Update wohnix- nach Update OS 4.3

[Peter]

Nach dem Update auf OS 4.3 habe ich Fehler beim Update von wohnix-gatewai-17 und -workstation.

Updating whonix-gateway-17
Refreshing package info
Refreshing available packages.
Fail to refresh InRelease: tor+https://deb.whonix.org bookworm InRelease from gpgv:/var/lib/apt/lists/partial/deb.whonix.org_dists_bookworm_InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com bookworm InRelease from gpgv:/var/lib/apt/lists/partial/deb.kicksecure.com_dists_bookworm_InRelease
Refreshed.
W:An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.whonix.org bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, W:An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.kicksecure.com bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Failed to fetch tor+https://deb.kicksecure.com/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Failed to fetch tor+https://deb.whonix.org/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Some index files failed to download. They have been ignored, or old ones used instead.
Get:1 tor+https://deb.whonix.org bookworm InRelease [61.2 kB]
Hit:2 tor+https://deb.debian.org/debian bookworm InRelease
Err:1 tor+https://deb.whonix.org bookworm InRelease
The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
Hit:3 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease
Hit:4 Index of /r4.3/vm/ bookworm InRelease
Get:5 tor+https://deb.kicksecure.com bookworm InRelease [62.0 kB]
Hit:6 tor+https://deb.debian.org/debian bookworm-updates InRelease
Hit:7 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease
Err:5 tor+https://deb.kicksecure.com bookworm InRelease
The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
Hit:8 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Hit:9 tor+https://deb.debian.org/debian bookworm-backports InRelease
Reading package lists…
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.whonix.org bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.kicksecure.com bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Failed to fetch tor+https://deb.kicksecure.com/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Failed to fetch tor+https://deb.whonix.org/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Some index files failed to download. They have been ignored, or old ones used instead.

Was könnte das Problem sein?

[TheGardner]

Die Kicksecure Zertifikate sind abgelaufen.
Du lädst sie Dir hier (Darknet/Clearweb - was immer Du möchtest):

• http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/keys/derivative.asc
• https://www.kicksecure.com/keys/derivative.asc

aktuell wieder runter (fingerprint 916B 8D99 C38E AF5E 8ADC 7A2A 8D66 066A 2EEA CCDA) und kopierst/verschiebst sie dann in (beide) Templates unter

/usr/share/keyrings/

und bestätigst das Überschreiben mit JA.
Anschließend kannst Du sofort die Updates wieder anstoßen und es geht wie von Geisterhand wieder…

whonix-18 ist unter 4.3 jetzt eigentlich aktuell…

[Peter]

@TheGardner

keyrings

Danke für die schnelle Antwort. Aber das Verzeichniss keyrings ist schreibgeschützt da kann ich nichts rein kopieren. Es gibt sicher noch ein Weg?

[corny]

Use sudo for command that is read only

In dom0

Run qvm-run -u root

Whonix-workstatuion-17: Cant use sudo “permission denied: sudo” - on brand new template

What user are you logged in as? “user”, “root”, or “sysmaint”? In dom0 terminal you should be opening your Whonix TemplateVM terminal, or Whonix AppVM Terminal using this syntax: qvm-run -u root Whonix-TemplateVM-Name xfce4-terminal or qvm-run -u root Whonix-AppVM-Name xfce4-terminal Try that and you should be logged in as root, and be able to run commands.

[Peter]

Danke euch hat funktioniert und ich habe viel gelernt.
Warum ist das Problem entstanden sollten sich die Zertifikate nicht selber erneuern?

[corny]

Es war ein Fehler, sie haben einen GPG-Schlüssel mit Ablaufdatum erstellt. From horse’s mouth (verwendete Übersetzungs-App)

EXPKEYSIG - Error GPG key Whonix

[Peter]

Aha ok Danke

[alfonsius]

Danke, es hat funktioniert für mich auch

[cyberclown]

Seit dem letzten Upgrade von 4.2 auf 4.3 (welches zuerst einmal gut aussah …) bekomme ich generell keine Updates mehr durch (egal welche VM):

Updating whonix-gateway-17
ERROR (exception Command ‘cat > /run/qubes-update/agent.tar.gz’ returned non-zero exit status 1.)

Gleiche Meldung auch für andere VMs …

Kann jemand helfen?

