How to search, reinstall or remove qubes-templates installed via rpm?

411 views
Skip to first unread message

J. Eppler

unread,
Dec 19, 2016, 10:31:48 AM12/19/16
to qubes-users
Hello,

1. How can I search for qubes-templates in dom0 rpm repository? The qubes-dom0-update tool excludes all templates from a search.

2. How can I reinstall qubes-templates which are installed from the dom0 rpm repo?

3. How can I remove qubes-templates which are installed from the dom0 rpm repo?

regards
J. Eppler

Andrew David Wong

unread,
Dec 19, 2016, 2:32:01 PM12/19/16
to J. Eppler, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-12-19 07:31, J. Eppler wrote:
> Hello,
>
> 1. How can I search for qubes-templates in dom0 rpm repository? The qubes-dom0-update tool excludes all templates from a search.
>

$ sudo qubes-dom0-update --action=search qubes-template

This will pass through the terminal output from the UpdateVM, so even
though templates are excluded in the dom0 dnf command, you'll still get
the search results (in red text by default).

Remember that you won't see community templates unless you enable their repo:

$ sudo qubes-dom0-update --enablerepo=qubes-templates-community --action=search qubes-template

> 2. How can I reinstall qubes-templates which are installed from the dom0 rpm repo?
>

https://www.qubes-os.org/doc/reinstall-template/

> 3. How can I remove qubes-templates which are installed from the dom0 rpm repo?
>

Make sure no TemplateBasedVMs are based on the template to be removed.
Then, in dom0:

$ sudo dnf remove <template-package-name>

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=8PMB
-----END PGP SIGNATURE-----

Chris Laprise

unread,
Dec 19, 2016, 6:47:09 PM12/19/16
to Andrew David Wong, J. Eppler, qubes-users
On 12/19/2016 02:31 PM, Andrew David Wong wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 2016-12-19 07:31, J. Eppler wrote:
>> Hello,
>>
>> 1. How can I search for qubes-templates in dom0 rpm repository? The qubes-dom0-update tool excludes all templates from a search.
>>
> $ sudo qubes-dom0-update --action=search qubes-template
>
> This will pass through the terminal output from the UpdateVM, so even
> though templates are excluded in the dom0 dnf command, you'll still get
> the search results (in red text by default).
>
> Remember that you won't see community templates unless you enable their repo:
>
> $ sudo qubes-dom0-update --enablerepo=qubes-templates-community --action=search qubes-template
>
>> 2. How can I reinstall qubes-templates which are installed from the dom0 rpm repo?
>>
> https://www.qubes-os.org/doc/reinstall-template/
>
Note, the "action=reinstall" option will only re-install the same
version of the template, not upgrade it. To upgrade a template (say, to
fix a bug in the Debian template's package manager), you need to follow
the older instructions in the doc.

Alternately, you can get around this limitation and allow an in-place
template upgrade if you're comfortable editing system shell scripts:
https://github.com/QubesOS/qubes-issues/issues/2520#issuecomment-268066923

Chris

J. Eppler

unread,
Dec 22, 2016, 10:33:55 AM12/22/16
to qubes-users, j.ep...@openmailbox.org

> > 1. How can I search for qubes-templates in dom0 rpm repository? The qubes-dom0-update tool excludes all templates from a search.
> >
>
> $ sudo qubes-dom0-update --action=search qubes-template
>
> This will pass through the terminal output from the UpdateVM, so even
> though templates are excluded in the dom0 dnf command, you'll still get
> the search results (in red text by default).
>
> Remember that you won't see community templates unless you enable their repo:
>
> $ sudo qubes-dom0-update --enablerepo=qubes-templates-community --action=search qubes-template

Reading red text is not a really good solution from an usability perspective. What are the reasons to exclude templates from a search in the first place?

> > 3. How can I remove qubes-templates which are installed from the dom0 rpm repo?
> >
>
> Make sure no TemplateBasedVMs are based on the template to be removed.
> Then, in dom0:
>
> $ sudo dnf remove <template-package-name>

Thanks, that is a greate solution.

Andrew David Wong

unread,
Dec 23, 2016, 2:56:25 AM12/23/16
to J. Eppler, qubes-users, Marek Marczykowski-Górecki
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-12-22 07:33, J. Eppler wrote:
>
>>> 1. How can I search for qubes-templates in dom0 rpm repository? The qubes-dom0-update tool excludes all templates from a search.
>>>
>>
>> $ sudo qubes-dom0-update --action=search qubes-template
>>
>> This will pass through the terminal output from the UpdateVM, so even
>> though templates are excluded in the dom0 dnf command, you'll still get
>> the search results (in red text by default).
>>
>> Remember that you won't see community templates unless you enable their repo:
>>
>> $ sudo qubes-dom0-update --enablerepo=qubes-templates-community --action=search qubes-template
>
> Reading red text is not a really good solution from an usability perspective. What are the reasons to exclude templates from a search in the first place?
>

Actually, after further testing, I've found that this doesn't work. Even with `--enablerepo=qubes-templates-community`, I'm only getting the Fedora and Arch templates in search results (not Whonix or Debian). Without `--enablerepo=qubes-templates-community`, I only get the Fedora templates in the search results. So, this method doesn't work. Moreover, the results are inconsistent, since Debian is in the official templates-itl repo, whereas Arch is in the templates-community repo.

