Device or resource busy
Oct 23 10:29:25 host fwupd[3815]: 10:29:25.557 FuEngine failed to add device /sys/devices/pci0000:00/0000:00:0d.0/ata1/host0/target0:0:0/0:0:0:0/block/sda/sda3: failed to subclass open: failed to open /dev/sda3: Device or resource busy
Oct 23 11:01:04 host systemd[2239]: msgcollector-gui.service: Failed with result 'watchdog'.
Oct 23 11:02:40 host systemd[2239]: msgcollector-gui.service: Failed with result 'watchdog'.
Oct 23 11:04:14 host systemd[2239]: Failed to start msgcollector-gui.service - msgcollector msgdispatcher.
Oct 23 11:04:14 host systemd[2239]: msgcollector-gui.service: Failed with result 'timeout'.
########################################
If you know what you are doing, feel free to disable this check.
Create a file /etc/systemcheck.d/50_user.conf and add:
systemcheck_skip_functions+=" check_journal "
[INFO] [systemcheck] Network Interfaces Check Result: OK.
[INFO] [systemcheck] Qubes Settings Test Result: Skipped, because Qubes not detected.
[INFO] [systemcheck] Whonix firewall systemd unit check result: OK.
[INFO] [systemcheck] Check Package Manager Running Result: None running, OK.
[INFO] [systemcheck] Tor Check Result: "DisableNetwork 1" not active, OK.
[INFO] [systemcheck] Tor Config Check Result: OK.
[INFO] [systemcheck] Tor Running Check Result: /usr/libexec/systemcheck/check_tor_running: Pid running.
[INFO] [systemcheck] Control Port Filter Proxy Test Result: OK.
[INFO] [systemcheck] check_anondate_do Debugging information:
tor_consensus_status : verified
current_time_in_valid_range: true
current_time_torish : 2026-10-23 11:18:44
tor_consensus_valid_after : 2026-10-23 09:00:00
tor_consensus_valid_until : 2026-10-23 12:00:00
tor_consensus_middle_range : 2026-10-23 10:30:00
tor_cert_lifetime_output :
tor_cert_lifetime_valid : true
tor_cert_valid_after :
tor_consensus_user_permission : debian-tor
tor_consensus_group_permission: debian-tor
[INFO] [systemcheck] Tor SocksPort Reachability Test Result: Reachable. (curl exit code: 22 | curl status message: [22] - [HTTP page not retrieved. The requested url was not found or returned another error with the HTTP error code being 400 or above. This return code only appears if -f, --fail is used.])
[INFO] [systemcheck] Tor Connection Result: OK.
tor_bootstrap_status: NOTICE BOOTSTRAP PROGRESS=100 TAG=done SUMMARY="Done"
Tor Circuit: established
[INFO] [systemcheck] Time Synchronization Result: OK.
Time synchronization status: success
sdwdate reports: Success.
whonix_firewall status: consecutive run after boot
onion-time-pre-script reports:
__ ### START: ### /usr/libexec/helper-scripts/onion-time-pre-script
__ Status: First run after boot. (Creating file '/run/sdwdate/onion-time-script-after-boot'.)
__ Static Time Sanity Check: Within minimum time 'Fri Oct 2 00:00:00 UTC 2026' and expiration timestamp 'Tue May 17 10:00:00 UTC 2033', ok.
__ Tor Dormant Result: No, not dormant, good. (tor_dormant_type: 'check-ok')
__ Tor reports: NOTICE BOOTSTRAP PROGRESS=100 TAG=done SUMMARY="Done"
__ Tor circuit: established
__ Tor Consensus Time Sanity Check: Clock within consensus parameters consensus/valid-after '2026-10-23 09:00:00' and consensus/valid-until '2026-10-23 12:00:00'.
__ Circuit confirmation: yes
__ Conclusion: Tor already reports circuit confirmed.
__ ### END: ### Exiting with exit_code '0' indicating 'success'.
[INFO] [systemcheck] Connected to Tor.
[INFO] [systemcheck] Whonix Meta Packages Test Result: Meta package whonix-gateway-vm-gui-lxqt installed, OK.
[INFO] [systemcheck] Whonix Meta Packages Test Result: Meta package whonix-gateway-vm-cli installed, OK.
[INFO] [systemcheck] Whonix Unwanted Packages Test Result: None found, OK.