[TheGardner]

Ich würde wahrscheinlich erstmal versuchen im 4.3 die (dort mitgelieferten) Versionen (whonix-18 und debian-13) herunter zu laden und zu schauen, ob diese sich aktualisieren lassen. Hast Du das schon getan und funktioniert das auch nicht, dann ist etwas an der Update Funktion fehlerhaft.
Der nächste Schritt wäre dann einmal zu versuchen, die Update-VM in der Global Config zu ändern - also ist es dort sys-firewall, dann mal in sys-whonix ändern und/oder umgedreht…

[lars-qubes]

Error updating qubes cat > /run/qubes-update/agent.tar.gz

Hi Everyone and good evening! This is a new one, not too sure where to start troubleshooting. I get this error on some qubes today, when updating. Dom0 took its update w/o fail. ERROR (exception Command ‘cat > /run/qubes-update/agent.tar.gz’ returned non-zero exit status 1.) Any ideas or suggestions? Thanks!

Der Fehler ist bekannt und es gibt inzwischen einige Threads dazu hier im Forum (s.o.)

[cyberclown]

Das Kopieren der Keys hatte ich versucht - aber ich bekomme immer noch keine Tor Verbindung für das Update von Whonix*17 hin (obwohl Templates frisch runtergeladen …):

Updating whonix-gateway-17
gpg: WARNING: no command supplied. Trying to guess what you mean …
Refreshing package info
Refreshing available packages.
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-fasttrack/InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org bookworm InRelease from tor+https://deb.whonix.org/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-backports-staging/InRelease
Fail to refresh InRelease: Index of /r4.3/vm/ bookworm InRelease from https://deb.qubes-os.org/r4.3/vm/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm InRelease from tor+https://deb.debian.org/debian/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com bookworm InRelease from tor+https://deb.kicksecure.com/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm-updates InRelease from tor+https://deb.debian.org/debian/dists/bookworm-updates/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian-security bookworm-security InRelease from tor+https://deb.debian.org/debian-security/dists/bookworm-security/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm-backports InRelease from tor+https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-fasttrack/InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org bookworm InRelease from tor+https://deb.whonix.org/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-backports-staging/InRelease
Fail to refresh InRelease: Index of /r4.3/vm/ bookworm InRelease from https://deb.qubes-os.org/r4.3/vm/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm InRelease from tor+https://deb.debian.org/debian/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com bookworm InRelease from tor+https://deb.kicksecure.com/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm-updates InRelease from tor+https://deb.debian.org/debian/dists/bookworm-updates/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian-security bookworm-security InRelease from tor+https://deb.debian.org/debian-security/dists/bookworm-security/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm-backports InRelease from tor+https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-fasttrack/InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org bookworm InRelease from tor+https://deb.whonix.org/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-backports-staging/InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com bookworm InRelease from tor+https://deb.kicksecure.com/dists/bookworm/InRelease
Fail to refresh InRelease: Index of /r4.3/vm/ bookworm InRelease from https://deb.qubes-os.org/r4.3/vm/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm InRelease from tor+https://deb.debian.org/debian/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm-updates InRelease from tor+https://deb.debian.org/debian/dists/bookworm-updates/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian-security bookworm-security InRelease from tor+https://deb.debian.org/debian-security/dists/bookworm-security/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm-backports InRelease from tor+https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-fasttrack/InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org bookworm InRelease from tor+https://deb.whonix.org/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-backports-staging/InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com bookworm InRelease from tor+https://deb.kicksecure.com/dists/bookworm/InRelease
Fail to refresh InRelease: Index of /r4.3/vm/ bookworm InRelease from https://deb.qubes-os.org/r4.3/vm/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm InRelease from tor+https://deb.debian.org/debian/dists/bookworm/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm-updates InRelease from tor+https://deb.debian.org/debian/dists/bookworm-updates/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian-security bookworm-security InRelease from tor+https://deb.debian.org/debian-security/dists/bookworm-security/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian bookworm-backports InRelease from tor+https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Refreshed.
E:Failed to fetch tor+https://deb.debian.org/debian/dists/bookworm/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.debian.org/debian/dists/bookworm-updates/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.debian.org/debian-security/dists/bookworm-security/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.debian.org/debian/dists/bookworm-backports/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-fasttrack/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-backports-staging/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.kicksecure.com/dists/bookworm/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.whonix.org/dists/bookworm/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch https://deb.qubes-os.org/r4.3/vm/dists/bookworm/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Some index files failed to download. They have been ignored, or old ones used instead.
Ign:1 Index of /r4.3/vm/ bookworm InRelease
Ign:2 tor+https://deb.debian.org/debian bookworm InRelease
Ign:3 tor+https://deb.whonix.org bookworm InRelease
Ign:4 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease
Ign:5 tor+https://deb.kicksecure.com bookworm InRelease
Ign:6 tor+https://deb.debian.org/debian bookworm-updates InRelease
Ign:7 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease
Ign:8 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Ign:9 tor+https://deb.debian.org/debian bookworm-backports InRelease
Ign:2 tor+https://deb.debian.org/debian bookworm InRelease
Ign:3 tor+https://deb.whonix.org bookworm InRelease
Ign:4 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease
Ign:5 tor+https://deb.kicksecure.com bookworm InRelease
Ign:1 Index of /r4.3/vm/ bookworm InRelease
Ign:6 tor+https://deb.debian.org/debian bookworm-updates InRelease
Ign:7 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease
Ign:8 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Ign:9 tor+https://deb.debian.org/debian bookworm-backports InRelease
Ign:2 tor+https://deb.debian.org/debian bookworm InRelease
Ign:3 tor+https://deb.whonix.org bookworm InRelease
Ign:4 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease
Ign:1 Index of /r4.3/vm/ bookworm InRelease
Ign:5 tor+https://deb.kicksecure.com bookworm InRelease
Ign:6 tor+https://deb.debian.org/debian bookworm-updates InRelease
Ign:7 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease
Ign:8 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Ign:9 tor+https://deb.debian.org/debian bookworm-backports InRelease
Err:2 tor+https://deb.debian.org/debian bookworm InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:3 tor+https://deb.whonix.org bookworm InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:4 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:1 Index of /r4.3/vm/ bookworm InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:5 tor+https://deb.kicksecure.com bookworm InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:6 tor+https://deb.debian.org/debian bookworm-updates InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:7 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:8 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:9 tor+https://deb.debian.org/debian bookworm-backports InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Reading package lists…
E: Failed to fetch tor+https://deb.debian.org/debian/dists/bookworm/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.debian.org/debian/dists/bookworm-updates/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.debian.org/debian-security/dists/bookworm-security/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.debian.org/debian/dists/bookworm-backports/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-fasttrack/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://fasttrack.debian.net/debian-fasttrack/dists/bookworm-backports-staging/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.kicksecure.com/dists/bookworm/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.whonix.org/dists/bookworm/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch https://deb.qubes-os.org/r4.3/vm/dists/bookworm/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Some index files failed to download. They have been ignored, or old ones used instead.

