Salt errors with a debian based management dispvm

General Discussion
1

Thanks to good work by @ephile, we have identified an issue with the
updated salt and salt-common packages.
If you use a Debian based management_disposable, (default-mgmt-dvm by
default), then some salt states will fail when these packages are
installed.
In particular, states that use file.managed to copy files in to target
templates or qubes will fail.

The templates ship with Salt version 3006.4-2, which works fine. If you
update to salt 3006.5-1, the states will fail. The solution is to put a
Hold on the Salt and Salt-common packages - you can do this in aptitude
by selecting the package and marking it with = , or you can use
sudo apt-mark hold salt salt-common at the command line in the
template.
Now when you update the template the troublesome updated packages will
not be installed.

If you have already updated the template, then you can downgrade the
packages to the working one:
sudo apt install salt=3006.4-2

2

Thanks for this info.

Considering you say “identified an issue”, i.e. assuming it is yet to be fixed, how will we know when to “unhold” the particular package?

3

You can track the issue here:

4

I (or some other kind soul) will announce it here, with instructions on
how to unhold packages.

I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.

5

Thank you both!

6

It was @ephile who did all the hard work.

I never presume to speak for the Qubes team. When I comment in the Forum I speak for myself.
7

It might be a good idea to have a short temporary note about all that in the relevant section of the docs.