qubes-split-browser issues

[taran1s]

I have installed and enabled the qubes-split-browser. I would like to
check if the behavior of the qubes-split-browser is as intended.

My surfer VM is based on Fedora-32, with networking disabled. Its
disp-VM is set to whonix-ws-15-disp, that itself is based on whonix-ws-15.

In the surfer VM I open the Split Browser (TB Security level: Safest).
This is what happens:

- TB opens up in disp-VM whonix-ws-15-disp. The welcome page is not
Whonix Welcome Page as normally when I open the TB in the disp VM
directly, but instead it opens up the About Tor welcome page. Is this
intended?

- TB opens up in the Security Level: Standard, instead of Safest, as
mentioned in the name of the link (Split Browser (TB Security level:
Safest). It should open up in the Safest I guess?

- once I close the TB, the disp VM remains active and needs to be
stopped manually. Normally, if I launch TB in the whonix-ws-15-disp
directly, and than close that TB, whole disp VM gets killed by itself.
How can I set the qubes-split-browser to kill the whole disp VM once the
TB is closed?

- At the end, if I save a bookmark in the disp VM TB, launched from the
surfer VM, the bookmark doesnt survive the killing of the disp VM and is
not available from the another disp VM launched from the surfer VM.

This behavior is the same if I execute split-browser in the terminal, or
through the GUI as Split Browser or as Split Browser (TB Security level:
Safest). Can anyone help me with the setup?

[Rusty Bird]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

taran1s:

> - TB opens up in disp-VM whonix-ws-15-disp.

In a VM named like disp1234 though, right?

> The welcome page is not Whonix Welcome Page as normally when I open
> the TB in the disp VM directly, but instead it opens up the About
> Tor welcome page. Is this intended?

Yes, so far so good.

I've configured about:tor as the homepage, because Tor Browser has
been plagued by a bunch of obscure bugs on first startup (which should
be every startup for DisposableVMs) when it's blank or a file:// URL.

> - TB opens up in the Security Level: Standard, instead of Safest, as
> mentioned in the name of the link (Split Browser (TB Security level:

> Safest). [...]

>
> - once I close the TB, the disp VM remains active and needs to be
> stopped manually.

Those two are strange. Anything interesting in 'sudo journalctl' on
the DisposableVM?

> - At the end, if I save a bookmark in the disp VM TB, launched from
> the surfer VM, the bookmark doesnt survive the killing of the disp
> VM and is not available from the another disp VM launched from the
> surfer VM.

Did you use the hotkeys? Ctrl-d to save a persistent bookmark, and
Alt-b to open the persistent bookmarks list. Other methods (like
clicking the star outline in the address bar, etc.) unfortunately
won't work.

> This behavior is the same if I execute split-browser in the
> terminal, or through the GUI as Split Browser or as Split Browser
> (TB Security level: Safest).

So 'split-browser --safest' also opens up on Standard?

Hmm, maybe try with a freshly created DisposableVM template instead of
whonix-ws-15-disp? I'm definitely interested in debugging this.

Rusty
-----BEGIN PGP SIGNATURE-----
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=UTUB
-----END PGP SIGNATURE-----

[taran1s]

Rusty Bird:

> taran1s:
>> - TB opens up in disp-VM whonix-ws-15-disp.
>
> In a VM named like disp1234 though, right?

Right.

>
>> The welcome page is not Whonix Welcome Page as normally when I open
>> the TB in the disp VM directly, but instead it opens up the About
>> Tor welcome page. Is this intended?
>
> Yes, so far so good.
>
> I've configured about:tor as the homepage, because Tor Browser has
> been plagued by a bunch of obscure bugs on first startup (which should
> be every startup for DisposableVMs) when it's blank or a file:// URL.
>
>> - TB opens up in the Security Level: Standard, instead of Safest, as
>> mentioned in the name of the link (Split Browser (TB Security level:
>> Safest). [...]
>
>> - once I close the TB, the disp VM remains active and needs to be
>> stopped manually.
>
> Those two are strange. Anything interesting in 'sudo journalctl' on
> the DisposableVM?

Can you navigate me how to open the terminal in the active dispvm please?

