3isec-qubes-cacher-1.10-1 breaks Debian/Fedora TemplateVM updates

User Support
, ,
25

For whatever reason, the template-cacher TemplateVM the 3isec-qubes-cacher package created from my debian-12-minimal TemplateVM did not have whatever configuration changes the upgrade-template-standalone.sh implements.

I’m pretty sure when I upgraded from Qubes 4.1.2 to 4.2, Stage 4 (Upgrade templates and standalone VMs to R4.2 repository) did complete without errors, so I’m not sure how or why this is an issue now

  • I discovered this by
    • Reverting the settings in Dom0’s /etc/qubes/policy.d/50-config-updates.policy so that all @type:TemplateVM will update through my sys-net Qube instead of through cacher
    • Reverting the cacher https:// prefix in template-cacher’s apt lists
      sed -i 's^http://HTTPS///^https://^' /etc/apt/sources.list
      sed -i 's^http://HTTPS///^https://^' /etc/apt/sources.list.d/*.list
    • Attempting to run apt update and apt upgrade, which surfaced

      Some packages could not be installed. This may mean that you have
      requested an impossible situation or if you are using the unstable
      distribution that some required packages have not yet been created
      or been moved out of Incoming.
      The following information may help to resolve the situation:
      The following packages have unmet dependencies:
      xen-utils-guest : Conflicts: xen-hypervisor-common but 4.17.3+10-g091466ba55-1~deb12u1 is to be installed
      E: Broken packages

      • Googling the error surfaced this: Update trouble debian 11 → debian 12 in Qubes-OS 4.2, which mentioned Restoring old R4.0 template to R4.2, which pointed to downloading and running upgrade-template-standalone.sh from within the problematic TemplateVM
        • Made it executable and ran it from template-cacher

          • It seemed to do things and completed without any errors

          • I was then able to re-revert the settings in Dom0’s /etc/qubes/policy.d/50-config-updates.policy so that all @type:TemplateVM would resume updating through cacher and re-revert the cacher prefix in template-cacher’s apt lists
            sed -i 's^http://HTTPS///^https://^' /etc/apt/sources.list
            sed -i 's^http://HTTPS///^https://^' /etc/apt/sources.list.d/*.list

          • I was then able to update template-cacher and other debian templates through cacher without any issues

1 Like