-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Sun, Jun 12, 2022 at 03:40:17PM -0400, Steve Coleman wrote: > On 6/12/22 12:35, Viktor Ransmayr wrote: > > Hello Demi, > > > > Am So., 12. Juni 2022 um 18:18 Uhr schrieb Demi Marie Obenour > > <d...@invisiblethingslab.com>: > > > > > > What is the contents of /etc/yum.repos.d in your fedora-34 > > template? > > > > You might have repositories pointing at the R4.0 repos. > > > > > > Here's the content: > > > > > > [user@fedora-34 ~]$ > > > [user@fedora-34 ~]$ cd /etc/yum.repos.d > > > [user@fedora-34 yum.repos.d]$ ls -all > > > total 68 > > > drwxr-xr-x 2 root root 4096 May 20 21:05 . > > > drwxr-xr-x 114 root root 12288 Jun 12 17:11 .. > > > -rw-r--r-- 1 root root 183 Oct 2 2021 > > adobe-linux-x86_64.repo > > > -rw-r--r-- 1 root root 728 Apr 28 2021 > > fedora-cisco-openh264.repo > > > -rw-r--r-- 1 root root 1344 Apr 28 2021 > > fedora-updates-testing.repo > > > -rw-r--r-- 1 root root 1286 Apr 28 2021 fedora-updates.repo > > > -rw-r--r-- 1 root root 1239 Apr 28 2021 fedora.repo > > > -rw-r--r-- 1 root root 191 Oct 2 2021 google-chrome.repo > > > -rw-r--r-- 1 root root 1483 May 5 02:00 qubes-r4.repo > > > -rw-r--r-- 1 root root 1324 Oct 2 2021 > > > rpmfusion-free-updates-testing.repo > > > -rw-r--r-- 1 root root 1264 Oct 2 2021 > > rpmfusion-free-updates.repo > > > -rw-r--r-- 1 root root 1248 Oct 2 2021 rpmfusion-free.repo > > > -rw-r--r-- 1 root root 1369 Oct 2 2021 > > > rpmfusion-nonfree-updates-testing.repo > > > -rw-r--r-- 1 root root 1309 Oct 2 2021 > > > rpmfusion-nonfree-updates.repo > > > -rw-r--r-- 1 root root 1312 Oct 2 2021 > > rpmfusion-nonfree.repo > > > [user@fedora-34 yum.repos.d]$ > > > > > > With kind regards, > > > > Can you check that qubes-r4.repo points to the R4.1 repository and not > > the R4.0 repository? The symptoms you are describing are consistent > > with it pointing to the R4.0 repository. > > > > > > Here's the content of this file: > > > > [user@fedora-34 yum.repos.d]$ > > [user@fedora-34 ~]$ cd /etc/yum.repos.d > > [user@fedora-34 yum.repos.d]$ cat qubes-r4.repo > > [qubes-vm-r4.0-current] > > name = Qubes OS Repository for VM (updates) > > baseurl = https://yum.qubes-os.org/r4.0/current/vm/fc$releasever > > #baseurl = > > http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/current/vm/fc$releasever > > gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4-primary > > skip_if_unavailable=False > > gpgcheck = 1 > > enabled=1 > > > > [qubes-vm-r4.0-current-testing] > > name = Qubes OS Repository for VM (updates-testing) > > baseurl = https://yum.qubes-os.org/r4.0/current-testing/vm/fc$releasever > > #baseurl = > > http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/current-testing/vm/fc$releasever > > gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4-primary > > skip_if_unavailable=False > > gpgcheck = 1 > > enabled=0 > > > > [qubes-vm-r4.0-security-testing] > > name = Qubes OS Repository for VM (security-testing) > > baseurl = https://yum.qubes-os.org/r4.0/security-testing/vm/fc$releasever > > #baseurl = > > http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/security-testing/vm/fc$releasever > > gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4-primary > > skip_if_unavailable=False > > gpgcheck = 1 > > enabled=0 > > > > [qubes-vm-r4.0-unstable] > > name = Qubes OS Repository for VM (unstable) > > baseurl = https://yum.qubes-os.org/r4.0/unstable/vm/fc$releasever > > #baseurl = > > http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/unstable/vm/fc$releasever > > gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4-unstable > > gpgcheck = 1 > > enabled=0 > > > > [user@fedora-34 yum.repos.d]$ > > > > You were right - but - I have no clue what went wrong & what to do next > > ... > > > > With kind regards, > > It looks to me like your template is a 4.0 Template regardless of the fedora > revision. > > Here is what I would do: > > 1) Download a R4.1 fedora-35 template rpm here: > > https://ftp.qubes-os.org/repo/yum/r4.1/templates-itl/rpm/qubes-template-fedora-35-4.0.6-202205081759.noarch.rpm > > 2) The rpm needs to be moved someplace where dom0 can install it. > > 3) dom0> sudo dnf install /path/to/template.rpm > > or sudo rpm -i /path/to/template.rpm > > 4) Update the template first to get all the current security patches > > 5) switch sys-firewall to use the new template and restart sys-firewall > > 6) Then use qvm-template to retrieve any other templates you need for R4.1 > usage.
That’s not a good idea. For one, it is insecure. This could be fixed with appropriate uses of rpmcanon and rpmkeys -K, but it is much simpler to just fix the repo file. The R4.1 packages will then install over the R4.0 ones. - -- Sincerely, Demi Marie Obenour (she/her/hers) Invisible Things Lab -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEdodNnxM2uiJZBxxxsoi1X/+cIsEFAmKmVHsACgkQsoi1X/+c IsFJExAAuvjlsXLTlDCcmB6dSCl9gT95KmZKT8jPuXl3RL+Y2d24jOhdvdVcCtpH 9VZGOCuilKxv/lR0KjfEXfs8sH7PEcN1Y996Vb2+IUhkUxyYbCi2J7kRkmNYbaVh aJlCP4xkxZEfG8ryEFSt6XWOaO0Owb3oPhA+RFa99T3gtRwTs33O2s1+jlsbsQtT TMlrRyP6tMFhKmp8jRs+88JYoAFyqmX0w+T+tAYkuUgUHL3CGJuUVtkGLEC3re6/ +LtsvpyQ57X/2nT3Y7O4K4gZtIlRVNIogUEvLtNrz5EgMiFC6C3pZVaZhXrXwtSe 7GcaBsH4cRoHGQz6OB+1KznZmDoi2+8Hem/vE/jNNkYFMxRW5Wk1rN6STvw9jKVp BUzGk2rtwzpYjrZhPSuU4vjVygnAEhCcLXahkdasnn2Tg1CeNSM7onF9TDYDHPhU eIxs79hb5w9WmMMuc+1bVgB4A1wu/ev8fAfJSr4x1jzo4rfNMzaPDaNfdeMmqH/3 K3EflFnO0r9R/ko7c8wMo5HUddKja9RElGEgzs8fV94LYGHmEfqgMQlSyS+EzCdC DUVsZ2lsURHGh9n8xc+brnSptJb4tiTtDilbnGu4OR67vt1ZHXz3zNSEg3LCFRIj cyXrAeq7tJINW0tFHp0KHWB9No8h4KhvZxKdbGKGtxaeYL8R3LU= =cdDa -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/YqZUfCHQCTT8jUCM%40itl-email.
