Updates using whonix for StandalonVM

User Support
1

I am trying to make a StandaloneVM update using whonix. Its not working and any inputs on how to fix this would be helpful. Below are the steps

  1. Create a StandaloneVM using unman jammy template.
  2. Checked “Provides network”
  3. Set “Net Qube” to “none”. (Edit: I set it to none to make sure that the updates are happening using proxy)
  4. Added services “network-manager”, “qubes-update-proxy” and “updates-proxy-setup” to the VM.
  5. Added a line $type:StandaloneVM $default allow,target=sys-whonix to the file /etc/qubes-rpc/policy/qubes.UpdateProxy file in dom0

Getting below error while the StandaloneVM is trying to update

Updating my-vm

Error on updating my-vm: Command '['sudo', 'qubesctl', '--skip-dom0', '--targets=my-vm', '--show-output', 'state.sls', 'update.qubes-vm']' returned non-zero exit status 20.
my-vm:
  ----------
            ID: update
      Function: pkg.uptodate
        Result: False
       Comment: E: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/jammy/InRelease  500  Unable to connect [IP: 127.0.0.1 8082]
                E: Failed to fetch http://archive.canonical.com/ubuntu/dists/jammy/InRelease  500  Unable to connect [IP: 127.0.0.1 8082]
                E: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/jammy-security/InRelease  500  Unable to connect [IP: 127.0.0.1 8082]
                E: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/jammy-updates/InRelease  500  Unable to connect [IP: 127.0.0.1 8082]
                E: Some index files failed to download. They have been ignored,
2

Do you have anything listening on port 8082 on that StandaloneVM?

“updates-proxy-setup” should be enough to update the VM.

3

Thank you. Disabling “qubes-update-proxy” did the trick.

Do you know if I can verify if the updates are happening using whonix? Is there any logs for qubes update?

4

You can use “Onion circuits” which is available on sys-whonix (add it in the applications tab). You’ll see domains and IPs while the updates are going.