Parrot security and Ubuntu Focal templates

General Discussion
101

You are using the apt-cacher-ng proxy, but are still using https
requests in the repository definitions.
You need to change these - sed -i s^https://^http://HTTPS///^ applied
to repo defs will do it.
Alternatively run sudo qubesctl --skip-dom0 --targets=TARGET state.apply cacher.change_templates
This is explained in the README

Make sure that you have marked the qubes packages on hold - if you use
aptitude you are able to do this in a GUI - check the menus.

I never presume to speak for the Qubes team. When I comment in the Forum or in the mailing lists I speak for myself.
102

oh yeah i run the sed command because i read above this should fix the issue, but it didnt, run again this sed command which would set it back to http, but also didnt helped.
anyhow, i deleted this parrot installation and cloned it again

the sudo qubesctl command is meant to run in dom0?

the hold should be here per default?

┌─[user@parrot-hacking]─[~]
└──╼ $apt-mark showhold
grub-pc
linux-image-amd64
qubes-core-agent
qubes-core-agent-networking
qubes-gui-agent

everytime if i want to install protonvpn (installing the .deb package) the parrot and kali os would break

103

ok i fixed everything now and would explain what ive done so, if anyone got the same issues, he could fix it, but anyhow i still got some issues, would explain them later, heres the write up:
first, i disabled cacher again in the dom0 terminal:

cat /etc/qubes/policy.d/30-user.policy

this should put out a line like:

qubes.UpdatesProxy * @type:TemplateVM @default allow target=cacher

so i vim`d into it:
sudo vim
and commented the line out

sudo apt update got still errors so i run the command:

sudo sed -i s^http://HTTPS///^https://^ /etc/apt/sources.list.d/*

then i run in parrot sudo apt update and got an error message like:

key is stored in legacy trusted gpg keyring

what i have done were:

sudo cp -r /etc/apt/trusted.gpg ~
mv /etc/apt/trusted.gpg /etc/apt/trusted.gpg.d/

now almost everything worked, to install quassel i had to run sudo aptitude install quassel

but now my issue here:
i also installed the proton deb and run a sudo apt update.
if i want to install with apt it doesnt work
with aptitude it would work but it wants to remove these packages:

      Remove the following packages:                                  
1)      python3-qubesdb [4.2.1-1+deb12u1 (<NULL>, now)]               
2)      qubes-core-agent [4.2.1-1+deb12u1 (now)]                      
3)      qubes-core-agent-network-manager [4.2.1-1+deb12u1 (now)]      
4)      qubes-core-agent-networking [4.2.1-1+deb12u1 (now)]           
5)      qubes-gui-agent [4.1.27-1+deb12u1 (now)]                      
6)      qubes-vm-dependencies [4.2.2-1+deb12u1 (<NULL>, now)]

same behavior if i want to install terminator.

is there a way to install terminator and / or protonvpn without installed gui agent etc.?
guess these are dependencies which i have to keep, if i would uninstall them, this qube wouldnt work anymore?

104

I should say that I have no issue updating Parrot using apt-cacher-ng.

If you install a new template when cacher is installed you can use
sudo qubesctl --skip-dom0 --targets=NEW_TEMPLATE state.apply cacher.change_templates

To restore the original repo definitions you can use:
sudo qubesctl --skip-dom0 --targets=NEW_TEMPLATE state.apply cacher.restore_templates.

This is covered in the README

This is a warning, not an error.
If you use the latest Parrot build the key is stored on disk.

I find this strange since the kali template has terminator installed
alongside those packages.
As far as I can see the terminator package in Parrot requires
downgrading various python packages, which would break some qubes
packages.
You need to wait until the terminator package is updated.

This is one of the issue you find when using anything based off a
testing release - things will break if you are not careful.