Qubes OS updates Weekly Review - Y2024-W43

General Discussion
1

Introduction

Weekly review of new packages uploaded to Qubes OS repositories. Notes on how it is prepared and what resources are used to write this newsletter is available in previous versions.

Alphabetically sorted list of new packages uploaded to Qubes OS repositories 
libvirt-10.5.0-2.fc41.x86_64.rpm
libvirt-client-10.5.0-2.fc41.x86_64.rpm
libvirt-client-qemu-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-common-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-config-nwfilter-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-interface-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-libxl-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-nodedev-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-nwfilter-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-qemu-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-secret-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-core-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-disk-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-gluster-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-logical-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-mpath-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-scsi-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-driver-storage-zfs-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-kvm-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-lock-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-log-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-plugin-lockd-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-proxy-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-qemu-10.5.0-2.fc41.x86_64.rpm
libvirt-daemon-xen-10.5.0-2.fc41.x86_64.rpm
libvirt-devel-10.5.0-2.fc41.x86_64.rpm
libvirt-docs-10.5.0-2.fc41.x86_64.rpm
libvirt-libs-10.5.0-2.fc41.x86_64.rpm
python3-dnf-plugins-qubes-hooks-4.3.9-1.fc39.noarch.rpm
python3-dnf-plugins-qubes-hooks-4.3.9-1.fc40.noarch.rpm
python3-libvirt-10.5.0-2.fc41.x86_64.rpm
python3-qubesimgconverter-4.2.17-1.fc37.x86_64.rpm
python3-qubesimgconverter-4.2.17-1.fc39.x86_64.rpm
python3-qubesimgconverter-4.2.17-1.fc40.x86_64.rpm
python3-qubesimgconverter-4.2.17-1.fc41.x86_64.rpm
qubes-core-agent_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-4.3.9-1.fc39.x86_64.rpm
qubes-core-agent-4.3.9-1.fc40.x86_64.rpm
qubes-core-agent-4.3.9-1.fc41.x86_64.rpm
qubes-core-agent_4.3.9-1+jammy1_amd64.deb
qubes-core-agent-caja_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent-caja_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-caja-4.3.9-1.fc39.x86_64.rpm
qubes-core-agent-caja-4.3.9-1.fc40.x86_64.rpm
qubes-core-agent-caja-4.3.9-1.fc41.x86_64.rpm
qubes-core-agent-caja_4.3.9-1+jammy1_amd64.deb
qubes-core-agent-dbgsym_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent-dbgsym_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent-dom0-updates_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates-4.3.9-1.fc39.noarch.rpm
qubes-core-agent-dom0-updates-4.3.9-1.fc40.noarch.rpm
qubes-core-agent-dom0-updates-4.3.9-1.fc41.noarch.rpm
qubes-core-agent-dom0-updates_4.3.9-1+jammy1_amd64.deb
qubes-core-agent-nautilus_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent-nautilus_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-nautilus-4.3.9-1.fc39.x86_64.rpm
qubes-core-agent-nautilus-4.3.9-1.fc40.x86_64.rpm
qubes-core-agent-nautilus-4.3.9-1.fc41.x86_64.rpm
qubes-core-agent-nautilus_4.3.9-1+jammy1_amd64.deb
qubes-core-agent-networking_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent-networking_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-networking-4.3.9-1.fc39.noarch.rpm
qubes-core-agent-networking-4.3.9-1.fc40.noarch.rpm
qubes-core-agent-networking-4.3.9-1.fc41.noarch.rpm
