[qubes-users] help: errors in fedora-39-minimal upgrade

Boryeu_Mao · February 18, 2024, 5:08am

I attempted to upgrade the fedora-39-minimal template as follows:

sudo qubesctl --show-output --skip-dom0 --targets=fedora-39-minimal-clone-1 state.sls update.qubes-vm

But the process results in errors (see attached file qubesctl-f39). This is for R4.2. Please help. Thank you.

(Attachment qubesctl-f39 is missing)

Boryeu_Mao · February 21, 2024, 6:00pm

Some useful information at

github.com/QubesOS/qubes-issues

fedora-39 template vms cannot be targeted by salt because of incorrect import (python 3.12, salt patch required)

opened 10:09AM - 29 Dec 23 UTC

vladimir-lu

T: bug C: mgmt C: Fedora P: default needs diagnosis affects-4.2

### Qubes OS release 4.2.0 fedora-39-minimal template ### Brief summary … When targeting a fedora 39 template, run into upstream issue https://github.com/saltstack/salt/issues/65360 . I expect it will be fixed in salt 3007 based on the comments on the issue. ### Steps to reproduce 1. Install a fedora 39 template (fedora-39-minimal) 2. Try to manage packages using salt 3. Get error about no package called 'backports' ### Expected behavior 1. Install a fedora 39 template 2. Try to manage packages using salt 3. Package installation/removal succeeds ### Actual behavior Error message: ``` [ERROR ] An un-handled exception was caught by Salt's global exception handler: ModuleNotFoundError: No module named 'backports' Traceback (most recent call last): File "/var/tmp/.root_dd8a91_salt/salt-call", line 27, in <module> salt_call() File "/var/tmp/.root_dd8a91_salt/pyall/salt/scripts.py", line 437, in salt_call import salt.cli.call File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/call.py", line 3, in <module> import salt.cli.caller File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/caller.py", line 12, in <module> import salt.channel.client File "/var/tmp/.root_dd8a91_salt/pyall/salt/channel/client.py", line 13, in <module> import salt.crypt File "/var/tmp/.root_dd8a91_salt/pyall/salt/crypt.py", line 26, in <module> import salt.payload File "/var/tmp/.root_dd8a91_salt/pyall/salt/payload.py", line 12, in <module> import salt.loader.context File "/var/tmp/.root_dd8a91_salt/pyall/salt/loader/__init__.py", line 15, in <module> import salt.config File "/var/tmp/.root_dd8a91_salt/pyall/salt/config/__init__.py", line 107, in <module> _DFLT_IPC_WBUFFER = int(_gather_buffer_space() * 0.5) ^^^^^^^^^^^^^^^^^^^^^^ File "/var/tmp/.root_dd8a91_salt/pyall/salt/config/__init__.py", line 95, in _gather_buffer_space import salt.grains.core File "/var/tmp/.root_dd8a91_salt/pyall/salt/grains/core.py", line 30, in <module> import salt.modules.cmdmod File "/var/tmp/.root_dd8a91_salt/pyall/salt/modules/cmdmod.py", line 32, in <module> import salt.utils.templates File "/var/tmp/.root_dd8a91_salt/pyall/salt/utils/templates.py", line 21, in <module> import salt.utils.http File "/var/tmp/.root_dd8a91_salt/pyall/salt/utils/http.py", line 27, in <module> import salt.ext.tornado.simple_httpclient File "/var/tmp/.root_dd8a91_salt/pyall/salt/ext/tornado/simple_httpclient.py", line 9, in <module> from salt.ext.tornado.http1connection import HTTP1Connection, HTTP1ConnectionParameters File "/var/tmp/.root_dd8a91_salt/pyall/salt/ext/tornado/http1connection.py", line 31, in <module> from salt.ext.tornado import iostream File "/var/tmp/.root_dd8a91_salt/pyall/salt/ext/tornado/iostream.py", line 41, in <module> from salt.ext.tornado.netutil import ssl_wrap_socket, ssl_match_hostname, SSLCertificateError, _client_ssl_defaults, _server_ssl_defaults File "/var/tmp/.root_dd8a91_salt/pyall/salt/ext/tornado/netutil.py", line 57, in <module> import backports.ssl_match_hostname ModuleNotFoundError: No module named 'backports' ``` ### Workaround Do the equivalent of `pip3 install backports.ssl_match_hostname` (as mentioned in upstream ticket) or patch salt itself.