On 4.1 for the past few days debian-11, whonix-gw-16, and whonix-ws-16 not updating though it worked fine earlier. Fedora-38 and dom0 are updating fine too. Error listed as “Failed to return clean data ” for all three templates.
adw
August 29, 2023, 2:46am
2
It’s probably this known bug:
opened 02:02PM - 20 Aug 23 UTC
T: bug
P: blocker
C: mgmt
C: Fedora
C: Debian/Ubuntu
needs diagnosis
C: updates
affects-4.1
[How to file a helpful issue](https://www.qubes-os.org/doc/issue-tracking/)
#… ## Qubes OS release
4.1
### Brief summary
Updating Debian-11 based templates/qubes with salt results in a salt error about `urllib3.util.ssl_match_hostname` not being found.
### Steps to reproduce
- Open a dom0 terminal
- Update with the following command:
- `qubesctl --show-output --skip-dom0 --targets debian-11 state.apply update.qubes-vm`
### Expected behavior
Template/qubes based on debian-11 update without issues
### Actual behavior
Salt return an error:
```
Traceback (most recent call last):
File "/var/tmp/.root_dd8a91_salt/salt-call", line 27, in <module>
salt_call()
File "/var/tmp/.root_dd8a91_salt/pyall/salt/scripts.py", line 438, in salt_call
import salt.cli.call
File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/call.py", line 3, in <module>
import salt.cli.caller
File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/caller.py", line 12, in <module>
import salt.channel.client
File "/var/tmp/.root_dd8a91_salt/pyall/salt/channel/client.py", line 13, in <module>
import salt.crypt
File "/var/tmp/.root_dd8a91_salt/pyall/salt/crypt.py", line 26, in <module>
import salt.payload
File "/var/tmp/.root_dd8a91_salt/pyall/salt/payload.py", line 12, in <module>
import salt.loader.context
File "/var/tmp/.root_dd8a91_salt/pyall/salt/loader/__init__.py", line 23, in <module>
import salt.utils.event
File "/var/tmp/.root_dd8a91_salt/pyall/salt/utils/event.py", line 67, in <module>
import salt.ext.tornado.iostream
File "/var/tmp/.root_dd8a91_salt/pyall/salt/ext/tornado/iostream.py", line 42, in <module>
import urllib3.util.ssl_match_hostname
ModuleNotFoundError: No module named 'urllib3.util.ssl_match_hostname'
[ERROR ] An un-handled exception was caught by Salt's global exception handler:
ModuleNotFoundError: No module named 'urllib3.util.ssl_match_hostname'
Traceback (most recent call last):
File "/var/tmp/.root_dd8a91_salt/salt-call", line 27, in <module>
salt_call()
File "/var/tmp/.root_dd8a91_salt/pyall/salt/scripts.py", line 438, in salt_call
import salt.cli.call
File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/call.py", line 3, in <module>
import salt.cli.caller
File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/caller.py", line 12, in <module>
import salt.channel.client
File "/var/tmp/.root_dd8a91_salt/pyall/salt/channel/client.py", line 13, in <module>
import salt.crypt
File "/var/tmp/.root_dd8a91_salt/pyall/salt/crypt.py", line 26, in <module>
import salt.payload
File "/var/tmp/.root_dd8a91_salt/pyall/salt/payload.py", line 12, in <module>
import salt.loader.context
File "/var/tmp/.root_dd8a91_salt/pyall/salt/loader/__init__.py", line 23, in <module>
import salt.utils.event
File "/var/tmp/.root_dd8a91_salt/pyall/salt/utils/event.py", line 67, in <module>
import salt.ext.tornado.iostream
File "/var/tmp/.root_dd8a91_salt/pyall/salt/ext/tornado/iostream.py", line 42, in <module>
import urllib3.util.ssl_match_hostname
ModuleNotFoundError: No module named 'urllib3.util.ssl_match_hostname'
```
1 Like
Yes, but in addition to debian-11 both whonix-gw-17 & whonix-ws-17 are impacted now.
DVM
August 29, 2023, 2:32pm
4
Are you sure that you are currently using whonix-17? Since it’s based on bookworm, it shouldn’t be affected by this issue.
Apologies. whonix-16, not 17
DVM
August 29, 2023, 5:52pm
6
Make sure to install the new salt package in fedora-38 and it will work again.
Honza
August 30, 2023, 6:32pm
7
I changed template of default-mgmt-dvm to debian-11 and all updates work again.
vma
October 3, 2023, 11:12pm
8
Finally I remembered an earlier case, where the update succeeded from ‘Qube Manager’.