>
>> - At the end, if I save a bookmark in the disp VM TB, launched from
>> the surfer VM, the bookmark doesnt survive the killing of the disp
>> VM and is not available from the another disp VM launched from the
>> surfer VM.
>
> Did you use the hotkeys? Ctrl-d to save a persistent bookmark, and
> Alt-b to open the persistent bookmarks list. Other methods (like
> clicking the star outline in the address bar, etc.) unfortunately
> won't work.

Yes I did. Clicking ctrl-d saves the bookmark with blue Saved to
library! popup in the active TB dispVM. alt-b opens up the bookmarks
menu and I can see the bookmark. It doesn't but survive the reboot.

>
>> This behavior is the same if I execute split-browser in the
>> terminal, or through the GUI as Split Browser or as Split Browser
>> (TB Security level: Safest).
>
> So 'split-browser --safest' also opens up on Standard?

Both open on Standard and don't kill the dispvm once switched off. It

needs to be stopped manually.

>

> Hmm, maybe try with a freshly created DisposableVM template instead of
> whonix-ws-15-disp? I'm definitely interested in debugging this.
>
> Rusty
>
>

--

Kind regards
taran1s

gpg: 12DDA1FE5FB39C110F3D1FD5A664B90BD3BE59B3

[Rusty Bird]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

taran1s:

> Rusty Bird:

> > Anything interesting in 'sudo journalctl' on
> > the DisposableVM?
>
> Can you navigate me how to open the terminal in the active dispvm please?

In the Domains Widget (system tray Q button), there's 'Run Terminal'
inside the disp1234 submenu.

The logs in the *persistent* VM would be relevant too:

journalctl -t qubes.StartApp+split-browser-dom0 \
-t qubes.StartApp+split-browser-safest-dom0

> > > - At the end, if I save a bookmark in the disp VM TB, launched from
> > > the surfer VM, the bookmark doesnt survive the killing of the disp
> > > VM and is not available from the another disp VM launched from the
> > > surfer VM.
> >
> > Did you use the hotkeys? Ctrl-d to save a persistent bookmark, and
> > Alt-b to open the persistent bookmarks list. Other methods (like
> > clicking the star outline in the address bar, etc.) unfortunately
> > won't work.
>
> Yes I did. Clicking ctrl-d saves the bookmark with blue Saved to library!
> popup in the active TB dispVM. alt-b opens up the bookmarks menu and I can
> see the bookmark. It doesn't but survive the reboot.

Ah, for some reason the hotkeys aren't intercepted. Can you start a
new Split Browser, and post the full contents of Tor Browser's Browser
Console? (Ctrl-Shift-j)

Rusty
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEEhLWbz8YrEp/hsG0ERp149HqvKt8FAmAewjxfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDg0
QjU5QkNGQzYyQjEyOUZFMUIwNkQwNDQ2OUQ3OEY0N0FBRjJBREYACgkQRp149Hqv
Kt9wrxAAi4flIxX5ZgSBtW7J8Reo+3CraHaBOyP5jbFu3NyToEn0IshH+Juj9sK3
7+Zuhi6XADMHv6+vT6d0Glb5D3wkP7DE7dMr1tEU2ByJSgOIUB3kQUXiAyoiiMc/
cTEqw06GZwnNNobNVuT7Qc8/VXdLzAZhvmJFgjMpG44leyH9nVn+UDF/v6QpHaLV
jmONk5nbip1HDIFS80EFHnD8oi3gDFrovte5hKLis41EuKeGYNTsFJXmBsnSo3qX
5WyBdyk8vrvbnS8/ELW5ubTXcc42X1syTaR9GW4NeAXLdNBSzYEwCl0kJKAnXcz0
8hYTUNsem11I20BKFYEm7X4LYMfCvl2v3/Ol6wteEA4XBRpHM8Xu4DnIUQHZtkTi
vD50h3KYr7/C+OzvkMN/hlsy0PdCPbYUafrVZPs0EuXuaIDug9cldBrIkGD00M9g
CDGC4JyDgEtp0/upiFVdgvCEfYqp/t7zLJ35uc/wdjYQhJcdWOWys9O9koqbm8Bf
4kMrbk/y+ErTiXqX1yUhHVWhC9zmyjvOs2js55/o6BzJ4WUHjLzZbhMZtNEkdRFz
RB4BSb/RZHtPYlPG4vlmwTcSLwMDjJIJf1xedT+cPU8Z6BlE1jZ1Xy7Re1YodasP
S87zGRDLltbbYnnmdBDKzVKFBUAmyrCgxePXDmvgNjqqq15uiOw=
=tfYj
-----END PGP SIGNATURE-----

