Fedora template does not start after update to fedora-42

[besen]

Hi,
after updating my fedora-41 template to fedora-42 using the guide in the documentation the template wont start anymore. Saw this in the logs:

      Starting .[0;1;39msystemd-sysctl.service.[0m - Apply Kernel Variables...
[2025-11-18 16:39:01] [    3.759449] SELinux:  Context system_u:object_r:qubes_qubesdb_daemon_exec_t:s0 is not valid (left unmapped).
[2025-11-18 16:39:01] [    3.759577] (b-daemon)[336]: qubes-db.service: Unable to locate executable '/usr/bin/qubesdb-daemon': Permission denied
[2025-11-18 16:39:01] [    3.795271] audit: type=1400 audit(1763480341.346:4): avc:  denied  { execute } for  pid=336 comm="(b-daemon)" name="qubesdb-daemon" dev="xvda3" ino=1053100 scontex
t=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:qubes_qubesdb_daemon_exec_t:s0"
[2025-11-18 16:39:01] [    3.827997] (b-daemon)[336]: qubes-db.service: Failed at step EXEC spawning /usr/bin/qubesdb-daemon: Permission denied
[2025-11-18 16:39:01] [    3.828092] systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev.
[2025-11-18 16:39:01] [.[0;32m  OK  .[0m] Finished .[0;1;39msystemd-tmpfiles-setup-de….[0mCreate Static Device Nodes in /dev.
[2025-11-18 16:39:01] [    3.829190] systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices.
[2025-11-18 16:39:01] [.[0;32m  OK  .[0m] Finished .[0;1;39msystemd-udev-trigger.service.[0m - Coldplug All udev Devices.
[2025-11-18 16:39:01] [    3.829757] systemd[1]: qubes-db.service: Main process exited, code=exited, status=203/EXEC
[2025-11-18 16:39:01] [    3.829925] systemd[1]: qubes-db.service: Failed with result 'exit-code'.
[2025-11-18 16:39:01] [    3.830634] systemd[1]: Failed to start qubes-db.service - Qubes DB agent.
[2025-11-18 16:39:01] [.[0;1;31mFAILED.[0m] Failed to start .[0;1;39mqubes-db.service.[0m - Qubes DB agent.
[2025-11-18 16:39:01] See 'systemctl status qubes-db.service' for details.
[2025-11-18 16:39:01] [    3.830924] systemd[1]: Dependency failed for qubes-sysinit.service - Init Qubes Services settings.
[2025-11-18 16:39:01] [.[0;1;38:5:185mDEPEND.[0m] Dependency failed for .[0;1;39mqubes-sysini…ice.[0m - Init Qubes Services settings.
[2025-11-18 16:39:01] [    3.831066] systemd[1]: Dependency failed for qubes-relabel-rw.service - Relabel /rw and /home.
[2025-11-18 16:39:01] [.[0;1;38:5:185mDEPEND.[0m] Dependency failed for .[0;1;39mqubes-relabe…rw.service.[0m - Relabel /rw and /home.
[2025-11-18 16:39:01] [    3.831290] systemd[1]: qubes-relabel-rw.service: Job qubes-relabel-rw.service/start failed with result 'dependency'.
[2025-11-18 16:39:01] [    3.831357] systemd[1]: Dependency failed for qubes-relabel-root.service - Relabel /.
[2025-11-18 16:39:01] [.[0;1;38:5:185mDEPEND.[0m] Dependency failed for .[0;1;39mqubes-relabel-root.service.[0m - Relabel /.
[2025-11-18 16:39:01] [    3.831484] systemd[1]: qubes-relabel-root.service: Job qubes-relabel-root.service/start failed with result 'dependency'.
[2025-11-18 16:39:01] [    3.831536] systemd[1]: qubes-sysinit.service: Job qubes-sysinit.service/start failed with result 'dependency'.
[2025-11-18 16:39:01] [    3.831832] systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems.
[2025-11-18 16:39:01] [.[0;32m  OK  .[0m] Reached target .[0;1;39mlocal-fs-pre.target.[0m…Preparation for Local File Systems.
[2025-11-18 16:39:01] [    3.832425] systemd[1]: Set up automount efi.automount - EFI System Partition Automount.
[2025-11-18 16:39:01] [.[0;32m  OK  .[0m] Set up automount .[0;1;39mefi.automount.[0m - EFI System Partition Automount.
[2025-11-18 16:39:01] [    3.834546] systemd[1]: Started haveged.service - Entropy Daemon based on the HAVEGE algorithm.
[2025-11-18 16:39:01] [.[0;32m  OK  .[0m] Started .[0;1;39mhaveged.service.[0m - Entropy …emon based on the HAVEGE algorithm.
[2025-11-18 16:39:01] [    3.835559] systemd[1]: Starting qubes-mount-dirs.service - Initialize and mount /rw and /home...
[2025-11-18 16:39:01]          Starting .[0;1;39mqubes-mount-dirs.service.[0m …itialize and mount /rw and /home...
[2025-11-18 16:39:01] [    3.837348] systemd[1]: Starting qubes-rootfs-resize.service - Adjust root filesystem size...
[2025-11-18 16:39:01]          Starting .[0;1;39mqubes-rootfs-resize.service.[0m - Adjust root filesystem size...
[2025-11-18 16:39:01] [    3.844318] systemd[1]: Starting systemd-journald.service - Journal Service...
[2025-11-18 16:39:01]          Starting .[0;1;39msystemd-journald.service.[0m - Journal Service...
[2025-11-18 16:39:01] [    3.850969] systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed...
[2025-11-18 16:39:01]          Starting .[0;1;39msystemd-random-seed.service.[0m - Load/Save OS Random Seed...
[2025-11-18 16:39:01] [    3.862450] systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files...
[2025-11-18 16:39:01]          Starting .[0;1;39msystemd-udevd.service.[0m - R…ager for Device Events and Files...
[2025-11-18 16:39:01] [    3.873643] systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables.
[2025-11-18 16:39:01] [.[0;32m  OK  .[0m] Finished .[0;1;39msystemd-sysctl.service.[0m - Apply Kernel Variables.
[2025-11-18 16:39:01] [    3.873996] systemd[1]: systemd-random-seed.service: Control process exited, code=exited, status=1/FAILURE

