When Debian or Fedora is updated, an error “Denied qubes.UpdateProxy” is displayed. I chose to update qubes through Whonix with tor and when I tried to take a look at Global Settings/config where that setting is, it flickers on and then turns off. Whonix WS and GW update just fine.
If Debian and Fedora were not updated over tor, what would be the disadvantage? Debian can be configured to use tor onion repositories. The template could just be Kicksecure to begin with. Fedora does not have this option, although there are onion repos for Centos (lysator SE).
So the way forward if no one knows how to fix the Update Proxy is to configure D&F updates through firewall, onionizing D and making sure F is dnf5 (gpg signing) and https sources selected of course? But then the Qubes update mechanism is not in places and templates are not supposed to be directly network connected. Dates that cannot be disrupted is the goal.
So just install without updates over tor? Whonix updates over tor anyway.