[taran1s]

Rusty Bird:

> taran1s:
>> Rusty Bird:
>>> Anything interesting in 'sudo journalctl' on
>>> the DisposableVM?
>
>> Can you navigate me how to open the terminal in the active dispvm please?
>
> In the Domains Widget (system tray Q button), there's 'Run Terminal'
> inside the disp1234 submenu.

Sorry, in the Domains Widget there is no active disp12... available. I
can see the dispvm only in the Qube Manager.

>
> The logs in the *persistent* VM would be relevant too:
>
> journalctl -t qubes.StartApp+split-browser-dom0 \
> -t qubes.StartApp+split-browser-safest-dom0



>
>>>> - At the end, if I save a bookmark in the disp VM TB, launched from
>>>> the surfer VM, the bookmark doesnt survive the killing of the disp
>>>> VM and is not available from the another disp VM launched from the
>>>> surfer VM.
>>>
>>> Did you use the hotkeys? Ctrl-d to save a persistent bookmark, and
>>> Alt-b to open the persistent bookmarks list. Other methods (like
>>> clicking the star outline in the address bar, etc.) unfortunately
>>> won't work.
>
>> Yes I did. Clicking ctrl-d saves the bookmark with blue Saved to library!
>> popup in the active TB dispVM. alt-b opens up the bookmarks menu and I can
>> see the bookmark. It doesn't but survive the reboot.
>
> Ah, for some reason the hotkeys aren't intercepted. Can you start a
> new Split Browser, and post the full contents of Tor Browser's Browser
> Console? (Ctrl-Shift-j)

split-browser-safest

[02-08 11:25:56] Torbutton NOTE: Initializing security-prefs.js
[02-08 11:25:56] Torbutton NOTE: security-prefs.js initialization complete
Content Security Policy: Couldn’t parse invalid host 'wasm-eval'
[Exception... "Component returned failure code: 0x80520001
(NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]"
nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location:
"JS frame :: resource://gre/modules/L10nRegistry.jsm ::
L10nRegistry.loadSync :: line 661" data: no] 14 L10nRegistry.jsm:661:19
Bootstrapped manifest not allowed to use 'resource' directive.
chrome.manifest:2
Content Security Policy: Couldn’t parse invalid host 'wasm-eval'
[Exception... "Component returned failure code: 0x80520001
(NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]"
nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location:
"JS frame :: resource://gre/modules/L10nRegistry.jsm ::
L10nRegistry.loadSync :: line 661" data: no] L10nRegistry.jsm:661:19
Content Security Policy: Couldn’t parse invalid host 'wasm-eval'
[Exception... "Component returned failure code: 0x80004001
(NS_ERROR_NOT_IMPLEMENTED) [nsIAppStartup.secondsSinceLastOSRestart]"
nsresult: "0x80004001 (NS_ERROR_NOT_IMPLEMENTED)" location: "JS frame
:: resource:///modules/BrowserGlue.jsm ::
_collectStartupConditionsTelemetry :: line 1743" data: no]
BrowserGlue.jsm:1743:9
Error: setevents stream -> 510 Command filtered tor-control-port.js:237:19
[02-08 11:25:59] Torbutton NOTE: no SOCKS credentials found for current
document.
Unchecked lastError value: Error: Could not establish connection.
Receiving end does not exist. store.js:135
a11y.sitezoom - Unknown scalar.
[02-08 11:26:02] Torbutton WARN: Your Tor Browser is out of date.
Key event not available on GTK2: key=“u” modifiers=“accel shift”
id=“torbutton-new-identity-key” browser.xhtml
Key event not available on some keyboard layouts: key=“r”
modifiers=“accel,alt” id=“key_toggleReaderMode” browser.xhtml
Key event not available on some keyboard layouts: key=“i”
modifiers=“accel,alt,shift” id=“key_browserToolbox” browser.xhtml

[Rusty Bird]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

taran1s:

> Rusty Bird:
> > taran1s:
> > > Rusty Bird:
> > > > Anything interesting in 'sudo journalctl' on
> > > > the DisposableVM?
> >
> > > Can you navigate me how to open the terminal in the active dispvm please?
> >
> > In the Domains Widget (system tray Q button), there's 'Run Terminal'
> > inside the disp1234 submenu.
>
> Sorry, in the Domains Widget there is no active disp12... available. I can
> see the dispvm only in the Qube Manager.