qubes-core-agent-networking_4.3.9-1+jammy1_amd64.deb
qubes-core-agent-network-manager_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent-network-manager_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-network-manager-4.3.9-1.fc39.noarch.rpm
qubes-core-agent-network-manager-4.3.9-1.fc40.noarch.rpm
qubes-core-agent-network-manager-4.3.9-1.fc41.noarch.rpm
qubes-core-agent-network-manager_4.3.9-1+jammy1_amd64.deb
qubes-core-agent-passwordless-root_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent-passwordless-root_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-passwordless-root-4.3.9-1.fc39.noarch.rpm
qubes-core-agent-passwordless-root-4.3.9-1.fc40.noarch.rpm
qubes-core-agent-passwordless-root-4.3.9-1.fc41.noarch.rpm
qubes-core-agent-passwordless-root_4.3.9-1+jammy1_amd64.deb
qubes-core-agent-selinux-4.3.9-1.fc39.noarch.rpm
qubes-core-agent-selinux-4.3.9-1.fc40.noarch.rpm
qubes-core-agent-selinux-4.3.9-1.fc41.noarch.rpm
qubes-core-agent-systemd-4.3.9-1.fc39.x86_64.rpm
qubes-core-agent-systemd-4.3.9-1.fc40.x86_64.rpm
qubes-core-agent-systemd-4.3.9-1.fc41.x86_64.rpm
qubes-core-agent-thunar_4.3.9-1+deb12u1_amd64.deb
qubes-core-agent-thunar_4.3.9-1+deb13u1_amd64.deb
qubes-core-agent-thunar-4.3.9-1.fc39.x86_64.rpm
qubes-core-agent-thunar-4.3.9-1.fc40.x86_64.rpm
qubes-core-agent-thunar-4.3.9-1.fc41.x86_64.rpm
qubes-core-agent-thunar_4.3.9-1+jammy1_amd64.deb
qubes-gui-common_4.3.0+deb12u1_amd64.deb
qubes-gui-common_4.3.0+deb13u1_amd64.deb
qubes-gui-common_4.3.0+jammy1_amd64.deb
qubes-gui-common-devel-4.3.0-1.fc39.noarch.rpm
qubes-gui-common-devel-4.3.0-1.fc40.noarch.rpm
qubes-gui-common-devel-4.3.0-1.fc41.noarch.rpm
qubes-kernel-vm-support-4.2.17-1.fc37.x86_64.rpm
qubes-kernel-vm-support-4.2.17-1.fc39.x86_64.rpm
qubes-kernel-vm-support-4.2.17-1.fc40.x86_64.rpm
qubes-kernel-vm-support-4.2.17-1.fc41.x86_64.rpm
qubes-utils-4.2.17-1.fc37.x86_64.rpm
qubes-utils-4.2.17-1.fc39.x86_64.rpm
qubes-utils-4.2.17-1.fc40.x86_64.rpm
qubes-utils-4.2.17-1.fc41.x86_64.rpm
qubes-utils-devel-4.2.17-1.fc37.x86_64.rpm
qubes-utils-devel-4.2.17-1.fc39.x86_64.rpm
qubes-utils-devel-4.2.17-1.fc40.x86_64.rpm
qubes-utils-devel-4.2.17-1.fc41.x86_64.rpm
qubes-utils-libs-4.2.17-1.fc37.x86_64.rpm
qubes-utils-libs-4.2.17-1.fc39.x86_64.rpm
qubes-utils-libs-4.2.17-1.fc40.x86_64.rpm
qubes-utils-libs-4.2.17-1.fc41.x86_64.rpm
qubes-utils-selinux-4.2.17-1.fc37.x86_64.rpm
qubes-utils-selinux-4.2.17-1.fc39.x86_64.rpm
qubes-utils-selinux-4.2.17-1.fc40.x86_64.rpm
qubes-utils-selinux-4.2.17-1.fc41.x86_64.rpm
qubes-video-companion_1.1.4-1+deb12u1_all.deb
qubes-video-companion_1.1.4-1+deb13u1_all.deb
qubes-video-companion-1.1.4-1.fc39.noarch.rpm
qubes-video-companion-1.1.4-1.fc40.noarch.rpm
qubes-video-companion-1.1.4-1.fc41.noarch.rpm
qubes-video-companion_1.1.4-1+jammy1_all.deb
qubes-video-companion-docs-1.1.4-1.fc39.noarch.rpm
qubes-video-companion-docs-1.1.4-1.fc40.noarch.rpm
qubes-video-companion-docs-1.1.4-1.fc41.noarch.rpm
qubes-video-companion-dom0-1.1.4-1.fc37.noarch.rpm
qubes-video-companion-dom0-1.1.4-1.fc41.noarch.rpm
qubes-video-companion-license-1.1.4-1.fc39.noarch.rpm
qubes-video-companion-license-1.1.4-1.fc40.noarch.rpm
qubes-video-companion-license-1.1.4-1.fc41.noarch.rpm
qubes-video-companion-receiver-1.1.4-1.fc39.noarch.rpm
qubes-video-companion-receiver-1.1.4-1.fc40.noarch.rpm
qubes-video-companion-receiver-1.1.4-1.fc41.noarch.rpm
qubes-video-companion-sender-1.1.4-1.fc39.noarch.rpm
qubes-video-companion-sender-1.1.4-1.fc40.noarch.rpm
qubes-video-companion-sender-1.1.4-1.fc41.noarch.rpm
qubes-vm-core-4.3.9-1-x86_64.pkg.tar.zst
qubes-vm-gui-common-4.3.0-1-x86_64.pkg.tar.zst
qubes-vm-keyring-4.3.9-1-x86_64.pkg.tar.zst
qubes-vm-networking-4.3.9-1-x86_64.pkg.tar.zst
qubes-vm-passwordless-root-4.3.9-1-x86_64.pkg.tar.zst
qubes-vm-xen-4.19.0-4-x86_64.pkg.tar.zst

