New update (Fedora) that includes salt updates may impact updating of certain VMs later (depending upon how your specific system is arranged)

DVM · August 21, 2023, 3:05pm

It is reported here:

Updating Debian-11 based qubes with salt ends with error `ModuleNotFoundError: No module named 'urllib3.util.ssl_match_hostname'`

opened 02:02PM - 20 Aug 23 UTC

T: bug C: Debian/Ubuntu P: default needs diagnosis C: updates affects-4.1

[How to file a helpful issue](https://www.qubes-os.org/doc/issue-tracking/) #…## Qubes OS release 4.1 ### Brief summary Updating Debian-11 based templates/qubes with salt results in a salt error about `urllib3.util.ssl_match_hostname` not being found. ### Steps to reproduce - Open a dom0 terminal - Update with the following command: - `qubesctl --show-output --skip-dom0 --targets debian-11 state.apply update.qubes-vm` ### Expected behavior Template/qubes based on debian-11 update without issues ### Actual behavior Salt return an error: ``` Traceback (most recent call last): File "/var/tmp/.root_dd8a91_salt/salt-call", line 27, in <module> salt_call() File "/var/tmp/.root_dd8a91_salt/pyall/salt/scripts.py", line 438, in salt_call import salt.cli.call File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/call.py", line 3, in <module> import salt.cli.caller File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/caller.py", line 12, in <module> import salt.channel.client File "/var/tmp/.root_dd8a91_salt/pyall/salt/channel/client.py", line 13, in <module> import salt.crypt File "/var/tmp/.root_dd8a91_salt/pyall/salt/crypt.py", line 26, in <module> import salt.payload File "/var/tmp/.root_dd8a91_salt/pyall/salt/payload.py", line 12, in <module> import salt.loader.context File "/var/tmp/.root_dd8a91_salt/pyall/salt/loader/__init__.py", line 23, in <module> import salt.utils.event File "/var/tmp/.root_dd8a91_salt/pyall/salt/utils/event.py", line 67, in <module> import salt.ext.tornado.iostream File "/var/tmp/.root_dd8a91_salt/pyall/salt/ext/tornado/iostream.py", line 42, in <module> import urllib3.util.ssl_match_hostname ModuleNotFoundError: No module named 'urllib3.util.ssl_match_hostname' [ERROR ] An un-handled exception was caught by Salt's global exception handler: ModuleNotFoundError: No module named 'urllib3.util.ssl_match_hostname' Traceback (most recent call last): File "/var/tmp/.root_dd8a91_salt/salt-call", line 27, in <module> salt_call() File "/var/tmp/.root_dd8a91_salt/pyall/salt/scripts.py", line 438, in salt_call import salt.cli.call File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/call.py", line 3, in <module> import salt.cli.caller File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/caller.py", line 12, in <module> import salt.channel.client File "/var/tmp/.root_dd8a91_salt/pyall/salt/channel/client.py", line 13, in <module> import salt.crypt File "/var/tmp/.root_dd8a91_salt/pyall/salt/crypt.py", line 26, in <module> import salt.payload File "/var/tmp/.root_dd8a91_salt/pyall/salt/payload.py", line 12, in <module> import salt.loader.context File "/var/tmp/.root_dd8a91_salt/pyall/salt/loader/__init__.py", line 23, in <module> import salt.utils.event File "/var/tmp/.root_dd8a91_salt/pyall/salt/utils/event.py", line 67, in <module> import salt.ext.tornado.iostream File "/var/tmp/.root_dd8a91_salt/pyall/salt/ext/tornado/iostream.py", line 42, in <module> import urllib3.util.ssl_match_hostname ModuleNotFoundError: No module named 'urllib3.util.ssl_match_hostname' ```

Downgrading to 3006.1-2 in the fedora template or switching to a debian template for the mgmt VM seems to be the solution for now.