Are you maybe confusing the Domains widget (Q on the upper right of
the screen - next to the Clipboard widget, Devices widget, etc.) with
the Applications button (Q on the upper left corner)?

Qube Manager can also open a terminal: Right click on disp1234, "Run
command in qube", enter "qubes-run-terminal".

Once you've got a terminal in the DisposableVM, can you please also
post (after the Tor Browser window has appeared) the full contents of:

/home/user/.tb/tor-browser/Browser/sb.js
/home/user/.tb/tor-browser/Browser/defaults/pref/sb-load.js

And the output of:

ps -efH | grep -i browser

> > The logs in the *persistent* VM would be relevant too:
> >
> > journalctl -t qubes.StartApp+split-browser-dom0 \
> > -t qubes.StartApp+split-browser-safest-dom0

> > Ah, for some reason the hotkeys aren't intercepted. Can you start a
> > new Split Browser, and post the full contents of Tor Browser's Browser
> > Console? (Ctrl-Shift-j)
>
> split-browser-safest
>
> [02-08 11:25:56] Torbutton NOTE: Initializing security-prefs.js

> [...]

Unremarkable log spam except for this^ line: Somehow the Split Browser
prefs from sb.js (which would disable Torbutton's broken update check)
aren't being applied.

> Key event not available on GTK2: key=“u” modifiers=“accel shift”
> id=“torbutton-new-identity-key” browser.xhtml
> Key event not available on some keyboard layouts: key=“r”
> modifiers=“accel,alt” id=“key_toggleReaderMode” browser.xhtml
> Key event not available on some keyboard layouts: key=“i”
> modifiers=“accel,alt,shift” id=“key_browserToolbox” browser.xhtml

Rusty
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEEhLWbz8YrEp/hsG0ERp149HqvKt8FAmAhQlBfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDg0
QjU5QkNGQzYyQjEyOUZFMUIwNkQwNDQ2OUQ3OEY0N0FBRjJBREYACgkQRp149Hqv
Kt+v9Q//Xvl8KgoG0J8P9hxyAOSdQWnH3yOLqhBHkF7PO7LVAiJkSt+0YXtDLPy/
jjp8SAkgix2RCJyUG29mDszEvJjOrOYLHXIKDG8dmhKRWfD4QvWB1cw7a2eZAhdh
H0jOGVACYI4UZ9W87/apxTnexx9vs8cvcSORMoxwsJg4spRWTj4RvaTxMTHyVTjc
v7kT9JzTRznaG96n78yUlM/+aCY/UWcHmDASwY0eoHJGzrnNO82NURx1h+K9P+Tp
F1GA+8UBO8k02stWpFmoRhjz4JBYTWtzgaXhe063Y2MsZD2ERu+Y7lXz+Iy3bPjE
G5cF86CBQQklCSqxA6Ih9cBwY6qw35se6BFzIm8ldLbe/kYGNnnfjZMJli3MpJky
vcBfkGIoyAMs2GQibDkQm0+EEJtjsmCzK9nLMdf2eR91Bw+I1ti19+ZMB6D0LKQB
3ALE3PK5tu93AenOi8WC/hWI0aPe3a4xoDu8T1Mgd3JyhsMEcsHtxYC3zttKOGo/
4jtDB+hx8m/YJfvJqVr2d+GoE6rUOa8vLIFiL7oILAikZkQ5BdTqTPCexSzTLeyp
csmXRhtaAgfYfK1pxEjAuEl0vUw8nfrEUC0hvWQawmXZElWiN4aWO5Q+GJpm4edg
AUpPvCWl+a9DwfRhPASv/fGmQpHbwnZOTNudwYDMGJ6sS9N39jY=
=a6Sl
-----END PGP SIGNATURE-----