I’ll try to create a Fedora-based dom0-updateVM. Then I’ll chain it once to sys-firewall2 and once to sys-whonix. It’ll allow me to see if the problem is me missing the very important whonix instruction - namely that of having the updateVM be Fedora based. This will take me a while…