When upgrading templates, it looks like qvm-template somehow downloads directly into dom0. But this shouldn’t be possible since dom0 does not have networking. Checking for Qubes upgrades spins up a DispVM, but this does not. What’s going on?
Explained here:
https://www.qubes-os.org/doc/dom0-secure-updates/
Also related (for similar questions about templates):
https://www.qubes-os.org/doc/how-to-install-software/#why-dont-templates-have-network-access
1 Like