[INFO] [systemcheck] Check Initializer Result: /var/lib/initializer-dist/status-files/first_run_initializer.fail does not exist, OK.
[INFO] [systemcheck] Check Virtualizer Result: Supported virtualizer VirtualBox detected.
systemd-detect-virt result: oracle
[INFO] [systemcheck] PVClock Result: /sys/devices/system/clocksource/clocksource0/current_clocksource exist, is kvm-clock.
[INFO] [systemcheck] Check Timezone Result: /etc/timezone, Etc/UTC matches Etc/UTC, OK.
[INFO] [systemcheck] Check Timezone Result: /usr/share/zoneinfo/Etc/UTC matches /etc/localtime, OK.
[INFO] [systemcheck] IP Forwarding Result: /proc/sys/net/ipv4/ip_forward is 0, OK.
[INFO] [systemcheck] Whonix[1] is produced independently of, with no guarantee from, The Tor Project. Whonix is a research project.
Links:
[1] https://www.whonix.org
[INFO] [systemcheck] Check Logs Result: /home/sysmaint/.msgcollector/msgdispatcher-error.log does not exist, OK.
[INFO] [systemcheck] Check Logs Result: /run/systemcheck/.msgcollector/msgdispatcher-error.log does not exist, OK.
[INFO] [systemcheck] Check Logs Result: /var/lib/systemcheck/.msgcollector/msgdispatcher-error.log does not exist, OK.
[INFO] [systemcheck] Check Logs Result: /home/sysmaint/.cache/tb/torbrowser_updater_error.log does not exist, OK.
[INFO] [systemcheck] Check Hostname Result: "hostname --fqdn" output is "host.localdomain", OK.
[INFO] [systemcheck] Check Hostname Result: "hostname" output is "host", OK.
[INFO] [systemcheck] Check Hostname Result: "hostname --ip-address" output is "127.0.0.1", OK.
[INFO] [systemcheck] Check Hostname Result: "hostname --domain" output is "localdomain", OK.
[INFO] [systemcheck] Entropy Available Check Result: OK. /proc/sys/kernel/random/entropy_avail: 256
[WARNING] [systemcheck] Audio Test: pw-play could not play the test sound (exit code: 126). Audio output may not be working.
[INFO] [systemcheck] Check non-freedom Result: OK. No non-freedom packages found. For more information, see:
https://www.whonix.org/wiki/Avoid_nonfreedom_software
[INFO] [systemcheck] Operating system (OS) (Debian) support status[1]: Supported (until 2028-08-09)
Links:
[1] https://www.kicksecure.com/wiki/Operating_System_Software_and_Updates#End-of-life_Software
[INFO] [systemcheck] user-sysmaint-split installation check[1]: Installed
Links:
[1] https://www.kicksecure.com/wiki/sysmaint
[INFO] [systemcheck] user-sysmaint-split session detection result: SYSMAINT Session.
[INFO] [systemcheck] Kernel Command-Line Hardening: Present
[INFO] [systemcheck] /proc/cmdline:
BOOT_IMAGE=/boot/vmlinuz-6.12.111+deb13-amd64 root=UUID=26ada0c0-1165-4098-884d-aafd2220c2c6 ro mitigations=auto,nosmt nosmt=force spectre_v2=on spectre_bhi=on kpti=1 pti=on spec_store_bypass_disable=on ssbd=force-on l1tf=full,force kvm-intel.vmentry_l1d_flush=always mds=full,nosmt tsx=off tsx_async_abort=full,nosmt kvm.nx_huge_pages=force l1d_flush=on mmio_stale_data=full,nosmt retbleed=auto,nosmt kvm.mitigate_smt_rsb=1 gather_data_sampling=force reg_file_data_sampling=on indirect_target_selection=force vmscape=force slab_nomerge slab_debug=FZ init_on_alloc=1 init_on_free=1 page_alloc.shuffle=1 randomize_kstack_offset=on vsyscall=none debugfs=off kfence.sample_interval=100 vdso32=0 cfi=kcfi ia32_emulation=0 efi_pstore.pstore_disable=1 erst_disable proc_mem.force_override=ptrace bdev_allow_write_mounted=0 amd_iommu=force_isolation intel_iommu=on iommu=force iommu.passthrough=0 iommu.strict=1 efi=disable_early_pci_dma random.trust_cpu=off random.trust_bootloader=off extra_latent_entropy boot-role=sysmaint systemd.unit=sysmaint-boot.target loglevel=0 quiet rd.emergency=halt rd.shell=0
[INFO] [systemcheck] Whonix Login[1] Security Check (Colors[2])
:
+----------+--------------------------------------+
| Users | Password GUI Autologin |
+----------+--------------------------------------+
| root | Locked (Present) Disabled |
| user | Absent Enabled |
| sysmaint | Absent Enabled |
+----------+--------------------------------------+
You can adjust these settings using "Manage Passwords" and "Manage GUI Autologin"
in the System Maintenance Panel.
