Cannot Update Template Through VPN Proxy

Just noticed.
Disable updates-proxy-setup service for vpn-firewall. This service should be enabled for templates but not for UpdateVM:

  1. qubes-updates-proxy (and its deprecated name: qubes-yum-proxy ) - a service providing a proxy for templates - by default enabled in NetVMs (especially: sys-net)
  2. updates-proxy-setup (and its deprecated name: yum-proxy-setup ) - use a proxy provided by another VM (instead of downloading updates directly), enabled by default in all templates

OK, so I switched all my qubes back to fedora and was able to update the Fedora template without issues. The issue is with Debian 10 somewhere. I tried disabling updates-proxy-setup in vpn-firewall and enabling it in services on debian 10 template, no luck. I am trying to install a new template using

$ sudo qubes-dom0-update qubes-template-<DISTRO_NAME>-<RELEASE_NUMBER>

but it is trying to download through sys-net :unamused: so it must be using another config file I need to change for this to work.

You need to change dom0 update qube in Qubes Global Settings.

1 Like

What you might want to do is you should upgrade to 4.1 because 4.0 EOL is August 4th this year, not to speak about fedora-32 and debian-10.

1 Like

Thank you everyone for your help! You were all so responsive and helpful! Will do enmus. I think I figured it out, my solution was to install Debian 11 template and I was able to update this with update proxy through vpn. I think Debian 10 was just so old it lacked whatever was needed to update. I might make a guide at some point for first time users to set up with a VPN if they want, it was a bit rough (it only took a couple weeks) but everything is working now.