I was able to download and install Debian 11 and Debian 11 Minimal today without specifying the testing repository. They are coming from the qubes-templates-itl repository.
These commands work from dom0 now:
sudo qubes-dom0-update qubes-template-debian-11
sudo qubes-dom0-update qubes-template-debian-11-minimal
Good question. It’s also a bit unclear to me:
https://github.com/QubesOS/qubes-issues/issues/6865#issuecomment-970233073
I see this issue has been closed on GitHub. However, I’m running into issues with in-place upgrades of Debian 10 → 11. The templates installed from dom0 don’t seem to have problems, but upgrading existing Debian 10 templates does.
This happens on R4.0.4
Following the in-place upgrade instruction on the Qubes site for Bullseye, if I select the default (N) for Configuration file '/etc/apt/sources.list.d/qubes-r4.list' I get issues with LOCALE
Configuration file '/etc/apt/sources.list.d/qubes-r4.list'
==> Modified (by you or by a script) since installation.
==> Package distributor has shipped an updated version.
What would you like to do about it ? Your options are:
Y or I : install the package maintainer's version
N or O : keep your currently-installed version
D : show the differences between the versions
Z : start a shell to examine the situation
The default action is to keep your current version.
*** qubes-r4.list (Y/I/N/O/D/Z) [default=N] ?
Removed /etc/systemd/system/default.target.wants/haveged.service.
Removed /etc/systemd/system/sysinit.target.wants/haveged.service.
Created symlink /etc/systemd/system/sysinit.target.wants/haveged.service → /lib/ systemd/system/haveged.service.
Leaving 'diversion of /etc/init/plymouth-shutdown.conf to /etc/init/plymouth-shu tdown.conf.qubes-disabled by qubes-core-agent'
Leaving 'diversion of /etc/init/prefdm.conf to /etc/init/prefdm.conf.qubes-disab led by qubes-core-agent'
Leaving 'diversion of /etc/init/splash-manager.conf to /etc/init/splash-manager. conf.qubes-disabled by qubes-core-agent'
Leaving 'diversion of /etc/init/start-ttys.conf to /etc/init/start-ttys.conf.qub es-disabled by qubes-core-agent'
Leaving 'diversion of /etc/init/tty.conf to /etc/init/tty.conf.qubes-disabled by qubes-core-agent'
Leaving 'diversion of /etc/init/serial.conf to /etc/init/serial.conf.qubes-orig by qubes-core-agent'
qubes-sync-time.service is a disabled or a static unit, not starting it.
qubes-update-check.service is a disabled or a static unit, not starting it.
Setting up imagemagick (8:6.9.11.60+dfsg-1.3) ...
Setting up libclutter-1.0-0:amd64 (1.26.4+dfsg-2) ...
Setting up libclutter-imcontext-0.1-0:amd64 (0.1.4-3.1) ...
Setting up libclutter-imcontext-0.1-bin (0.1.4-3.1) ...
Setting up tasksel-data (3.68) ...
Setting up tasksel (3.68) ...
locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_MESSAGES to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for libglib2.0-0:amd64 (2.58.3-2+deb10u3) ...
Processing triggers for libc-bin (2.31-13+deb11u2) ...
Setting up qubes-gui-agent (4.0.38-1+deb11u1) ...
Setting up qubes-usb-proxy (1.1.1+deb11u1) ...
Setting up qubes-core-agent-networking (4.0.63-1+deb11u1) ...
Setting up qubes-vm-dependencies (4.0.12-1+deb11u1) ...
Setting up tracker-extract (2.3.5-2.1) ...
Created symlink /etc/systemd/user/default.target.wants/tracker-extract.service → /usr/lib/systemd/user/tracker-extract.service.
Setting up tracker-miner-fs (2.3.5-2.1) ...
Created symlink /etc/systemd/user/default.target.wants/tracker-miner-fs.service → /usr/lib/systemd/user/tracker-miner-fs.service.
Processing triggers for dictionaries-common (1.28.4) ...
locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_MESSAGES to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
Processing triggers for ca-certificates (20210119) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Processing triggers for dbus (1.12.20-2) ...
W: Operation was interrupted before it could finish
I am able to proceed successfully to sudo apt dist-upgrade. Upon restarting the Deb 11 template I get Warning: couldn't set locale. in the terminal before the prompt.
If I select Y or I here:
Configuration file '/etc/apt/sources.list.d/qubes-r4.list'
==> Modified (by you or by a script) since installation.
==> Package distributor has shipped an updated version.
What would you like to do about it ? Your options are:
Y or I : install the package maintainer's version
N or O : keep your currently-installed version
D : show the differences between the versions
Z : start a shell to examine the situation
The default action is to keep your current version.
*** qubes-r4.list (Y/I/N/O/D/Z) [default=N] ?
Then at sudo apt dist-upgrade the template will crash and close. I am unable to open a terminal or do anything with the template after that. This happens with in-place upgrades of Debian 11 full and minimal templates.
The problem is that Debian gives the default “N”, which in general might be sensible but in this specific case of course is not.
qubes-r4.list is the file that contains the repository URLs. If this is not updated (“Y”) you are pulling from the wrong repositories. I don’t know if it’s even possible to change this default.
@unman can this be fixed or shall I prepare a PR for the documentation that tells users to select “Y” when seeing the above prompt? (sorry for not catching this when testing)
What is this supposed to contain?
I’d like to try manually adjusting the list.
This what is the default on my freshly installed Debian 11(note that it is on Qubes 4.0, not 4.1):
Main qubes updates repository
deb [arch=amd64] https://deb.qubes-os.org/r4.0/vm bullseye main
#deb-src https://deb.qubes-os.org/r4.0/vm bullseye main
# Qubes updates candidates repository
#deb [arch=amd64] https://deb.qubes-os.org/r4.0/vm bullseye-testing main
#deb-src https://deb.qubes-os.org/r4.0/vm bullseye-testing main
# Qubes security updates testing repository
#deb [arch=amd64] https://deb.qubes-os.org/r4.0/vm bullseye-securitytesting main
#deb-src https://deb.qubes-os.org/r4.0/vm bullseye-securitytesting main
# Qubes experimental/unstable repository
#deb [arch=amd64] https://deb.qubes-os.org/r4.0/vm bullseye-unstable main
#deb-src https://deb.qubes-os.org/r4.0/vm bullseye-unstable main
Afaik it used to come with the onion repositories as well, so you could just uncomment those lines but now it doesn’t.
UPDATE: Nevermind, it appears I missed the second part of the file, here it is:
# Qubes Tor updates repositories
# Main qubes updates repository
#deb [arch=amd64] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/vm bullseye main
#deb-src tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/vm bullseye main
# Qubes updates candidates repository
#deb [arch=amd64] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/vm bullseye-testing main
#deb-src tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/vm bullseye-testing main
# Qubes security updates testing repository
#deb [arch=amd64] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/vm bullseye-securitytesting main
#deb-src tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/vm bullseye-securitytesting main
# Qubes experimental/unstable repository
#deb [arch=amd64] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/vm bullseye-unstable main
#deb-src tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/vm bullseye-unstable main
EDIT: When updating over sys-whonix, it doesn’t understand “tor+http”, if you remove the “tor+” part of the URL, it works.