unable to verify unman's ubuntu templates

[roger paranoia]

Hello

I am trying to verify the templates downloaded from:

https://qubes.3isec.org/rpm/r4.2/templates/qubes-template-jammy-minimal-4.2.0-202405182317.noarch.rpm

https://qubes.3isec.org/rpm/r4.2/templates/qubes-template-noble-minimal-4.2.0-202405211137.noarch.rpm

On a fedora-40 based template I use the following procedure:

[aaa@bbb ~]$ gpg2 --keyserver keyserver.ubuntu.com  --recv-keys 8B3F30F9C8C0C2EF

[aaa@bbb ~]$ gpg2 --export --armor 8B3F30F9C8C0C2EF > unman.asc

[aaa@bbb ~]$ sudo mv unman.asc /etc/pki/rpm-gpg/unman.asc

[aaa@bbb Downloads]$ rpm -K qubes-template-jammy-minimal-4.2.0-202405182317.noarch.rpm

and I get:

qubes-template-jammy-minimal-4.2.0-202405182317.noarch.rpm: digests SIGNATURES NOT OK

So that means it doesn't pass the verification check. I've used the same procedure many times and it worked so I don't understand what happens. Does anybody know what is the problem?

Thank you in advance

 

[unman]

Hello Mr Paranoia

You need to import the key in to the rpm keyring:
rpmkeys --import unman.asc

Then the verification with `rpm -K` will work.

unman
--
I never presume to speak for the Qubes team.
When I comment in the mailing lists I speak for myself.

[roger paranoia]

Hello Unman

Thanks for your fast reply and for providing ubuntu templates.

I've tried that and it passes the digest validation.

Anyway though... there seems to be a problem when installing the templates.

Once downloaded and validated, the process I followed is:

[aaa@dom0 ~]$ qvm-run --pass-io <<source qube>> 'cat /path/to/template-in-source-qube.rpm' > /path/to/template-in-dom0.rpm

[aaa@dom0 ~]$ sudo dnf install /path/to/template.rpm-in-dom0

and I get the following output:

Qubes OS Repository for Dom0                                                                          2.7 MB/s | 3.0 kB     00:00    
Dependencies resolved.
======================================================================================================================================
 Package                                    Architecture         Version                             Repository                  Size
======================================================================================================================================
Reinstalling:
 qubes-template-noble-minimal               noarch               4.2.0-202405211137                  @commandline               584 M

Transaction Summary
======================================================================================================================================

Total size: 584 M
Installed size: 2.5 G
Is this ok [y/N]: y
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                              1/1
  Running scriptlet: qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       1/2
  Reinstalling     : qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       1/2
  Running scriptlet: qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       1/2
noble-minimal: Importing data
Traceback (most recent call last):
  File "/bin/qvm-template-postprocess", line 5, in <module>
    sys.exit(main())
             ^^^^^^
  File "/usr/lib/python3.11/site-packages/qubesadmin/tools/qvm_template_postprocess.py", line 449, in main
    loop.run_until_complete(post_install(args))
  File "/usr/lib64/python3.11/asyncio/base_events.py", line 653, in run_until_complete
    return future.result()
           ^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/qubesadmin/tools/qvm_template_postprocess.py", line 314, in post_install
    import_root_img(vm, args.dir)
  File "/usr/lib/python3.11/site-packages/qubesadmin/tools/qvm_template_postprocess.py", line 102, in import_root_img
    raise qubesadmin.exc.QubesException(
qubesadmin.exc.QubesException: template.rpm symlink not found for multi-part image, using up-to-date `qvm-template install ...` should help
warning: %post(qubes-template-noble-minimal-4.2.0-202405211137.noarch) scriptlet failed, exit status 1

Error in POSTIN scriptlet in rpm package qubes-template-noble-minimal
  Running scriptlet: qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       2/2
  Cleanup          : qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       2/2
  Verifying        : qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       1/2
  Verifying        : qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       2/2

Reinstalled:
  qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                                              

Complete!

As a result of that error, the template is not available anywhere so it's not successfully installed.

When trying to install it, the output is:

Qubes OS Repository for Dom0                                                                          2.9 MB/s | 3.0 kB     00:00    
Package qubes-template-noble-minimal-4.2.0-202405211137.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!

When trying to remove, the output is:

Dependencies resolved.
======================================================================================================================================
 Package                                    Architecture         Version                            Repository                   Size
======================================================================================================================================
Removing:
 qubes-template-noble-minimal               noarch               4.2.0-202405211137                 @@commandline               2.5 G

Transaction Summary
======================================================================================================================================
Remove  1 Package

Freed space: 2.5 G
Is this ok [y/N]: y
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                              1/1
  Running scriptlet: qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       1/1
usage: qvm-template-postprocess [--verbose] [--quiet] [--help] [--really]
                                [--skip-start] [--keep-source]
                                [--no-installed-by-rpm] [--allow-pv]
                                [--pool POOL]
                                {post-install,pre-remove} name dir
qvm-template-postprocess: error: No Qube with this name exists
error: %preun(qubes-template-noble-minimal-4.2.0-202405211137.noarch) scriptlet failed, exit status 2

Error in PREUN scriptlet in rpm package qubes-template-noble-minimal
  Verifying        : qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                       1/1

Failed:
  qubes-template-noble-minimal-4.2.0-202405211137.noarch                                                                              

Error: Transaction failed

So, I don't know if there is some kind of post installation script that is failing for some reason but I have no idea how could I solve it.

Do you know what is the problem?

Thank you very much