Das Whonix*18 hatte ich auch versucht - aber auch da ist kein Update möglich

[TheGardner]

Noch mal zur Info: Wenn Du schon 4.3 hast, dann funktionieren nur noch whonix 18 Qubes. Hast Du noch 4.2.4 sollten 18er Qubes gar nicht verfügbar sein.

Fazit: Du müsstest für /auf 4.3 also nochmal Whonix 18 runterladen und ggf. die Fehlermeldung(en) hier veröffentlichen.

[lars-qubes]

^^ genau das.

1. in dom0 die einstellungen der AppVMs sichern

qvm-prefs sys-whonix > prefs1
qvm-prefs anon-whonix > prefs2
qvm-prefs whonix-workstation-18-dvm > prefs3

2. AppVMs löschen

sys-whonix
anon-whonix
whonix-workstation-18-dvm
whonix-*-17-dvm

3. Templates löschen

Dann alle vorhandenen Templates von whonix 17 und 18 löschen. das sind dann:

whonix-gateway-18
whonix-workstation-18

(dito mit -17 am Ende).

Danach die “18er Templates” neu laden / installieren und die AppVMs entsprechend mit den gespeicherten prefs (s.o.) neu aufsetzen.

[cyberclown]

Ok, habe jetzt Whonix 18 runtergeladen - die Updates funktionieren auch da nicht:

