Help with salt error on unman splitssh

Mirai · January 4, 2026, 8:31pm

Tried to create unmans split-ssh setup via the salt scripts. I only modfied the template names.

I can’t figure why the configuration of the qubes-ssh-agent.configure_template fails.

debian-13-minimal-ssh-agent: ERROR (exception list index out of range)

configure_template.sls

0aa4de05d

# vim: set syntax=yaml ts=2 sw=2 sts=2 et :

{% if salt['pillar.get']('update_proxy:caching') %}
{% set proxy = 'cacher' %}
{% endif %}

{% if grains['nodename'] != 'dom0' %}
{% if grains['os_family']|lower == 'debian' %}
{% if grains['nodename']|lower != 'host' %}
{% if proxy  == 'cacher' %}
{% for repo in salt['file.find']('/etc/apt/sources.list.d/', name='*list') %}
{{ repo }}_baseurl:
  file.replace:
    - name: {{ repo }}
    - pattern: 'https://'
    - repl: 'http://HTTPS///'
    - flags: [ 'IGNORECASE', 'MULTILINE' ]
    - backup: False

{% endfor %}

This file has been truncated. show original

Could somebody with more salt experience pls help out?

unman · January 5, 2026, 1:30am

It would be extremely helpful if you could say:
What version of Qubes you are running.
What template is used by default-mgmt-dvm.
What command you used to run the state.

Can you now run;
qubesctl --skip-dom0 --targets=TEMPLATE --show-output state.apply qubes-ssh-agent.configure_template
replacing TEMPLATE with the name of the template, and post the output.

In general it is always a good first step to run a failing command with
--show-output.

I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.

Mirai · January 5, 2026, 4:22pm

Sry. 4.3, I tried fedora-42-xfce and debian-13-minimal with bash and fish for the default-dvm

I ran sudo qubesctl --skip-dom0 --targets=template-ssh-agent state.apply qubes-ssh-agent.configure_template

I cloned the repo, changed the debian template to 13 then moved the entire dir to /srv/salt.

–show-output does not show anything extra

Mirai · January 6, 2026, 6:42pm

Sorry was not thinking straight. For some reason I thought changing the template for the default-dvm would also change it for the mgmt.

It’s a minimal template error, with xfce it works. Sorry again