How To: Fix Update Problem (Salt Error)

User Support
1

urlib3.util.ssl_match_hostname Fix (aka VMs cannot update)

For those of you who have found yourself in the situation of not being able to update your VMs, here is the solution: qvm-prefs default-mgmt-dvm template debian-12

NOTICE: Fedora-based templates are broken for using them as the default-mgmt-dvm (Fedora-38-based management qube causes Salt errors when updating certain templates: `Failed to return clean data... ModuleNotFoundError: No module named 'urllib3.util.ssl_match_hostname'` · Issue #8440 · QubesOS/qubes-issues · GitHub)! The easiest fix is to select debian-12 as the template for default-mgmt-dvm.

Nevertheless this is how a minimal VM should be configured to be used as default-mgmt-dvm (not working due to the open issue).

qvm-clone fedora-38-minimal fedora-38-minimal-mgmt

qvm-run -u root f38m-mgmt xfce4-terminal

dnf install qubes-core-agent-passwordless-root qubes-mgmt-salt-vm-connector

qvm-shutdown fedora-38-minimal-mgmt

qvm-prefs default-mgmt-dvm template fedora-38-minimal-mgmt
1 Like
2

I think you could find everything you want in the documentation…
https://www.qubes-os.org/doc/salt/ at “Writing Your Own Configurations”

3

Thanks for your answer, but my post was not a question (besides my personal question). It’s the fix to the GitHub issue so that other users can find it and have it easier.

Do you have an answer for my personal one?

4

to set it for ALL qubes, sorry i don’t know, but you could change it for appVM/Templates with

qvm-prefs your_appVM/Templates management_dispvm fedora-38-minimal-mgmt

1 Like
5

Thanks, sorry if my question was not clear. What I want to do is to set the template of the default-mgmt-dvm and not set the default-mgmt-dvm for appvms.

However, thanks for the mention of qvm-prefs, I figured it out on my own:

qvm-prefs default-mgmt-dvm template debian-12

1 Like
6

Well thank you too, you showed me something that can be useful to me and also to other people here :wink:

1 Like