Another non-perfection not easy to perfect.
non-qubes-whonix-(gateway|workstation)-(cli|kde|xfce) is neither by name a VM specific or VM unspecific package. Due to majority Whonix use case it defaults to VM specific.
Not easy to perfect without a lot code duplication / more package maintenance.
non-qubes-vm-enhancements-cli gets installed by default even for physically isolated (RPi) builds since it’s a dependency of
non-qubes-vm-enhancements-cli should become a
weak recommended package? Similar to how
spice-vdagent? To keep it installed for users who already have it
whonix-legacy/debian/whonix-legacy.preinst could use
apt-mark auto non-qubes-vm-enhancements-cli || true