Can you tell me what is the issue?
Installation breaks after 10 seconds of file check with “Error: Signature verification failed: -: digests SIGNATURES NOT OK”
unman.pub is your certificate, which I installed before, but looks like I didn’t oversee all, cause I get an error in the end, but very quick after the install command. It’s just checking the 3,xx GB rpm and then stops. File should be okay, must be a wrong setting of the certificate I assume.
My key is only valid for 2 years, and recently updated.
Check the key against current keyservers and/or GitHub.
Could be some key/package discrepancy.
1 Like
I have read through every forum post I could find on the kali template, but I am left with a couple questions still:
-
Is it “recommended” to use the one from the community repos that fepitre posted here originally, installing through more official methodology in dom0, or is using the one unman so graciously built and hosts elsewhere just as reasonable? It sounds to me from my reading that unman’s version is handling updates better due to locking qubes-specific files?
-
Also, if the template does act as a "rolling"release, and I install the community template from the repos, will I ever need to dump it and install a newer one once bookworm is stable? Or will it just “roll” into the new debian base?
Just trying not to break my qubes setup because I am still not yet proficient in fixing it if I do… 
short story: unman’s version based on bookworm // communities’ based on bulleye…
in long, I had the same question for 1)
unman just replied that his version simply is the new one (based on latest Debian) and the community one still is the “bulleye” one.
And this means for 2)
you always have to start from scratch, if you have a version running. So if you have the community one, you always will stuck in bulleye (unless there’s a new community one outside) and if you have unmans kali template installed you’re sticking in bookworm with every future update unless unman comes up with another new release/template.
Not strictly true - you could do a standard apt full-upgrade to get from bookworm to
trixie, when bookworm becomes stable. The qubes packages should still
work for a while until testing diverges more and more from stable.
(You could do the same for the bullseye community template. I haven’t
tried it: at some point I suspect that the divergence of packages would
be too much to overcome, but maybe not.)
When I comment in the Forum or in the mailing lists I speak for myself.
1 Like
ahh thanks! So I will test this with (a copy of) my community bullseye (getting it over to bookworm) then…
@fepitre Has there been more movement with getting this template built into the community repository on Bookworm?
I want to install a bookworm template on my setup anyway, and so I figure I will try to use this when it is ready, or use unman’s version which is on bookworm. But I would prefer to install from the community repo just because I feel more comfortable running the single commmand to do it than manually installing from the image. Maybe it’s easier than i think…
Ironically I already downloaded unman’s and made the size adjustments to dom0, checked the signature, and all that, so I can go forward with that if needed. Although, I don’t actually know the command to install it from the file image as opposed to the repository. Is it similar?
Just move rpm package to dom0 and run
sudo dnf install file_name.rpm
thats it.
lol, I guess I half-expected that, but didn’t want to try without confirming, just in case I was being ignorant. I also half expected that there would be some difference because dom0 would need to be informed there was a new TemplateVM as opposed to an arbitrary package installed. How does it know? I guess the answer must be in the RPM itself the instructions are integrated?
Is there a possibility to start graphic destop in templates
What is your goal there?
Can we used same template for Qubes OS 4.1.2?
We started building Kali for Qubes OS 4.2. You can download kali-core in community templates testing repository.
7 Likes
Cool! Will there be work on a kali-linux-default metapackage template?
or perhaps a way to upgrade kali-core to such? I tried to install the default metapackage. It didn’t work and I see that there is a qubes specific repo for packages.
Thanks for the template!
No! This template was just build for Qubes 4.2
Theres still a 4.0.6 /4.1 template available for previous builds… It’s called qubes-template-kali.
@fepitre: Can you tell us, why it’s now called kali**-core** (instead of kali) ?
It is just bare minimum Kali installation using their kali-linux-core metapackage. It is possible to build the normal kali (I can do it like right now) but it is huge to install and has led to space issue in dom0 in the past. We are working on improving template installation that should solve this. In the mean time, you can install the core template, and then clone the template and install kali-linux-default.
3 Likes
yes, will do! Don’t build anything more right now and save your time for other things.
PS.: Installing kali-linux-default - in dom0 ? Or in kali-core-clone template ?
Inside the template. It’s about Kali.
1 Like
qvm-template --enablerepo=qubes-templates-community-testing download kali-core
qvm-template install qubes-template-kali-core-0:4.2.0-202401061601.rpm
ERROR: Signature verification failed: -: digests SIGNATURES NOT OK
Is my download just corrupt or do I need special flags for this testing template?