I always clone whonix-workstation-17 before installing any non-default packages. One of my clones is not updating (with the Qubes Update tool). The clone in question has only one additional package installed, and is otherwise identical to the default template.
Specifically, even though whonix-workstation-17 was last updated yesterday, whonix-workstation-17-clone was last updated months ago, but says that it was last checked yesterday. This doesn’t make sense, because if the default template has updates available, so should the clone.
Any idea what is happening? Any logs I should provide to help troubleshoot?
[This was initially posted to the Whonix forum here but moved to the Qubes forum at their request]
The updates check is done in the disposable/app qubes.
E.g. you have the anon-whonix-2 app qube based on whonix-workstation-17-clone template.
When you start anon-whonix-2 app qube it’ll use its network connection to check if it has updates available.
If it has updates available anon-whonix-2 will notify dom0 about it and you’ll see that whonix-workstation-17-clone template has updates available.
the update status will be reported as “MAYBE” in Qubes OS updating GUI tool, however there is a setting that will check them by default for update (or attempt to update in case there is nothing to apply in the end) if last update is older than n days ago, the default may be 5 or 8 days, I do not remember.