See also: Physical Security[3].
Links:
[1] https://www.kicksecure.com/wiki/Login
[2] https://www.kicksecure.com/wiki/Systemcheck#Login_Security_Check_-_Meaning_of_Colors
[3] https://www.kicksecure.com/wiki/Systemcheck#Physical_Security_Check
[INFO] [systemcheck] su access check[1]: Locked down - only account root can use su.
Links:
[1] https://www.kicksecure.com/wiki/Dev/Strong_Linux_User_Account_Isolation#su_restrictions
[INFO] [systemcheck] Secure Boot[1]: Unavailable
- Reason: Not booted in EFI (UEFI) mode. Secure Boot is only available in EFI (UEFI) mode.
Links:
[1] https://www.kicksecure.com/wiki/Secure_Boot
[WARNING] [systemcheck] tirdad - TCP ISN CPU Information Leak Protection[1]: Disabled
- Reason: kernel module 'tirdad' is NOT loaded.
Links:
[1] https://github.com/Kicksecure/tirdad
[INFO] [systemcheck] Whonix APT Repository: Enabled.
When the Whonix team releases TRIXIE updates,
they will be AUTOMATICALLY installed (when you run apt-get dist-upgrade)
along with updated packages from the Debian team. Please read https://www.whonix.org/wiki/Trust to understand the risk.
If you want to change this, use:
sudo repository-dist
[INFO] [systemcheck] SocksPort IP Leak Test: Testing Tor's SocksPort (SOCKS_PORT_SYSTEMCHECK: 9110)...
[INFO] [systemcheck] SocksPort IP Leak Test: Connected to Tor.
[INFO] [systemcheck] system default networking IP Leak Test: system default networking IP Leak Test...
[INFO] [systemcheck] system default networking IP Leak Test Test Result: OK. Tor's TransPort was not reachable.
This is expected on Whonix-Gateway's default configuration.
(curl exit code: [6] - [Couldn't resolve host. The given remote host was not resolved.])
[INFO] [systemcheck] Stream Isolation Test: Ok, skipped, because TransPort test failed! Can not test stream isolation. This is expected on Whonix-Gateway's default configuration.
[INFO] [systemcheck] Debian Package Update Check: Checking for software updates via apt-get... ( Documentation: https://www.whonix.org/wiki/Update )
Hit:1 tor+https://deb.whonix.org trixie InRelease
Hit:2 tor+https://deb.debian.org/debian trixie InRelease
Get:3 tor+https://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
Get:4 tor+https://deb.debian.org/debian trixie-backports InRelease [54.0 kB]
Hit:5 tor+https://deb.kicksecure.com trixie InRelease
Get:6 tor+https://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
Get:7 tor+https://deb.debian.org/debian trixie-updates/main amd64 Packages.diff/Index [6117 B]
Get:8 tor+https://deb.debian.org/debian trixie-backports/non-free amd64 Packages.diff/Index [14.0 kB]
Get:9 tor+https://deb.debian.org/debian trixie-backports/main amd64 Packages.diff/Index [63.3 kB]
Get:10 tor+https://deb.debian.org/debian trixie-updates/main amd64 Packages T-2026-10-22-2004.53-F-2026-10-22-2004.53.pdiff [663 B]
Get:10 tor+https://deb.debian.org/debian trixie-updates/main amd64 Packages T-2026-10-22-2004.53-F-2026-10-22-2004.53.pdiff [663 B]
Get:11 tor+https://deb.debian.org/debian trixie-backports/non-free amd64 Packages T-2026-10-21-2020.08-F-2026-10-21-2020.08.pdiff [257 B]
Get:11 tor+https://deb.debian.org/debian trixie-backports/non-free amd64 Packages T-2026-10-21-2020.08-F-2026-10-21-2020.08.pdiff [257 B]
Get:12 tor+https://deb.debian.org/debian trixie-backports/main amd64 Packages T-2026-10-23-0205.06-F-2026-10-21-2020.08.pdiff [2099 B]
Get:12 tor+https://deb.debian.org/debian trixie-backports/main amd64 Packages T-2026-10-23-0205.06-F-2026-10-21-2020.08.pdiff [2099 B]
Get:13 tor+https://deb.debian.org/debian-security trixie-security/main amd64 Packages [269 kB]
Fetched 501 kB in 4s (120 kB/s)
Reading package lists...