Updating whonix-gateway-18
Refreshing package info
Refreshing available packages.
Fail to refresh InRelease: Index of /r4.3/vm/ trixie InRelease from https://deb.qubes-os.org/r4.3/vm/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack trixie-fasttrack InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-fasttrack/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie InRelease from tor+https://deb.debian.org/debian/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org trixie InRelease from tor+https://deb.whonix.org/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com trixie InRelease from tor+https://deb.kicksecure.com/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack trixie-backports-staging InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-backports-staging/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie-updates InRelease from tor+https://deb.debian.org/debian/dists/trixie-updates/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie-backports InRelease from tor+https://deb.debian.org/debian/dists/trixie-backports/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian-security trixie-security InRelease from tor+https://deb.debian.org/debian-security/dists/trixie-security/InRelease
Fail to refresh InRelease: Index of /r4.3/vm/ trixie InRelease from https://deb.qubes-os.org/r4.3/vm/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org trixie InRelease from tor+https://deb.whonix.org/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com trixie InRelease from tor+https://deb.kicksecure.com/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack trixie-backports-staging InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-backports-staging/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack trixie-fasttrack InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-fasttrack/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian-security trixie-security InRelease from tor+https://deb.debian.org/debian-security/dists/trixie-security/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie-backports InRelease from tor+https://deb.debian.org/debian/dists/trixie-backports/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie-updates InRelease from tor+https://deb.debian.org/debian/dists/trixie-updates/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie InRelease from tor+https://deb.debian.org/debian/dists/trixie/InRelease
Fail to refresh InRelease: Index of /r4.3/vm/ trixie InRelease from https://deb.qubes-os.org/r4.3/vm/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org trixie InRelease from tor+https://deb.whonix.org/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com trixie InRelease from tor+https://deb.kicksecure.com/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack trixie-fasttrack InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-fasttrack/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack trixie-backports-staging InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-backports-staging/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie InRelease from tor+https://deb.debian.org/debian/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie-updates InRelease from tor+https://deb.debian.org/debian/dists/trixie-updates/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie-backports InRelease from tor+https://deb.debian.org/debian/dists/trixie-backports/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian-security trixie-security InRelease from tor+https://deb.debian.org/debian-security/dists/trixie-security/InRelease
Fail to refresh InRelease: Index of /r4.3/vm/ trixie InRelease from https://deb.qubes-os.org/r4.3/vm/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org trixie InRelease from tor+https://deb.whonix.org/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com trixie InRelease from tor+https://deb.kicksecure.com/dists/trixie/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack trixie-backports-staging InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-backports-staging/InRelease
Fail to refresh InRelease: tor+https://fasttrack.debian.net/debian-fasttrack trixie-fasttrack InRelease from tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-fasttrack/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian-security trixie-security InRelease from tor+https://deb.debian.org/debian-security/dists/trixie-security/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie-backports InRelease from tor+https://deb.debian.org/debian/dists/trixie-backports/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie-updates InRelease from tor+https://deb.debian.org/debian/dists/trixie-updates/InRelease
Fail to refresh InRelease: tor+https://deb.debian.org/debian trixie InRelease from tor+https://deb.debian.org/debian/dists/trixie/InRelease
Refreshed.
E:Failed to fetch tor+https://deb.debian.org/debian/dists/trixie/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.debian.org/debian/dists/trixie-updates/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.debian.org/debian/dists/trixie-backports/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.debian.org/debian-security/dists/trixie-security/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-fasttrack/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-backports-staging/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.kicksecure.com/dists/trixie/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch tor+https://deb.whonix.org/dists/trixie/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Failed to fetch https://deb.qubes-os.org/r4.3/vm/dists/trixie/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082], E:Some index files failed to download. They have been ignored, or old ones used instead.
Ign:1 tor+https://deb.debian.org/debian trixie InRelease
Ign:2 tor+https://deb.whonix.org trixie InRelease
Ign:3 Index of /r4.3/vm/ trixie InRelease
Ign:4 tor+https://deb.kicksecure.com trixie InRelease
Ign:5 tor+https://fasttrack.debian.net/debian-fasttrack trixie-fasttrack InRelease
Ign:6 tor+https://deb.debian.org/debian trixie-updates InRelease
Ign:7 tor+https://fasttrack.debian.net/debian-fasttrack trixie-backports-staging InRelease
Ign:8 tor+https://deb.debian.org/debian trixie-backports InRelease
Ign:9 tor+https://deb.debian.org/debian-security trixie-security InRelease
Ign:4 tor+https://deb.kicksecure.com trixie InRelease
Ign:2 tor+https://deb.whonix.org trixie InRelease
Ign:3 Index of /r4.3/vm/ trixie InRelease
Ign:7 tor+https://fasttrack.debian.net/debian-fasttrack trixie-backports-staging InRelease
Ign:5 tor+https://fasttrack.debian.net/debian-fasttrack trixie-fasttrack InRelease
Ign:9 tor+https://deb.debian.org/debian-security trixie-security InRelease
Ign:8 tor+https://deb.debian.org/debian trixie-backports InRelease
Ign:6 tor+https://deb.debian.org/debian trixie-updates InRelease
Ign:1 tor+https://deb.debian.org/debian trixie InRelease
Ign:2 tor+https://deb.whonix.org trixie InRelease
Ign:4 tor+https://deb.kicksecure.com trixie InRelease
Ign:3 Index of /r4.3/vm/ trixie InRelease
Ign:5 tor+https://fasttrack.debian.net/debian-fasttrack trixie-fasttrack InRelease
Ign:7 tor+https://fasttrack.debian.net/debian-fasttrack trixie-backports-staging InRelease
Ign:1 tor+https://deb.debian.org/debian trixie InRelease
Ign:6 tor+https://deb.debian.org/debian trixie-updates InRelease
Ign:8 tor+https://deb.debian.org/debian trixie-backports InRelease
Ign:9 tor+https://deb.debian.org/debian-security trixie-security InRelease
Err:3 Index of /r4.3/vm/ trixie InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:4 tor+https://deb.kicksecure.com trixie InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:2 tor+https://deb.whonix.org trixie InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:7 tor+https://fasttrack.debian.net/debian-fasttrack trixie-backports-staging InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:5 tor+https://fasttrack.debian.net/debian-fasttrack trixie-fasttrack InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:9 tor+https://deb.debian.org/debian-security trixie-security InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:8 tor+https://deb.debian.org/debian trixie-backports InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:6 tor+https://deb.debian.org/debian trixie-updates InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Err:1 tor+https://deb.debian.org/debian trixie InRelease
Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
Reading package lists…
E: Failed to fetch tor+https://deb.debian.org/debian/dists/trixie/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.debian.org/debian/dists/trixie-updates/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.debian.org/debian/dists/trixie-backports/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.debian.org/debian-security/dists/trixie-security/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-fasttrack/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://fasttrack.debian.net/debian-fasttrack/dists/trixie-backports-staging/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.kicksecure.com/dists/trixie/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch tor+https://deb.whonix.org/dists/trixie/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Failed to fetch https://deb.qubes-os.org/r4.3/vm/dists/trixie/InRelease Invalid response from proxy: HTTP/1.1 502 Unable to connect to upstream proxy Server: tinyproxy/1.11.1 Content-Type: text/html Connection: close [IP: 127.0.0.1 8082]
E: Some index files failed to download. They have been ignored, or old ones used instead.

