Announcement: Fedora 26 TemplateVM Upgrade

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Qubes Community,

Fedora 25 reached EOL ([end-of-life]) on 2017-12-12. We sincerely
apologize for our failure to provide timely notice of this event. It
is strongly recommend that all Qubes users upgrade their Fedora 25
TemplateVMs and StandaloneVMs to Fedora 26 immediately. We provide
step-by-step [upgrade instructions] for upgrading your existing
TemplateVMs and StandaloneVMs in-place on both Qubes 3.2 and Qubes
4.0. For a complete list of TemplateVM versions supported for your
specific version of Qubes, see [Supported TemplateVM Versions].

We also provide fresh Fedora 26 TemplateVM packages through the
official Qubes repositories, which you can get with the following
commands (in dom0).

Standard Fedora 26 TemplateVM:

$ sudo qubes-dom0-update qubes-template-fedora-26

[Minimal] Fedora 26 TemplateVM:

$ sudo qubes-dom0-update qubes-template-fedora-26-minimal

After upgrading to a Fedora 26 TemplateVM, please remember to set all
qubes that were using the old template to use the new one. The
instructions to do this can be found in the [upgrade instructions]
for your specific version.

Please note that no user action is required regarding the OS version
in dom0. If you're using Qubes 3.2 or 4.0, there is no dom0 OS
upgrade available, since none is currently required. For details,
please see our [Note on dom0 and EOL].

If you're using an older version of Qubes than 3.2, we strongly
recommend that you upgrade to 3.2, as older versions are no longer
supported.


[end-of-life]: https://fedoraproject.org/wiki/Fedora_Release_Life_Cycle#Maintenance_Schedule
[upgrade instructions]: /doc/template/fedora/upgrade-25-to-26/
[Supported TemplateVM Versions]: /doc/supported-versions/#templatevms
[Minimal]: /doc/templates/fedora-minimal/
[Note on dom0 and EOL]: /doc/supported-versions/#note-on-dom0-and-eol

This announcement is also available on the Qubes website:
https://www.qubes-os.org/news/2018/01/06/fedora-26-upgrade/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=/ZvF
-----END PGP SIGNATURE-----

[bow...@gmail.com]

Hi,

FYI, In order to update the new template for the first time, I had to launch:
dnf update --best --allowerasing
there was a pb with yum-utils which was preventing the QubesManager method (dnf update --best) to work.

Regards,
Alex

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Here are the reference links with complete URLs:

[upgrade instructions]: https://www.qubes-os.org/doc/template/fedora/upgrade-25-to-26/
[Supported TemplateVM Versions]: https://www.qubes-os.org/doc/supported-versions/#templatevms
[Minimal]: https://www.qubes-os.org/doc/templates/fedora-minimal/
[Note on dom0 and EOL]: https://www.qubes-os.org/doc/supported-versions/#note-on-dom0-and-eol

>
> This announcement is also available on the Qubes website:
> https://www.qubes-os.org/news/2018/01/06/fedora-26-upgrade/
>

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=wCzE
-----END PGP SIGNATURE-----

[Peter Todd]

On Sat, Jan 06, 2018 at 06:15:21PM -0600, Andrew David Wong wrote:
> Dear Qubes Community,
>
> Fedora 25 reached EOL ([end-of-life]) on 2017-12-12. We sincerely
> apologize for our failure to provide timely notice of this event. It
> is strongly recommend that all Qubes users upgrade their Fedora 25
> TemplateVMs and StandaloneVMs to Fedora 26 immediately. We provide
> step-by-step [upgrade instructions] for upgrading your existing
> TemplateVMs and StandaloneVMs in-place on both Qubes 3.2 and Qubes
> 4.0. For a complete list of TemplateVM versions supported for your
> specific version of Qubes, see [Supported TemplateVM Versions].
>
> We also provide fresh Fedora 26 TemplateVM packages through the
> official Qubes repositories, which you can get with the following
> commands (in dom0).
>
> Standard Fedora 26 TemplateVM:
>
> $ sudo qubes-dom0-update qubes-template-fedora-26

This template seems to be broken out of the box. After installation, yum
upgrade gives the following:

[user@fedora-26 ~]$ sudo yum upgrade
Last metadata expiration check: 0:26:15 ago on Sun 07 Jan 2018 03:00:32 PM EST.
Dependencies resolved.

Problem 1: package salt-2017.7.2-1.fc26.noarch requires dnf-utils, but none of the providers can be installed
- package dnf-utils-2.1.5-1.fc26.noarch conflicts with yum-utils < 1.1.31-513 provided by yum-utils-1.1.31-512.fc26.noarch
- package dnf-utils-2.1.1-1.fc26.noarch conflicts with yum-utils < 1.1.31-513 provided by yum-utils-1.1.31-512.fc26.noarch
- cannot install the best update candidate for package yum-utils-1.1.31-512.fc26.noarch
- cannot install the best update candidate for package salt-2016.11.5-3.fc26.noarch
Problem 2: problem with installed package yum-utils-1.1.31-512.fc26.noarch
- package dnf-utils-2.1.5-1.fc26.noarch conflicts with yum-utils < 1.1.31-513 provided by yum-utils-1.1.31-512.fc26.noarch
- package salt-2017.7.2-1.fc26.noarch requires dnf-utils, but none of the providers can be installed
- package dnf-utils-2.1.1-1.fc26.noarch requires dnf-plugins-core = 2.1.1-1.fc26, but none of the providers can be installed
- package salt-ssh-2017.7.2-1.fc26.noarch requires salt = 2017.7.2-1.fc26, but none of the providers can be installed
- cannot install both dnf-plugins-core-2.1.1-1.fc26.noarch and dnf-plugins-core-2.1.5-1.fc26.noarch
- cannot install the best update candidate for package salt-ssh-2016.11.5-3.fc26.noarch
- cannot install the best update candidate for package dnf-plugins-core-2.1.5-1.fc26.noarch
================================================================================
Package Arch Version Repository Size
================================================================================
Skipping packages with conflicts:
(add '--best --allowerasing' to command line to force their upgrade):
dnf-plugins-core noarch 2.1.1-1.fc26 fedora 49 k
dnf-utils noarch 2.1.1-1.fc26 fedora 39 k
dnf-utils noarch 2.1.5-1.fc26 updates 40 k
Skipping packages with broken dependencies:
salt noarch 2017.7.2-1.fc26 updates 7.8 M
salt-ssh noarch 2017.7.2-1.fc26 updates 21 k

