Continuing the discussion from One Should Always Update Only Via the "Qubes Update" Tool (For Security Reasons):
[@dom0 ~]$ qubesctl --show-output state.sls update.qubes-dom0
[WARNING ] Failed to open log file, do you have permission to write to /var/log/salt/minion?
[CRITICAL] Specified ext_pillar interface qvm_prefs is unavailable
Cannot write to process directory. Do you have permissions to write to /var/cache/salt/minion/proc/20220316135815944654 ?
[CRITICAL] Specified ext_pillar interface qvm_prefs is unavailable
[CRITICAL] Unable to make cachedir /var/cache/salt/minion/file_lists/roots
local:
Data failed to compile:
----------
No matching sls found for 'update.qubes-dom0' in env 'base'
DOM0 configuration failed, not continuing
[@dom0 ~]$ sudo qubesctl --show-output state.sls update.qubes-dom0
[WARNING ] /usr/lib/python3.8/site-packages/salt/utils/files.py:396: RuntimeWarning: line buffering (buffering=1) isn't supported in binary mode, the default buffer size will be used
f_handle = open(*args, **kwargs) # pylint: disable=resource-leakage
local:
----------
ID: /etc/yum.repos.d/qubes-dom0.repo
Function: file.replace
Result: True
Comment: No changes needed to be made
Started: 16:58:22.735593
Duration: 8.115 ms
Changes:
----------
ID: /etc/yum.repos.d/qubes-templates.repo
Function: file.replace
Result: True
Comment: No changes needed to be made
Started: 16:58:22.743815
Duration: 1.221 ms
Changes:
----------
ID: update
Function: cmd.run
Name: if qubes-dom0-update --quiet --assumeyes --clean --action=clean expire-cache >/dev/null 2>&1; then
echo "result=True comment='Cache cleaned'"
else
echo "result=False comment='Could not clean cache'"
fi
Result: True
Comment: Cache cleaned
Started: 16:58:22.745599
Duration: 2943.163 ms
Changes:
----------
ID: update
Function: pkg.uptodate
Result: True
Comment: System is already up-to-date
Started: 16:58:26.701304
Duration: 94510.269 ms
Changes:
Summary for local
------------
Succeeded: 4
Failed: 0
------------
Total states run: 4
Total run time: 97.463 s