[INFO] [systemcheck] apt-get dist-upgrade --simulate output:
Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
linux-headers-6.12.101+deb13-amd64 linux-headers-6.12.101+deb13-common
linux-headers-6.12.95+deb13-amd64 linux-headers-6.12.95+deb13-common
linux-headers-6.12.96+deb13-amd64 linux-headers-6.12.96+deb13-common
linux-image-6.12.101+deb13-amd64 linux-image-6.12.95+deb13-amd64
linux-image-6.12.96+deb13-amd64 linux-kbuild-6.12.101+deb13
linux-kbuild-6.12.95+deb13 linux-kbuild-6.12.96+deb13
Use 'apt autoremove' to remove them.
The following NEW packages will be installed:
linux-headers-6.12.113+deb13-amd64 linux-headers-6.12.113+deb13-common
linux-image-6.12.113+deb13-amd64 linux-kbuild-6.12.113+deb13
The following packages will be upgraded:
bind9-dnsutils bind9-host bind9-libs ca-certificates curl libcurl3t64-gnutls
libcurl4t64 libexpat1 librsvg2-2 librsvg2-common linux-headers-amd64
linux-image-amd64 linux-libc-dev tor tor-geoipdb tzdata
16 upgraded, 4 newly installed, 0 to remove and 0 not upgraded.
66 not fully installed or removed.
Conf legacy-dist (3:21.7-1 Kicksecure:deb.kicksecure.com [all])
Inst ca-certificates [20250419] (20250419+deb13u1 Debian-Security:13/stable-security [all])
Inst tor-geoipdb [0.4.9.13-1~d13.trixie+1] (0.4.9.14-1~d13.trixie+1 Kicksecure:deb.kicksecure.com [all]) []
Inst tor [0.4.9.13-1~d13.trixie+1] (0.4.9.14-1~d13.trixie+1 Kicksecure:deb.kicksecure.com [amd64])
Inst curl [8.14.1-2+deb13u5] (8.14.1-2+deb13u7 Debian-Security:13/stable-security [amd64]) []
Inst libcurl4t64 [8.14.1-2+deb13u5] (8.14.1-2+deb13u7 Debian-Security:13/stable-security [amd64])
Inst bind9-dnsutils [1:9.20.29-1~deb13u1] (1:9.20.30-1~deb13u1 Debian-Security:13/stable-security [amd64]) []
Inst bind9-host [1:9.20.29-1~deb13u1] (1:9.20.30-1~deb13u1 Debian-Security:13/stable-security [amd64]) []
Inst bind9-libs [1:9.20.29-1~deb13u1] (1:9.20.30-1~deb13u1 Debian-Security:13/stable-security [amd64])
Inst linux-headers-6.12.113+deb13-common (6.12.113-1 Debian-Security:13/stable-security [all])
Inst linux-image-6.12.113+deb13-amd64 (6.12.113-1 Debian-Security:13/stable-security [amd64])
Inst linux-kbuild-6.12.113+deb13 (6.12.113-1 Debian-Security:13/stable-security [amd64])
Inst linux-headers-6.12.113+deb13-amd64 (6.12.113-1 Debian-Security:13/stable-security [amd64])
Inst linux-headers-amd64 [6.12.111-1] (6.12.113-1 Debian-Security:13/stable-security [amd64])
Inst libexpat1 [2.8.3-1~deb13u1] (2.9.0-1~deb13u1 Debian-Security:13/stable-security [amd64])
Inst tzdata [2026c-0+deb13u1] (2026e-0+deb13u1 Debian:13-updates/stable-updates [all])
Inst libcurl3t64-gnutls [8.14.1-2+deb13u5] (8.14.1-2+deb13u7 Debian-Security:13/stable-security [amd64])
Inst librsvg2-common [2.60.0+dfsg-1] (2.60.0+dfsg-1+deb13u1 Debian-Security:13/stable-security [amd64]) []
Inst librsvg2-2 [2.60.0+dfsg-1] (2.60.0+dfsg-1+deb13u1 Debian-Security:13/stable-security [amd64])