Marek, any idea what's going on here?

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=/s9/
-----END PGP SIGNATURE-----

Marek Marczykowski-Górecki

unread,
Dec 23, 2016, 5:49:28 AM12/23/16
to Andrew David Wong, J. Eppler, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, Dec 22, 2016 at 11:56:13PM -0800, Andrew David Wong wrote:
> On 2016-12-22 07:33, J. Eppler wrote:
> >
> >>> 1. How can I search for qubes-templates in dom0 rpm repository? The qubes-dom0-update tool excludes all templates from a search.
> >>>
> >>
> >> $ sudo qubes-dom0-update --action=search qubes-template
> >>
> >> This will pass through the terminal output from the UpdateVM, so even
> >> though templates are excluded in the dom0 dnf command, you'll still get
> >> the search results (in red text by default).
> >>
> >> Remember that you won't see community templates unless you enable their repo:
> >>
> >> $ sudo qubes-dom0-update --enablerepo=qubes-templates-community --action=search qubes-template
> >
> > Reading red text is not a really good solution from an usability perspective. What are the reasons to exclude templates from a search in the first place?
> >
>
> Actually, after further testing, I've found that this doesn't work. Even with `--enablerepo=qubes-templates-community`, I'm only getting the Fedora and Arch templates in search results (not Whonix or Debian). Without `--enablerepo=qubes-templates-community`, I only get the Fedora templates in the search results. So, this method doesn't work. Moreover, the results are inconsistent, since Debian is in the official templates-itl repo, whereas Arch is in the templates-community repo.
>
> Marek, any idea what's going on here?

Already installed templates are excluded from every qubes-dom0-update
operation. Mostly to not accidentally upgrade such package - which would
override all the changes made inside (including installed packages,
applied updates etc). Currently the only exception is "reinstall"
action, with one specific template given as an argument. There is a plan
to extend this to some other actions:
https://github.com/QubesOS/qubes-issues/issues/2527

But in general, we need some better mechanism to distribute templates,
this is one of the reasons...

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJYXQE0AAoJENuP0xzK19csP14H/Ay+So3dsp0g1+xD2ILlQF6V
IXBHKNM7ZHj15p7DRxvCLi9VUMgmgYq8OtRaJwk+cOWqymC3J+ukHpHLWkcRQtDp
/Tp0H++/sSqniD1QjuqCBJi7IhRB30aF34mwiq8UGcFcQT1fK4nBMZG+fq9kHgHJ
vn1y/o7LmP8//GdDMRLobSFhWRq5yOCKAaWbFMBiQRLIoD2Mzp5lmghjYjQ1VERt
eDr2jq51tdll3No2hQFb/FBZe3x8fZGuPl37D41zEJd82yEn/UeTt6zV24Bfkohp
RqEBZZi7Fs6XICBOT98kTjrlOkjqsCDTER4Klf1O9YkZI384h2/Y2Rn0CgbVdzw=
=CY9p
-----END PGP SIGNATURE-----

Andrew David Wong

unread,
Dec 23, 2016, 7:52:46 AM12/23/16
to Marek Marczykowski-Górecki, J. Eppler, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-12-23 02:49, Marek Marczykowski-Górecki wrote:
> On Thu, Dec 22, 2016 at 11:56:13PM -0800, Andrew David Wong wrote:
>> On 2016-12-22 07:33, J. Eppler wrote:
>>>
>>>>> 1. How can I search for qubes-templates in dom0 rpm repository? The qubes-dom0-update tool excludes all templates from a search.
>>>>>
>>>>
>>>> $ sudo qubes-dom0-update --action=search qubes-template
>>>>
>>>> This will pass through the terminal output from the UpdateVM, so even
>>>> though templates are excluded in the dom0 dnf command, you'll still get
>>>> the search results (in red text by default).
>>>>
>>>> Remember that you won't see community templates unless you enable their repo:
>>>>
>>>> $ sudo qubes-dom0-update --enablerepo=qubes-templates-community --action=search qubes-template
>>>
>>> Reading red text is not a really good solution from an usability perspective. What are the reasons to exclude templates from a search in the first place?
>>>
>
>> Actually, after further testing, I've found that this doesn't work. Even with `--enablerepo=qubes-templates-community`, I'm only getting the Fedora and Arch templates in search results (not Whonix or Debian). Without `--enablerepo=qubes-templates-community`, I only get the Fedora templates in the search results. So, this method doesn't work. Moreover, the results are inconsistent, since Debian is in the official templates-itl repo, whereas Arch is in the templates-community repo.
>
>> Marek, any idea what's going on here?
>
> Already installed templates are excluded from every qubes-dom0-update
> operation. Mostly to not accidentally upgrade such package - which would
> override all the changes made inside (including installed packages,
> applied updates etc). Currently the only exception is "reinstall"
> action, with one specific template given as an argument. There is a plan
> to extend this to some other actions:
> https://github.com/QubesOS/qubes-issues/issues/2527
>
> But in general, we need some better mechanism to distribute templates,
> this is one of the reasons...
>

Oh, I see. Tracking:

https://github.com/QubesOS/qubes-issues/issues/2534

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=iBqt
-----END PGP SIGNATURE-----

Reply all
Reply to author
Forward
0 new messages