Qubes OS updates Weekly Review - Y2024-W48

Introduction

Weekly review of new packages uploaded to Qubes OS repositories. Link to previous version here.

Alphabetically sorted list of new packages uploaded to Qubes OS repositories
initial-setup-0.3.101-9.fc41.x86_64.rpm
initial-setup-gui-0.3.101-9.fc41.x86_64.rpm
initial-setup-gui-wayland-generic-0.3.101-9.fc41.x86_64.rpm
libqubes-pure0_4.2.18+deb12u1_amd64.deb
libqubes-pure0_4.2.18+deb13u1_amd64.deb
libqubes-pure0-dbgsym_4.2.18+deb12u1_amd64.deb
libqubes-pure0-dbgsym_4.2.18+deb13u1_amd64.deb
libqubes-pure-dev_4.2.18+deb12u1_amd64.deb
libqubes-pure-dev_4.2.18+deb13u1_amd64.deb
libqubes-rpc-filecopy2_4.2.18+deb12u1_amd64.deb
libqubes-rpc-filecopy2_4.2.18+deb13u1_amd64.deb
libqubes-rpc-filecopy2-dbgsym_4.2.18+deb12u1_amd64.deb
libqubes-rpc-filecopy2-dbgsym_4.2.18+deb13u1_amd64.deb
libqubes-rpc-filecopy-dev_4.2.18+deb12u1_amd64.deb
libqubes-rpc-filecopy-dev_4.2.18+deb13u1_amd64.deb
python3-qubesimgconverter-4.2.18-1.fc37.x86_64.rpm
python3-qubesimgconverter-4.2.18-1.fc39.x86_64.rpm
python3-qubesimgconverter-4.2.18-1.fc40.x86_64.rpm
python3-qubesimgconverter-4.2.18-1.fc41.x86_64.rpm
python3-qubesimgconverter_4.2.18+deb12u1_amd64.deb
python3-qubesimgconverter_4.2.18+deb13u1_amd64.deb
qubes-audio-daemon_4.3.6-1+deb12u1_amd64.deb
qubes-audio-daemon_4.3.6-1+deb13u1_amd64.deb
qubes-audio-daemon-4.3.6-1.fc39.x86_64.rpm
qubes-audio-daemon-4.3.6-1.fc40.x86_64.rpm
qubes-audio-daemon-4.3.6-1.fc41.x86_64.rpm
qubes-audio-daemon_4.3.6-1+jammy1_amd64.deb
qubes-audio-daemon_4.3.6-1+noble1_amd64.deb
qubes-audio-daemon-dbgsym_4.3.6-1+deb12u1_amd64.deb
qubes-audio-daemon-dbgsym_4.3.6-1+deb13u1_amd64.deb
qubes-audio-dom0-4.3.6-1.fc39.x86_64.rpm
qubes-audio-dom0-4.3.6-1.fc40.x86_64.rpm
qubes-audio-dom0-4.3.6-1.fc41.x86_64.rpm
qubes-gui-daemon_4.3.6-1+deb12u1_amd64.deb
qubes-gui-daemon_4.3.6-1+deb13u1_amd64.deb
qubes-gui-daemon-4.3.6-1.fc39.x86_64.rpm
qubes-gui-daemon-4.3.6-1.fc40.x86_64.rpm
qubes-gui-daemon-4.3.6-1.fc41.x86_64.rpm
qubes-gui-daemon_4.3.6-1+jammy1_amd64.deb
qubes-gui-daemon_4.3.6-1+noble1_amd64.deb
qubes-gui-daemon-dbgsym_4.3.6-1+deb12u1_amd64.deb
qubes-gui-daemon-dbgsym_4.3.6-1+deb13u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.3.6-1+deb12u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.3.6-1+deb13u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.3.6-1+jammy1_amd64.deb
qubes-gui-daemon-pulseaudio_4.3.6-1+noble1_amd64.deb
qubes-gui-daemon-selinux-4.3.6-1.fc39.x86_64.rpm
qubes-gui-daemon-selinux-4.3.6-1.fc40.x86_64.rpm
qubes-gui-daemon-selinux-4.3.6-1.fc41.x86_64.rpm
qubes-gui-dom0-4.3.6-1.fc39.x86_64.rpm
qubes-gui-dom0-4.3.6-1.fc40.x86_64.rpm
qubes-gui-dom0-4.3.6-1.fc41.x86_64.rpm
qubes-kernel-vm-support-4.2.18-1.fc37.x86_64.rpm
qubes-kernel-vm-support-4.2.18-1.fc39.x86_64.rpm
qubes-kernel-vm-support-4.2.18-1.fc40.x86_64.rpm
qubes-kernel-vm-support-4.2.18-1.fc41.x86_64.rpm
qubes-kernel-vm-support_4.2.18+deb12u1_amd64.deb
qubes-kernel-vm-support_4.2.18+deb13u1_amd64.deb
qubes-template-fedora-41-4.2.0-202411262350.noarch.rpm
qubes-template-fedora-41-4.3.0-202411262134.noarch.rpm
qubes-template-fedora-41-minimal-4.2.0-202411262134.noarch.rpm
qubes-template-fedora-41-minimal-4.3.0-202411262134.noarch.rpm
qubes-template-fedora-41-xfce-4.2.0-202411301214.noarch.rpm
qubes-template-fedora-41-xfce-4.3.0-202411262134.noarch.rpm
qubes-template-fedora-41-xfce-4.3.0-202411300956.noarch.rpm
qubes-utils-4.2.18-1.fc37.x86_64.rpm
qubes-utils-4.2.18-1.fc39.x86_64.rpm
qubes-utils-4.2.18-1.fc40.x86_64.rpm
qubes-utils-4.2.18-1.fc41.x86_64.rpm
qubes-utils_4.2.18+deb12u1_amd64.deb
qubes-utils_4.2.18+deb13u1_amd64.deb
qubes-utils-dbgsym_4.2.18+deb12u1_amd64.deb
qubes-utils-dbgsym_4.2.18+deb13u1_amd64.deb
qubes-utils-devel-4.2.18-1.fc37.x86_64.rpm
qubes-utils-devel-4.2.18-1.fc39.x86_64.rpm
qubes-utils-devel-4.2.18-1.fc40.x86_64.rpm
qubes-utils-devel-4.2.18-1.fc41.x86_64.rpm
qubes-utils-libs-4.2.18-1.fc37.x86_64.rpm
qubes-utils-libs-4.2.18-1.fc39.x86_64.rpm
qubes-utils-libs-4.2.18-1.fc40.x86_64.rpm
qubes-utils-libs-4.2.18-1.fc41.x86_64.rpm
qubes-utils-selinux-4.2.18-1.fc37.x86_64.rpm
qubes-utils-selinux-4.2.18-1.fc39.x86_64.rpm
qubes-utils-selinux-4.2.18-1.fc40.x86_64.rpm
qubes-utils-selinux-4.2.18-1.fc41.x86_64.rpm