Transaction Summary
================================================================================
Skip 5 Packages

Nothing to do.
Complete!
[user@fedora-26 ~]$

--
https://petertodd.org 'peter'[:-1]@petertodd.org

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This is a known issue:

https://github.com/QubesOS/qubes-issues/issues/3442

You can simply use `--best --allow-erasing`.

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=hIky
-----END PGP SIGNATURE-----

[Peter Todd]

On Sun, Jan 07, 2018 at 02:48:29PM -0600, Andrew David Wong wrote:
> This is a known issue:
>
> https://github.com/QubesOS/qubes-issues/issues/3442
>
> You can simply use `--best --allow-erasing`.

Thanks! That worked.

[rob_66]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Sat, 6 Jan 2018 18:15:21 -0600
Andrew David Wong <adw-aAmZIGRXK...@public.gmane.org> wrote:

>
> Dear Qubes Community,
>
> Fedora 25 reached EOL ([end-of-life]) on 2017-12-12. We sincerely
> apologize for our failure to provide timely notice of this event.

Dear Qubes team and developers,

please don't apologize for your incognizable hard and
important work. ;)

Cheers,

rob
-----BEGIN PGP SIGNATURE-----

iQJ8BAEBCgBmBQJaU0npXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ5RDk5RjYwMjVBMjMwQTc0NjExNkJCOERD
NEZDQzQwQjUwMTY1NDg1AAoJEMT8xAtQFlSF9pIQAJcFYJlhDRulHcz+YGyFL5Kg
7gnOnsGcdSTjVJZ2pk1of+WhQHcx0xrdqxU5cnqxTyikXkeL4HPVL1wYtsCRpsZV
jX9IETx75AXulMMCgEvRKGnB78AacVpuagzq7co/O/BthstW1vnxunNgRMBYLVmM
XAYgf/JH+lfN7cARp6uW9OinXlHQg0MiU9MO+UboxZ5cpS8V5D6IWyLIxFG7sHO+
o+AHWg6Kk94ul/HawkvqPquEaC6FKdIjcoKIncqdpAzCEuMMwsowcEGx+ppvOeWJ
oywccLydz/Zsl3seZODws8wchl06BYgSusAuPGWQt7jn4w66GX+XRmm9y5VpSicy
vDa6JD+U0ski2Q1T5i7c7IuVCwQoiNwiRkDGqb1sSQTi5gPM3rj0U27h/G9nrD3S
SryOuTDbwZRXyLeJMqydldBbjSygAMj+durBbGLg99JoqIfYUqxAmwfPdy4csnjR
qVT2E9SA/11pDIUzWAIBe7wi75XFVxlKMa56eblMOPS1g1MQ/b+Q+OGeJKrI3N5s
rRdqvDBQMVDyX3Ko/vp3CDH92hCSCL1L8x9DNYiuK8OleC43HYCfmL92Svy6EDL4
wj1AFz9y35KJpQdyP+Cnd03b9EsF+ThnCRAS4z6j0sd2h1YNGET2faltm6DBes+l
317JxVdFj64VGKAyvsdH
=ZumN
-----END PGP SIGNATURE-----

[Tom Hutchinson]

> please don't apologize for your incognizable hard and important work. ;)

I second the motion. I am so thankful for the Qubes team's work to
protect us users.

> --
> You received this message because you are subscribed to the Google Groups "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com.
> To post to this group, send email to qubes...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/p2vhhl%24kae%241%40blaine.gmane.org.
> For more options, visit https://groups.google.com/d/optout.

[Yuraeitha]

I'll third that notion from above, definitely highly valuing the amazing work put into Qubes by everyone working on it, especially the core staff. I also appreciate good communication to the mass-users, therefore this post to me is also highly valued and appreciated. Although I feel a little double regarding the apology, because I'm both inclined to say it's not needed at all, but also at the same time happy about receiving it. Since being open, honest and transparent, with good communication, goes a long way, and it makes Qubes more likable.

Qubes is definitely high up on my list of projects that are shaping a better tomorrow for all of humanity. Open, transparent, secure and decentralized technology is incredible important in order to maintain democracy and avoid new dictators grasping for power through highly decentralized nontransparent and closed insecure software. Some people apparently believe we will never see another Hitler or Stalin, and that democracy is something that cannot crack or falter in modern times. However power enabled by centralized and abusive technology certainly challenges that naive belief by returning more and more power back to the individual leaders as centralized innovation goes on year by year. For that, I believe Qubes is really important piece of puzzle to a better tomorrow, on the grand scheme of things into the future.

I'm looking forward to see how Qubes will help shape our world tomorrow!

[stephen...@gmail.com]

Thank you.

Unfortunately I know a couple of Qubes users who have switched to plain Fedora because of the delay. That and the whole Meltdown/Spectre uncertainty. I'm sure they'll be back after that has blown over and 4.0 has a stable release.

Keep up the good work!