Anscheinend ist meine Tor Verbindung geschrottet?
… die Meldung hatte ich beim Updateversuch der Whonix-17 auch schon

Oder erst mal den Wechsel nach 18 wagen?

[cyberclown]

Genau diese 4 App-VMs löschen?
Die ganzen anderen App-VMs, die ich mir für verschiedene Bereiche erzeugt habe, bleiben stehen, oder?

@all Sorry für die naive Fragerei, aber ist mein erstes Upgrade …

[lars-qubes]

Nochmal einen Schritt zurück. Du hast also die whonix 18 templates über den template manager geladen und die entsprechenden appVMs daraus erzeugt?

Warum lässt du überhaupt ein update laufen, das regelt qubes sehr gut selbst?

Und…hast du die manuellen updates in den templates laufen gelassen, wie vorgesehen? (nicht in den app VMs.)

Hier ist die vollständige ANleitung:

How-to: Install Qubes-Whonix

[cyberclown]

Ja, die 18-er Templates über den Template Manager gezogen, korrekt.
Aber die App-VMs nicht neu erzeugt …

Updates: Habe ich nicht bewusst laufen lassen, aber wenn im XFCE das Icon erscheint, dass Updates da sind, reagiere ich darauf:
Und da sind die Whonix-* Qubes vorselektiert und wollen also aktualisiert werden - bei den anderen Templates für fc42 bzw. debian13 klappt das auch.

Gut ich kann die Whonix* VMs auch abwählen, aber dann bleibt das Icon auch bestehen und mahnt zu Updates …

Mein Eindruck ist, dass da Qubes nichts von selbst regelt …

Danke für den Link: Wer liest hat doch Vorteile

[lars-qubes]

Ok, immerhin läuft es jetzt bei dir. Bleibt die Frage awrum die “Qubes Updates” über das “xfce Icon” (ich weiß den offiziellen Namen nicht dafür) nicht laufen.

Auf meiner Maschine ist das bisher problemlos der Fall gewesen.

[cyberclown]

Gut, nachdem 4.3 anscheinend läuft, sollte ich die 17er Whonix Qubes loswerden. Wie mache ich das ohne Risiko?

Ich hatte verscuth mit dem Template-Manager von 17 auf 18 umzustellen, aber das ging nicht, weil sys-whonix aktiv war. Dazu einfach sys-whonix runterfahren?

Oder welches Vorgehen empfehlt ihr mir?

Und der das XFCE Updater Icon nervt auch noch mit den kaputten Whonix Updates …