Highlights

  • Rebuild of all Fedora 41 templates.
  • GUI Daemon improvements.

Details

In addition to the usual minor fixes and patches:

  • New Fedora 41 XFCE, minimal (and Gnome) templates (r4.2 & r4.3)
    . A bug was identified with new Fedora 41 templates where SELinux prevented Qubes dynamic memory manager to work properly. Therefore all of Fedora 41 flavours had to be rebuilt.

  • gui-daemon v4.3.6 (r4.3)
    . Fixing a (running apps) Icon-Receiver bug on systems with dedicated GUIVM
    . (mouse and keyboard) event buffering for cloaking user input patterns. For users who wish to prevent biometric information about their mouse and keyboard patterns from leaking into certain Qubes.
    . Some EWMH improvements.
    . Assuring GUI Daemon compiles on Ubuntu Noble.

  • initial-setup v0.3.101-9 (r4.3)
    . Fixing an issue with systems with multiple GPUs/Displays.

  • linux-utils v4.2.18 (r4.2)
    . This one contains a must update for users with BTRFS file system.

Epilogue

I personally did not recognize the SELinux issue with qubes-meminfo-writer service before reading about it on Github. Mostly because my VMs have the required memory precisely calculated and pre-allocated. All of my Fedora 41 templates were upgraded in-place from Fedora 40 templates and were affected by that bug. Since I did not want to reinstall new templates, I tried the suggested workaround of relabelling the entire template file-system which sadly did not fix my issue. Neither did re-installation of qubes-utils-selinux package and trying the relabelling once more. I was about to setenforce 0; but I did not want to make Dan Walsh weep. So I somehow managed to compile the required additional policies and install it in the templates.

9 Likes

Great! I think this was discussed a lot on the forum last year!

3 Likes

I see a lot of activity from Whonix community recently, mostly focused on anonymity related issues. There is also a pending PR for making UTC as the default timezone for Whonix VMs. It is going to be a tag. I personally preferred this to be a feature (or preference) to make it possible to have any TZ possible for any VM. I would have been useful for non-anonymity related developments. But they have it already reviewed and it works.

1 Like

Note that this is not a silver bullet

(some details in the mastodon thread)

I understand padding would be better than random delay, not sure it’s doable in this case :thinking:

2 Likes

Where? :slight_smile:

Here:

1 Like

What is the best practice for upgrading templates (e.g. from F40 to F41)?

I have a lot of cloned templates too and have a bit fear that this will be hell of a work…

There is not a finalized one (yet). You could wait for this issue to finalize and the related announcement on forum.

2 Likes

thanks again super helpful i installed 41 a week ago and didnt notice that updates didnt fix the memory issue. didnt realize there was an issue just noticed that things were strange somewhat. now i reinstalled and everything is nice again, yippie :slight_smile:

1 Like

Fedora 41 template · Issue #9244 · QubesOS/qubes-issues · GitHub gnah it happend again :slight_smile:

1 Like

This turns to be weird & very confusing. Even for Marek: