4.3 debian12 based templates libqrexec-utils update issue

User Support
,
1

if i try to do apt upgrade within template, every time it tries to upgrade libqrexec-utils2 to libqrexec-utils4, qrexec service within the template dies forever and the template becomes unusable.

2

libqrexec has gone through a major protocol upgrade to support Qubes Air. I have discussed this with @marmarek on the Matrix channel.

Assure following these setps:

  1. Having backup of the templates.
  2. Before upgrading individual templates, upgrade qrexec on dom0. This is essential (qubes-core-qrexec, qubes-core-qrexec-dom0, qubes-core-qrexec-libs or update the entire dom0 packages).
  3. Restart the system
  4. Update the individual templates via GUI Updater or qubes-vm-update --targets TemplateVM

p.s.: Even with the above, the update will show some discomforting warnings and errors. I have seen them on the automated OpenQA tests as well. And the template might not switch off its outdated flag after this upgrade. Doing it once more will clear the outdated flag.

3

what are the matching dom0 packages for qubes-core-qrexec and libqrexec-utils4 4.3.7-1 in the template?
are they in main repo?

I am trying to fix liteqube for 4.3, it used to work but now it broke again :frowning:

4

On Fedora systems (the last is not applicable for minimal templates)

qubes-core-qrexec.x86_64            4.3.7-1
qubes-core-qrexec-libs.x86_64       4.3.7-1
qubes-core-qrexec-vm.x86_64         4.3.7-1
qubes-core-qrexec-vm-selinux.x86_64 4.3.7-1

On Debian systems

libqrexec-utils4/unknown,now 4.3.7-1+deb12u1 amd64 [installed,automatic]
python3-qrexec/unknown,now 4.3.7-1+deb12u1 amd64 [installed,automatic]
qubes-core-qrexec-dbgsym/unknown 4.3.7-1+deb12u1 amd64
qubes-core-qrexec/unknown,now 4.3.7-1+deb12u1 amd64 [installed,automatic]

In the r4.3, we have currently only main testing.

5

dom0 says 4.3.5 and apparently they are not compatible :confused: pre-upgrade debian-minimal template says 4.2.19 (sic!).

6

Then upgrading dom0 (and possibly restarting system) is what is needed. It would most probably fix the template which broke after apt upgrade.

7

Just tried updating dom0, no newer packages available.

8

What is the output of this command on your system?

[alimirjamali@dom0 ~]$ sudo dnf list --installed *qrexec*
Installed packages
qubes-core-qrexec.x86_64      4.3.7-1.fc41 qubes-dom0-cached
qubes-core-qrexec-dom0.x86_64 4.3.7-1.fc41 qubes-dom0-cached
qubes-core-qrexec-libs.x86_64 4.3.7-1.fc41 qubes-dom0-cached
9

4.3.5-1.fc41 anaconda

maybe the installation image I used is too old and there is no clean update path so this version got held back
should I try to reinstall the OS from newer image?

10

I do not think so. The update (qrexec protocol bump) happened very recently. Maybe few days ago.

Would you please check the content of /etc/yum.repos.d/qubes-dom0.repo and assure all of the below repos have enabled = 1:

qubes-dom0-current
qubes-dom0-current-testing
qubes-dom0-security-testing
1 Like