Hi, I have been using Qubes for a while, I like it, but updating and networking makes me puzzled
I wanted to upgrade my Whonix templates so I opened the Qubes updater tool. Updating whonix-gw went just fine after I set up Tor connection.
Then whonix-ws update. First time the whole computer crashed. No kernel panics or errors or anything, just black screens and instant reboot.
Second try, the upgrade failed and there were errors of failed connection or unable to fetch stuff and so on. Third try, failed too but this time the Qubes updater announced new updates for Whonix-ws. On my fourth try the upgrade was finally successful.
The crash was very suspicious, like how would that happen just during Whonix template updates and why did it reboot instantly? Maybe I’m paranoid but I instantly thought about some weird exploits going on??
Also the whole update process for whonix templates looks very complex. First it starts the disposable mgmt VM like any other update. Then the template itself, then sys-whonix. So the update happens over Tor, via sys-whonix I see, but how does the template or mgmt VM know that it must use sys-whonix for network?
I mean, anon-whonix has sys-whonix as NetVM but the templates only have “n/a” as their NetVM. The setting to use sys-whonix is hidden somewhere?
How does the update system work overall? Dom0 updates are downloaded in sys-firewall and moved into Dom0 but how about standard templates updates, or whonix templates?
What if you want Tor over VPN and set up another qube for VPN routing, set sys-whonix use this qube as NetVM: can you be sure that all whonix updates go over Tor and this VPN still?
ANd how about installing or updating software in normal templates? You start a terminal in the template and use dnf/apt, but NetVM of templates is N/A. How are the packages downloaded?
One more thing, the whonix system check dialog tells you to update via commands - open terminal in the whonix template and use “upgrade-nonroot”. Not Qubes updater tool. In Qubes documentation it’s recommended to use the Qubes updater.