Highlights

  • KDE & (some) Wayland related patches.
  • Global clipboard improvements

Details

In addition to the usual minor fixes and patches:

  • desktop-linux-kde v6.2.0-1 (r4.3)
    . Patches for Fedora 41 (dom0 GUIVM on r4.3) to support KDE

  • core-admin-client v4.3.6 (r4.3)
    . Killing of paused qubes on system shutdown is documented
    . qvm-start-daemon will support max_clipboard_size configuration option. Users will be able to set maximum allowed global clipboard size per VM and/or per GUIVM (i.e. qube side to global side). The default is 64000 bytes. Accepted values are between 256 to 256000. Configuration is possible either via /etc/qubes/guid.conf or via gui-max-clipboard-size feature (per VM).
    . System should not crash on pools without volumes. This is needed for Nix support for dom0.
    . Another KDE security patch (QSB-105) related to HVMs. This was discussed last week.

  • gui-agent-linux v4.3.0 (r4.3)
    . Qube side improvements for Global Clipboard.
    . Previously global clipboard size limit was fixed at 65000 bytes. If user tried to copy qube clipboards from 65000 bytes to 256KiB to global clipboard, it was truncated to 65000 bytes without any notification to user. Then above 256kiB, a meaningless one byte was copied to global clipboard.

  • gui-agent-linux v4.2.18 (r4.2)
    . Fixes for input device issues to support FreeRDP. This was tested for a long time on r4.3 and is now back-ported to r4.2. Details are available in previous versions of the weekly newsletter.

  • core-agent-linux v4.3.10 (r4.3)
    . The in-vm kernel initramfs size is reduced by 20% (5MB). This is useful for HVMs (e.g. sys-usb & sys-net).

  • gui-daemon v4.3.4 (r4.3)
    . Fixes to support KDE Wayland session (for GUIVM).
    . GUI Daemon side patch for improved global clipboard.

  • core-libvirt v10.5.0-2 (r4.3)
    . Handling qemu dependency

  • gui-common v4.3.0 (r4.3)
    . Protocol bump for Global clipboard improvements

  • video-companion v1.1.4-1 (r4.2 & r4.3)
    . Mostly unit tests

  • linux-utils v4.2.17 (r4.2)
    . Patches from summer.

Epilogue

Patches to global clipboard are the basis for Global Clipboard systray widget. Which should happen in the forthcoming weeks.

12 Likes
2

Cool. Thanks again for taking time to write these summaries!

1 Like
3

what’s the use case of nix in dom0? :thinking:

4

The original issue is not linked in the PR comment. It appears to be a part of NixOS as dom0 project.

1 Like
5

There is not going to be a newsletter this week as there were some changes to qubes-core-admin. I will include them next week.

1 Like
6

For reference: https://github.com/NixOS/nixpkgs/pull/341215

2 Likes