Qubes OS updates Weekly Review - Y2025-W36
Introduction
Weekly review of new packages uploaded to Qubes OS repositories. Link to previous Newsletter here.
Alphabetically sorted list of new packages uploaded to Qubes OS repositories
kde-settings-qubes-6.2.0-3.fc41.noarch.rpm
kde-settings-qubes-6.2.0-3.fc42.noarch.rpm
kde-settings-qubes-6.2.0-3.fc43.noarch.rpm
plasma-breeze-qubes-6.2.0-3.fc41.noarch.rpm
plasma-breeze-qubes-6.2.0-3.fc42.noarch.rpm
plasma-breeze-qubes-6.2.0-3.fc43.noarch.rpm
python3-splitgpg2_1.1.9+jammy1_amd64.deb
qubes-ansible-1.2.0-1.fc41.noarch.rpm
qubes-ansible-1.2.0-1.fc42.noarch.rpm
qubes-ansible-1.2.0-1.fc43.noarch.rpm
qubes-ansible-1.2.1-1.fc41.noarch.rpm
qubes-ansible-1.2.1-1.fc42.noarch.rpm
qubes-ansible-1.2.1-1.fc43.noarch.rpm
qubes-ansible-dom0-1.2.0-1.fc41.noarch.rpm
qubes-ansible-dom0-1.2.0-1.fc42.noarch.rpm
qubes-ansible-dom0-1.2.0-1.fc43.noarch.rpm
qubes-ansible-dom0-1.2.1-1.fc41.noarch.rpm
qubes-ansible-dom0-1.2.1-1.fc42.noarch.rpm
qubes-ansible-dom0-1.2.1-1.fc43.noarch.rpm
qubes-ansible-tests-1.2.0-1.fc41.noarch.rpm
qubes-ansible-tests-1.2.0-1.fc42.noarch.rpm
qubes-ansible-tests-1.2.0-1.fc43.noarch.rpm
qubes-ansible-tests-1.2.1-1.fc41.noarch.rpm
qubes-ansible-tests-1.2.1-1.fc42.noarch.rpm
qubes-ansible-tests-1.2.1-1.fc43.noarch.rpm
qubes-ansible-vm-1.2.0-1.fc41.noarch.rpm
qubes-ansible-vm-1.2.0-1.fc42.noarch.rpm
qubes-ansible-vm-1.2.0-1.fc43.noarch.rpm
qubes-ansible-vm-1.2.1-1-any.pkg.tar.zst
qubes-ansible-vm-1.2.1-1.fc41.noarch.rpm
qubes-ansible-vm-1.2.1-1.fc42.noarch.rpm
qubes-ansible-vm-1.2.1-1.fc43.noarch.rpm
qubes-ansible-vm_1.2.1-1+deb12u1_amd64.deb
qubes-ansible-vm_1.2.1-1+deb13u1_amd64.deb
qubes-ansible-vm_1.2.1-1+jammy1_amd64.deb
qubes-ansible-vm_1.2.1-1+noble1_amd64.deb
qubes-manager-4.2.12-1.fc41.noarch.rpm
split-gpg2-1.1.9-1.fc41.noarch.rpm
split-gpg2-tests-1.1.9-1.fc41.noarch.rpm
split-gpg2-tests_1.1.9+jammy1_all.deb
split-gpg2_1.1.9+jammy1_all.deb
Highlights
- Significant work on qubes-ansible
Details
In addition to the usual minor fixes and patches (full list here):
-
ansible v1.2.1-1 (r4.3)
ansible v1.2.0-1 (r4.3)
. We had two releases last week with over 50 commits & almost 3000 lines of code added to the repository. Those are the 2nd & 3rd official packaging ofqubes-ansiblefor Qubes OS (only r4.3).
. Debian and Archlinux packaging forqubes-ansible-vm(in case user wants to use a Debian or Archlinux template fordefault_dispvm).
. To isolate dom0 from target qube, a DispVM proxy is used. This patch alone is over 500 lines.
. Another PR to assure (Ansible) strategy is properly switched from direct connection to DispVM proxy.
. Update to main README file to mention exact package names which user has to install in dom0 and (default_dispvm) template to enablequbes-ansible.
. Support for most of qube properties.
. Support for device assigning/un-assigning. Briefly looking at the code, it appears to use the New Devices API. So backportingqubes-ansibleto r4.2 might be impossible.
. Support for tags.
. Support for performing specific tasks based on qube (running) state.
. A lot of unittests and other bug fixes. -
desktop-linux-kde v6.2.0-3 (r4.3)
Adding two missing dependencies.
Epilogue
While I am (currently) by no means, a qubes-ansible expert, an Ansible expert or even a SaltStack expert, I can advise on the following:
- The current main repository to follow
qubes-ansibledevelopments is github.com/QubesOS/qubes-ansible. Which is forked from Frédéric Pierret work which itself was forked from Kushal Das original work. Some search engines might show the last two repos as the 1st result. It may take some time for them to show the current packaged collaborative repo as their 1st result. - Issues or bugs should be reported to github.com/QubesOS/qubes-issues. Please do not open issues in any of the development repositories mentioned in previous point.
- There is a dedicated forum thread for
qubes-ansible. Good for discussions which are better suited for forum rather than Github. - There is documentation on readthedoc. But it is kinda outdated in many places. As an example, it advises on cloning Kushal Das original work as current upstream development branch.