Inst linux-image-amd64 [6.12.111-1] (6.12.113-1 Debian-Security:13/stable-security [amd64])
Inst linux-libc-dev [6.12.111-1] (6.12.113-1 Debian-Security:13/stable-security [all])
Conf ca-certificates (20250419+deb13u1 Debian-Security:13/stable-security [all])
Conf tor-geoipdb (0.4.9.14-1~d13.trixie+1 Kicksecure:deb.kicksecure.com [all])
Conf tor (0.4.9.14-1~d13.trixie+1 Kicksecure:deb.kicksecure.com [amd64])
Conf curl (8.14.1-2+deb13u7 Debian-Security:13/stable-security [amd64])
Conf libcurl4t64 (8.14.1-2+deb13u7 Debian-Security:13/stable-security [amd64])
Conf bind9-dnsutils (1:9.20.30-1~deb13u1 Debian-Security:13/stable-security [amd64])
Conf bind9-host (1:9.20.30-1~deb13u1 Debian-Security:13/stable-security [amd64])
Conf bind9-libs (1:9.20.30-1~deb13u1 Debian-Security:13/stable-security [amd64])
Conf linux-headers-6.12.113+deb13-common (6.12.113-1 Debian-Security:13/stable-security [all])
Conf linux-image-6.12.113+deb13-amd64 (6.12.113-1 Debian-Security:13/stable-security [amd64])
Conf linux-kbuild-6.12.113+deb13 (6.12.113-1 Debian-Security:13/stable-security [amd64])
Conf linux-headers-6.12.113+deb13-amd64 (6.12.113-1 Debian-Security:13/stable-security [amd64])
Conf linux-headers-amd64 (6.12.113-1 Debian-Security:13/stable-security [amd64])
Conf libexpat1 (2.9.0-1~deb13u1 Debian-Security:13/stable-security [amd64])
Conf tzdata (2026e-0+deb13u1 Debian:13-updates/stable-updates [all])
Conf libcurl3t64-gnutls (8.14.1-2+deb13u7 Debian-Security:13/stable-security [amd64])
Conf librsvg2-common (2.60.0+dfsg-1+deb13u1 Debian-Security:13/stable-security [amd64])
Conf librsvg2-2 (2.60.0+dfsg-1+deb13u1 Debian-Security:13/stable-security [amd64])
Conf linux-image-amd64 (6.12.113-1 Debian-Security:13/stable-security [amd64])
Conf linux-libc-dev (6.12.113-1 Debian-Security:13/stable-security [all])
Conf apparmor-profile-dist (3:10.7-1 Kicksecure:deb.kicksecure.com [all])
Conf whonix-firewall (3:19.5-1 Whonix:deb.whonix.org [all])
Conf security-misc-shared (3:54.2-1 Kicksecure:deb.kicksecure.com [all])
Conf onion-grater (3:14.4-1 Whonix:deb.whonix.org [all])
Conf tor-ctrl (3:7.4-1 Kicksecure:deb.kicksecure.com [all])
Conf dist-general-cli (3:37.8-1 Kicksecure:deb.kicksecure.com [all])
Conf grub-live-dracut (3:11.5-1 Kicksecure:deb.kicksecure.com [all])
Conf grub-live (3:11.5-1 Kicksecure:deb.kicksecure.com [all])
Conf libqt6sql6-sqlite (6.8.2+dfsg-9+deb13u2 Debian:13.7/stable [amd64])
Conf dist-base-files (3:16.6-1 Kicksecure:deb.kicksecure.com [all])
Conf tirdad (0:0.3.5-1 Kicksecure:deb.kicksecure.com [amd64])
Conf dist-nonqubes-cli (3:37.8-1 Kicksecure:deb.kicksecure.com [all])
Conf uwt (3:10.4-1 Whonix:deb.whonix.org [all])
Conf systemcheck (3:53.3-1 Kicksecure:deb.kicksecure.com [all])
Conf initializer-dist (3:9.5-1 Kicksecure:deb.kicksecure.com [all])
Conf virtualbox-guest-additions-iso (1:7.2.20.1-1 Kicksecure:deb.kicksecure.com [all])
Conf dummy-dependency-lxqt-policykit (3:37.8-1 Kicksecure:deb.kicksecure.com [all])
Conf setup-wizard-dist (3:13.6-1 Kicksecure:deb.kicksecure.com [all])
Conf open-link-confirmation (3:9.4-1 Kicksecure:deb.kicksecure.com [all])
Conf timesanitycheck (3:10.6-1 Kicksecure:deb.kicksecure.com [all])
Conf squashfs-tools (1:4.6.1-1 Debian:13.7/stable [amd64])
Conf apparmor-profiles-kicksecure (3:37.8-1 Kicksecure:deb.kicksecure.com [all])
Conf python3-pyqt6 (6.9.0-2 Debian:13.7/stable [amd64])
Conf setup-dist (3:12.6-1 Kicksecure:deb.kicksecure.com [all])
Conf xz-utils (5.8.1-1+deb13u2 Debian-Security:13/stable-security [amd64])
Conf privleap (3:7.1-1 Kicksecure:deb.kicksecure.com [all])
Conf python3-pyqt6.sip (13.10.0-1+b1 Debian:13.7/stable [amd64])
Conf wget (1.25.0-2 Debian:13.7/stable [amd64])
Conf vm-config-dist (3:18.5-1 Kicksecure:deb.kicksecure.com [all])
Conf usability-misc (3:41.9-1 Kicksecure:deb.kicksecure.com [all])
Conf libqt6test6 (6.8.2+dfsg-9+deb13u2 Debian:13.7/stable [amd64])
Conf tirdad-dkms (0:0.3.5-1 Kicksecure:deb.kicksecure.com [amd64])
Conf dist-vm-cli (3:37.8-1 Kicksecure:deb.kicksecure.com [all])
Conf desktop-config-dist-dependencies (3:19.1-1 Kicksecure:deb.kicksecure.com [all])
Conf rads (3:9.1-1 Kicksecure:deb.kicksecure.com [all])
Conf dummy-dependency-mta (3:37.8-1 Kicksecure:deb.kicksecure.com [all])
Conf bootclockrandomization (3:8.3-1 Kicksecure:deb.kicksecure.com [all])
Conf dist-general-gui-lxqt (3:37.8-1 Kicksecure:deb.kicksecure.com [all])
Conf sysmaint-panel (3:5.6-1 Kicksecure:deb.kicksecure.com [all])
Conf repository-dist (3:14.1-1 Kicksecure:deb.kicksecure.com [all])
Conf dist-general-gui-all (3:37.8-1 Kicksecure:deb.kicksecure.com [all])
Conf sdwdate (3:29.6-1 Kicksecure:deb.kicksecure.com [all])
Conf msgcollector (3:18.1-1 Kicksecure:deb.kicksecure.com [all])
Conf sdwdate-gui (1:15.7-1 Kicksecure:deb.kicksecure.com [all])
Conf anon-gw-base-files (3:8.2-1 Whonix:deb.whonix.org [all])
Conf desktop-config-dist (3:19.1-1 Kicksecure:deb.kicksecure.com [all])
Conf libqt6sql6 (6.8.2+dfsg-9+deb13u2 Debian:13.7/stable [amd64])
Conf tor-control-panel (1:8.8-1 Kicksecure:deb.kicksecure.com [all])
Conf anon-gw-anonymizer-config (3:21.9-1 Whonix:deb.whonix.org [all])
Conf anon-apt-sources-list (3:8.0-1 Kicksecure:deb.kicksecure.com [all])
Conf whonix-base-
[WARNING] [systemcheck] Debian Package Update[1] Check Result: apt-get reports that packages can be updated.
Please update this machine:
Click on the System Maintenance Panel, and click "Install Updates". Alternatively, click "Open Terminal" and run:
upgrade-nonroot
Links:
[1] https://www.whonix.org/wiki/Update
[INFO] [systemcheck] Warrant Canary Check[1]: systemd unit canary not running.
Links:
[1] https://www.whonix.org/wiki/Systemcheck#Warrant_Canary_Check
[INFO] [systemcheck] Please donate!
See: https://www.whonix.org/wiki/Donate
zsh: exit 1 systemcheck --verbose --leak-tests