Note:

I'm creating this to have something to easily link to when whonix 18 sudo/permissions questions are asked. Feel free to make corrections/suggestions especially for best practices.

The whonix documentation suggests sysmaint but that causes all kinds of issues when you want to make the change in user not sysmaint. Sysmaint seems to be for updating mostly. I'd like to know the best practice for when you want to install an application in a whonix 18 ws appVM, or mount a USB drive, or unlock luks drive.

++++

START GUIDE

Whonix 18 has removed the previous behaviour where a user could sudo easily. Now you either need to start a terminal with root/sysmaint or revert back to the old setting.

In dom0

qvm-run -u root (name of whonix VM) xterm

qvm-run -u sysmaint (name of whonix VM) xterm

Or

Use these instructions to revert back to the setting from 17.

https://www.kicksecure.com/wiki/Unrestricted_admin_mode

+++

Links

https://www.kicksecure.com/wiki/Sysmaint

https://forum.qubes-os.org/t/whonix-workstatuion-17-cant-use-sudo-permission-denied-sudo-on-brand-new-template/34048/2

https://forum.qubes-os.org/t/whonix-workstatuion-17-cant-use-sudo-permission-denied-sudo-on-brand-new-template/34048/9