Updating of "standalone VM" fail

[randomguy]

Hi!

Pretty new user here, so please be patient.

I created a “standalone VM” dedicated to run VPN software only and provide this VPN as NetVM to other VMs.

Everything works fine, except the Update process. The update log is included at the bottom of this post.

Please advise and let me know if you need further info from me.

Cheers!

Updating sys-vpn
Refreshing package info
Refreshing available packages.
Fail to refresh InRelease: Index of /r4.2/vm/ bookworm InRelease from https://deb.qubes-os.org/r4.2/vm/dists/bookworm/InRelease
Fail to refresh InRelease: Index of /debian bookworm InRelease from https://deb.debian.org/debian/dists/bookworm/InRelease
Fail to refresh InRelease: https://deb.debian.org/debian-security bookworm-security InRelease from https://deb.debian.org/debian-security/dists/bookworm-security/InRelease
Fail to refresh InRelease: Index of /r4.2/vm/ bookworm InRelease from https://deb.qubes-os.org/r4.2/vm/dists/bookworm/InRelease
Fail to refresh InRelease: Index of /debian bookworm-backports InRelease from https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Fail to refresh InRelease: Index of /r4.2/vm/ bookworm InRelease from https://deb.qubes-os.org/r4.2/vm/dists/bookworm/InRelease
Fail to refresh InRelease: Index of /debian bookworm InRelease from https://deb.debian.org/debian/dists/bookworm/InRelease
Fail to refresh InRelease: Index of /r4.2/vm/ bookworm InRelease from https://deb.qubes-os.org/r4.2/vm/dists/bookworm/InRelease
Fail to refresh InRelease: https://deb.debian.org/debian-security bookworm-security InRelease from https://deb.debian.org/debian-security/dists/bookworm-security/InRelease
Fail to refresh InRelease: Index of /debian bookworm-backports InRelease from https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Fail to refresh InRelease: Index of /debian bookworm InRelease from https://deb.debian.org/debian/dists/bookworm/InRelease
Fail to refresh InRelease: https://deb.debian.org/debian-security bookworm-security InRelease from https://deb.debian.org/debian-security/dists/bookworm-security/InRelease
Fail to refresh InRelease: Index of /debian bookworm-backports InRelease from https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Fail to refresh InRelease: Index of /debian bookworm InRelease from https://deb.debian.org/debian/dists/bookworm/InRelease
Fail to refresh InRelease: https://deb.debian.org/debian-security bookworm-security InRelease from https://deb.debian.org/debian-security/dists/bookworm-security/InRelease
Fail to refresh InRelease: Index of /debian bookworm-backports InRelease from https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Refreshed.
E:Failed to fetch https://deb.debian.org/debian/dists/bookworm/InRelease Temporary failure resolving ‘deb.debian.org’, E:Failed to fetch https://deb.debian.org/debian-security/dists/bookworm-security/InRelease Temporary failure resolving ‘deb.debian.org’, E:Failed to fetch https://deb.debian.org/debian/dists/bookworm-backports/InRelease Temporary failure resolving ‘deb.debian.org’, E:Failed to fetch https://deb.qubes-os.org/r4.2/vm/dists/bookworm/InRelease Temporary failure resolving ‘deb.qubes-os.org’, E:Some index files failed to download. They have been ignored, or old ones used instead.
Ign:1 Index of /debian bookworm InRelease
Ign:2 Index of /r4.2/vm/ bookworm InRelease
Ign:3 https://deb.debian.org/debian-security bookworm-security InRelease
Ign:2 Index of /r4.2/vm/ bookworm InRelease
Ign:4 Index of /debian bookworm-backports InRelease
Ign:2 Index of /r4.2/vm/ bookworm InRelease
Ign:1 Index of /debian bookworm InRelease
Err:2 Index of /r4.2/vm/ bookworm InRelease
Temporary failure resolving ‘deb.qubes-os.org’
Ign:3 https://deb.debian.org/debian-security bookworm-security InRelease
Ign:4 Index of /debian bookworm-backports InRelease
Ign:1 Index of /debian bookworm InRelease
Ign:3 https://deb.debian.org/debian-security bookworm-security InRelease
Ign:4 Index of /debian bookworm-backports InRelease
Err:1 Index of /debian bookworm InRelease
Temporary failure resolving ‘deb.debian.org’
Err:3 https://deb.debian.org/debian-security bookworm-security InRelease
Temporary failure resolving ‘deb.debian.org’
Err:4 Index of /debian bookworm-backports InRelease
Temporary failure resolving ‘deb.debian.org’
Reading package lists…
E: Failed to fetch https://deb.debian.org/debian/dists/bookworm/InRelease Temporary failure resolving ‘deb.debian.org’
E: Failed to fetch https://deb.debian.org/debian-security/dists/bookworm-security/InRelease Temporary failure resolving ‘deb.debian.org’
E: Failed to fetch https://deb.debian.org/debian/dists/bookworm-backports/InRelease Temporary failure resolving ‘deb.debian.org’
E: Failed to fetch https://deb.qubes-os.org/r4.2/vm/dists/bookworm/InRelease Temporary failure resolving ‘deb.qubes-os.org’
E: Some index files failed to download. They have been ignored, or old ones used instead.

[Atrate]

@randomguy

I created a “standalone VM” dedicated to run VPN software only and provide this VPN as NetVM to other VMs.

I know this isn’t an answer to your question, but why use a standalone in this case? Many VPN setups are achievable without problems using AppVMs.

I’m saying this as experience has taught me that avoiding the usage of StandaloneVMs is a good practice, otherwise it can get messy.

[Atrate]

If your VPN is based on Wireguard configs, @solene has written a really good guide on how to set that up easily and securely.

Wireguard VPN setup

Good news, with fedora-38 the network manager supports Wireguard out of the box! The only thing required are extra firewall rules in the VPN qube, as explained in the community documentation about VPN. What you’ll need This guide assumes you are using a VPN service that has wireguard support, most of them do, but you can also add your own if you have a server. ProtonVPN has a free plan, it has limits but gives you a fully working VPN and they support WireGuard. This pro…

[maurice1]

Thx for both posts. I’ll check that out later.

[Tezeria]

@Atrate

I know this isn’t an answer to your question, but why use a standalone in this case? Many VPN setups are achievable without problems using AppVMs.

I was asking myself the same question