how can I fix this?

[besen]

Full logs:

PrivateBin

[Euwiiwueir]

These I think are the relevant lines:

[    3.510618] SELinux:  Context system_u:object_r:qubes_qubesdb_daemon_exec_t:s0 is not valid (left unmapped).
[    3.510715] (b-daemon)[311]: qubes-db.service: Unable to locate executable '/usr/bin/qubesdb-daemon': Permission denied
[    3.510758] (b-daemon)[311]: qubes-db.service: Failed at step EXEC spawning /usr/bin/qubesdb-daemon: Permission denied
[    3.512248] audit: type=1400 audit(1763553368.612:4): avc:  denied  { execute } for  pid=311 comm="(b-daemon)" name="qubesdb-daemon" dev="xvda3" ino=1053100 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:qubes_qubesdb_daemon_exec_t:s0"
[    3.513781] systemd[1]: qubes-db.service: Main process exited, code=exited, status=203/EXEC
[    3.513977] systemd[1]: qubes-db.service: Failed with result 'exit-code'.
[    3.514262] systemd[1]: Failed to start qubes-db.service - Qubes DB agent.
[.[0;1;31mFAILED.[0m] Failed to start .[0;1;39mqubes-db.service.[0m - Qubes DB agent.

Per the first line, seems like an SELinux problem. If you do a search in the forum you can find this thread:

Update borked a Fedora template

I have a template with extra applications (e.g. Proton Suite Claws email, etc), creatively called fedora-41-xfce-EXTRAS. Its important to me. My recent attempts at updating seem to have rendered it broken. The updater says: Cannot connect to qrexec agent for 60 seconds, see /var/log/xen/console/guest-fedora-41-xfce-EXTRAS.log for details `/var/log/xen/console/guest-fedora-41-xfce-EXTRAS.log` (nb - I selected this template to update myself, because Qubes Updater said the stock fedora-41-xfce …

DVM’s comment here looks like it might help you:

Update borked a Fedora template

I’m not sure what happened, but I think this is the issue: [ 10.735820] SELinux: Context system_u:object_r:qubes_qubesdb_daemon_exec_t:s0 is not valid (left unmapped). [...] [.[0;1;31mFAILED.[0m] Failed to start .[0;1;39mqubes-db.service.[0m - Qubes DB agent. It’s probably a SELinux labeling issue that caused the qubesdb systemd service to fail, which made everything unusable because this is a critical component. If you still have the template, try disabling SELinux and see if that allows it …