I am trying to set up apt-cacher-ng so I can create several templates that get the same updates, and I am having problems. The only tutorial I could find was this one, which I found to be a bit unclear, but that I managed to follow up to step 3, where it seems like it is asking me to do something for fedora (yum)? Anyway, I decided to skip that step, but the update proxy is not working.
I got this error in the debian-11 template:
user@debian-11:~$ sudo apt update
Err:1 https://deb.qubes-os.org/r4.1/vm bullseye InRelease
Invalid response from proxy: HTTP/1.0 403 CONNECT denied (ask the admin to allow HTTPS tunnels) [IP: 127.0.0.1 8082]
Err:2 https://deb.debian.org/debian bullseye InRelease
Invalid response from proxy: HTTP/1.0 403 CONNECT denied (ask the admin to allow HTTPS tunnels) [IP: 127.0.0.1 8082]
Err:3 https://deb.debian.org/debian-security bullseye-security InRelease
Invalid response from proxy: HTTP/1.0 403 CONNECT denied (ask the admin to allow HTTPS tunnels) [IP: 127.0.0.1 8082]
Reading package lists... Done
E: Failed to fetch https://deb.debian.org/debian/dists/bullseye/InRelease Invalid response from proxy: HTTP/1.0 403 CONNECT denied (ask the admin to allow HTTPS tunnels) [IP: 127.0.0.1 8082]
E: Failed to fetch https://deb.debian.org/debian-security/dists/bullseye-security/InRelease Invalid response from proxy: HTTP/1.0 403 CONNECT denied (ask the admin to allow HTTPS tunnels) [IP: 127.0.0.1 8082]
E: Failed to fetch https://deb.qubes-os.org/r4.1/vm/dists/bullseye/InRelease Invalid response from proxy: HTTP/1.0 403 CONNECT denied (ask the admin to allow HTTPS tunnels) [IP: 127.0.0.1 8082]
E: Some index files failed to download. They have been ignored, or old ones used instead.
systemctl status apt-cacher-ng
reports the cacher as running, and I put the following in /etc/qubes/policy.d/30-user.policy
in dom0:
qubes.UpdatesProxy * @type:TemplateVM @default allow target=apt-cacher-ng
apt-cacher-ng is the name of the cacher VM, and it is using sys-whonix as its NetVM.
What might be wrong with my setup? Also, in my opinion, Qubes OS needs much better apt-cacher-ng docs, perhaps it even deserves to be in the User docs?