Orca Screen Reader

From Kicksecure
Jump to navigation Jump to search

Using the Orca Screen Reader in Kicksecure Virtual Machines


Orcaarchive.org is:

...a free, open source, flexible, and extensible screen reader that provides access to the graphical desktop via user-customizable combinations of speech and/or braille. Orca works with applications and toolkits that support the assistive technology service provider interface (AT-SPI), which is the primary assistive technology infrastructure for the Solaris and Linux operating environments.

This documentation has been written by a sighted developer without the input of a blind person for testing purposes. Therefore some written advice might be incorrect, such as instructions concerning the use of sudo vs dsudo. [1]


Install orca. To accomplish that, the following steps A. to D. need to be done.

A. Update the package lists.

sudo apt update

B. Upgrade the system.

sudo apt full-upgrade

C. Install the orca package.

Using apt command line parameter --no-install-recommends is in most cases optional.

sudo apt install --no-install-recommends orca

D. Done.

The procedure of installing orca is complete.

Orca Configuration[edit]


Orca (or any other) screenreader must already be functional on the host operating system. This is unrelated to Kicksecure and outside the scope of this documentation. The user should be familiar and comfortable with the host screenreader.

It is also recommended to learn VirtualBox basics outside of any reference to Kicksecure; that is, using VirtualBox with any other operating system. Otherwise, any blind users simultaneously utilizing VirtualBox and Kicksecure for the first time might face serious challenges.

These instructions have not tested whether the VirtualBox host user interface is itself accessible; this functionality is out of scope.

Bridges Functionality[edit]

Orca was only recently integrated into Kicksecure, therefore support for using Orca in combination with Tor Bridges is not perfect yet -- please post a feature request if that is desirable. Bridge users should refer to the footnote for a workaround. [2]

Initial Setup[edit]

1. Agree to Kicksecure legal terms.

Acknowledge that you have read, understood and agreed to our Terms of Service and License Agreement.

2. Start Kicksecure using the VirtualBox host user interface normally.

Depending on system performance it can take up to three minutes or more until Kicksecure starts, although on fast machines it boots much quicker. On a reasonable fast developer machine, booting either Kicksecure or Kicksecure took approximately 30 seconds.

One issue is that there is no audio feedback when the boot process finishes. This is an optimization problem because Kicksecure was originally designed with privacy in mind. Most Kicksecure users would not want to reveal they are using the platform or otherwise signal they are using an operating system via an audio notification which might be noisy depending on host audio settings.

3. Wait for the boot process to finish.

4. Start the Xfce application finder.

Press the following keys in combination.

Alt + F2

5. Use the easo utility.

easo is spelled e, a, s, o. This is an easy to type abbreviation for easyorca. [3]

Make sure you read, understood and agreed to Kicksecure binary license agreementarchive.org and Kicksecure disclaimerarchive.org before continuing.

Running the easo utility [4] has several effects.

  1. Sets volume inside the virtual machine to 50%. [5]
  2. Starts the Orca screen reader.
  3. Legally accepts Kicksecure binary license agreementarchive.org.
  4. Legally accepts Kicksecure disclaimerarchive.org.
  5. Disables autostart of setup-wizard-dist GUI.
  6. Enables Orca autostart. [6]
  7. Enables the orca-kill-at-shutdown.service systemd service. [7]
  8. Starts Tor connections which results in Tor connecting to the Tor public network. [8]

Type on the keyboard.


And press the Enter key.

6. Wait 10 seconds.

This allows Orca startup and the initial Orca setup to finish.

7. Wait for notification.

There should be an audio notification from Orca stating "screenreader on" -- the initial setup of Orca is complete.

At this time there is no need to re-run the easo utility after next boot. Orca will automatically start after next reboot, followed by an audio notification: "screenreader on".

8. Optional: run systemcheck.

Running systemcheck is recommended, see: systemcheck.


The Orca screen reader is tested as functional in the following applications (non-exhaustive list):

  • Xfce start menu
  • xfce4-terminal
  • Xfce application finder
  • Most common browsers like Firefox, TorBrowser..etc

There are several limitations at present:

  • setup-wizard-dist (GUI) does not work. Use setup-dist CLI on the command line instead. [9]
  • Anon Connection Wizard does not work. This is normally not an issue for public Tor network users, but those requiring bridges could configure these on the command line as documented on the Bridges page.
  • systemcheck GUI (previously called systemcheck) does not work. Use systemcheck CLI on the command line instead. [10] See also: systemcheck.
  • Repository Dist Wizard (GUI) does not work. If needed, use repository-dist (CLI) instead as documented here.


Autostart Orca[edit]

Info This chapter is usually not required because these steps are already automated by easo.

1. Start Xfce application finder.

Press these keys in combination.

Alt + F2

2. Launch a terminal.



And press Enter.

3. Enable Orca autostart.


dsudo orca-enable-autostart

And press Enter. [11] [12]

4. Done.

After reboot, Orca should now automatically start. Once the boot process finishes and Orca has started there will be an audio notification.

Complete setup-dist[edit]

Info This chapter is usually not required because these steps are already automated by easo.

setup-dist-noninteractive is a tool to non-interactively use setup-dist. Menu option 1 enables Tor which results in accessing the public Tor network unless the user previously manually configured Bridges.

If required, run this command on both Kicksecure and Kicksecure only.

dsudo setup-dist-noninteractive 1


The following package dependencies are installed:

  • libatk-adaptor libgail-common - required for Xfce settings menu screen reader support
  • non-qubes-audio - required for adding audio support to Kicksecure
  • gstreamer1.0-plugins-good - missing dependency in Debian busterarchive.org
  • xbrlapi - Recommends: by orca
  • python3-gst-1.0 - Recommends: by orca
  • speech-dispatcher-espeak-ng - required for spd-say test
  • sound-icons - this package might be optional


As at April 2021 the following issues are unresolved:

The following issues have been resolved:


  1. dsudo allows commands to be run as root without entering a password, so long as the default password has not been changed.
  2. First disable the host internet connection and follow these steps: Setup bridgesReconnect host internet connectionMake sure host internet connection is functionalRestart Tor or reboot Kicksecure if not connected yet.
  3. It could not be named easyorca for technical reasons; avoiding the letter y inside easo circumvents issues relating to English versus German keyboard layouts. See: orca --replace should not kill script which is starting itarchive.org.
  4. By running command amixer set Master 50%. 50% was arbitrarily chosen and is hopefully not too quiet / noisy. It can be regulated using the host operating system or physical speaker volume control.
  5. https://github.com/Kicksecure/usability-misc/blob/master/usr/sbin/orca-enable-autostartarchive.org
  6. 7.0 7.1 https://github.com/Kicksecure/usability-misc/blob/master/usr/lib/systemd/system/orca-kill-at-shutdown.servicearchive.org
  7. Using setup-dist(-noninteractive) 1. https://github.com/Kicksecure/setup-dist/blob/master/usr/sbin/setup-dist-noninteractivearchive.org
  8. Run sudo setup-dist in a terminal.
  9. Run systemcheck in a terminal.
  10. This command uses dsudo instead of sudo because commands can be run as root without entering a password, so long as the default password has not been changed. For blind users this is likely far simpler than using sudo and typing the password, especially during the initial setup. See: dsudo for further information.
  11. orca-enable-autostartarchive.org
  12. https://gitlab.gnome.org/GNOME/orca/-/issues/188#note_1027211archive.org

Unfinished: This wiki is a work in progress. Please do not report broken links until this notice is removed, use Search Engines First and contribute improving this wiki.

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!