I built new Arch templates today, which are available from
https://qubes.3isec.org.
There are Template packages for 4.0 and 4.1 , and they are signed with
my PGP key. There are (rough) instructions but if anyone needs help, ask
away.
I’ve also updated the available packages until we get the official Qubes
repositories in place. (Those haven’t been updated for some months.).
The repositories are at https://qubes.3isec.org/arch/4.0 and arch/4.1
All my templates, packages and repositories are signed with
my Qubes Signing key - you can get this from any keyserver. You
should check this against other sources - the Qubes-Users mailing list,
GitHub, maybe another
keyserver over Tor.
You should do something like this, in a Fedora based disposableVM:
Download the template from https://qubes.3isec.org/
Once you have downloaded and confirmed my “Qubes OS signing key”, add it to
your rpm keyring:
sudo rpm --import <downloaded_key>
Check the signature on the template:
rpm -K <Template_file>
If all is well you will see “digests signatures OK”
Once you are satisfied, install the Template.
To do this you will need to copy it to dom0. In dom0 run:
qvm-run -p <qube> 'cat <location of template> ' > archtemplate
Replace with the name of the qube where you downloaded the
Template package, and with the path to the
package file.
Then install, in dom0 :
sudo dnf install archtemplate