New installation: unable to install dom0 updates from sys firewall

[fte...@tutamail.com]

Hi all!
Thanks for this great product.

I have  installed Qubes 3.0 two days ago.

I have spent the  past  days trying to update dom0 using both GUI and command line  in dom 0 : sudo qubes-dom0-update

I don't know how to troubleshoot this because downloading software never end.

Sometimes when I update via GUI the process brutally exit and the status colour of sys-firewall form green come yellow.

BTW I have about 2.6 G as total download size, Delta RPMs reduced 141 M of updates to 16 M and the update process executed in sys-firewall (color: red in he CLI) is trying to get unbound-libs.

There are something that can I do?

Is a security risk to use internet (in appvm, of course) with dom0 outdated?

Can you help please?

Thanks you.

[fte...@tutamail.com]

Hi,

I got this error http://yum.qubes-os.org/r3.0/templates-itl/rpm/qubes-template-fedora-21.3.0.3-201509140616.noarch.rpm :  [Errno 12] timeout on http://yum.qubes-os.org/r3.0/templates-itl/rpm/qubes-template-fedora-21.3.0.3-201509140616.noarch.rpm: (28, ' Operation too slow. Less than 1000 bytes/sec transferred last 30 seconds')

Tryng other mirros.

Some delta RPMs failed to download or rebuild. Retring..

-------------------------------------------------------------------------------------------------------------------

Total   1.1 MM/s | 2.6 GB 42:09

exiting because "Download Only" specified

EOF

and then the process exit.

At this point the firewall vm chenge status from green to yellow. and if  I relaunch update from CLI qubes tell me that qrexec not connected

Please can you help?

But i guess that there are only yum.qubes that provide 

24. Sep 2015 23:39 by fte...@tutamail.com:

--
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com.
To post to this group, send email to qubes...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/K-0HvtM----0%40tutamail.com.
For more options, visit https://groups.google.com/d/optout.

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, Sep 24, 2015 at 10:01:12PM +0000, fte...@tutamail.com wrote:
> Hi,I got this error

> http://yum.qubes-os.org/r3.0/templates-itl/rpm/qubes-template-fedora-21.3.0.3-201509140616.noarch.rpm
> : [Errno 12] timeout on
> http://yum.qubes-os.org/r3.0/templates-itl/rpm/qubes-template-fedora-21.3.0.3-201509140616.noarch.rpm:
> (28, ' Operation too slow. Less than 1000 bytes/sec transferred last 30

> seconds')Tryng other mirros.Some delta RPMs failed to download or rebuild.

> Retring..-------------------------------------------------------------------------------------------------------------------Total
> 1.1 MM/s | 2.6 GB 42:09exiting because "Download Only" specifiedEOFand

> then the process exit.At this point the firewall vm chenge status from green

> to yellow. and if I relaunch update from CLI qubes tell me that qrexec not

> connectedPlease can you help?But i guess that there are only yum.qubes that
> provide

The template package shouldn't be updated. Update qubes-core-dom0 and
qubes-core-dom0-linux first - it is fixed there.
Call:
sudo qubes-dom0-update qubes-core-dom0 qubes-core-dom0-linux

This will update just those two packages. Then proceed with full update.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJWBIhAAAoJENuP0xzK19cs62kIAIKiywa1stiog/HJ3ahJWuOi
EVVLKnyQXc7U8cKH0KMDZfVqKvQuNe0CRn6w8F7btabK5ZWMsKkc8k1cAYPy8odC
pLmbjtzlAP4z06UtTsf2d9xOpI2mu0h4j8P6HgpKAyZ/vixad4FrnOTZA4nWc+k6
2TDwKTFZhNk4pLuA17IuAUOpNmNQIsCfwZDttpkRobAQ8InSTwIz7Xi2mYo8gGDR
HyRISUoSyr3K+G07u9oqo49em6nFEPCT4VMvI167mCBsYKsE3BSBnFLLZ1RtDA36
AgprzfrPm+PqpHIMCPqgqAwafNRY1pOAbRmqH3RX0apODW1MsLWDgu1NEVDHxY4=
=rz27
-----END PGP SIGNATURE-----

[fte...@tutamail.com]

25. Sep 2015 01:33 by marm...@invisiblethingslab.com:

The template package shouldn't be updated. Update qubes-core-dom0 and
qubes-core-dom0-linux first - it is fixed there.
Call:
sudo qubes-dom0-update qubes-core-dom0 qubes-core-dom0-linux

This will update just those two packages. Then proceed with full update.

Thanks you!!

Solved now,

just one problem : if I use the first boot option AEM QUBES there are not password prompt on power on, I need to select one other option at boot.

How can I solve this?

Thanks you!

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

If you're using AntiEvilMaid, you need to setup it according to its
readme[1]. Especially you need to reseal the secret after kernel/xen
upgrade. If you didn't wanted to use AEM and you've installed it by
mistake, simply remove the anti-evil-maid-dracut package.

[1] https://github.com/QubesOS/qubes-antievilmaid/blob/master/README

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJWBR5tAAoJENuP0xzK19csFAQH/i2zc+mcRN/EgYefggXdyqbz
cgnNrTjFvNl0VnMjSkGmGN2vO2uX2u+hF8do7jE05ecmqTs/TAjblGpZtmP++3+S
pua9hSAM2PooKw6Ydmw0jpUltvvO7lB5ofRi7zIFnQywnX4/bgAedf5JF8LlSqic
DTR8XWegh5sWr9eTqmRFBKd7UGHdMTv+GiSGZ6eZfiGaWica64xEWm7e2VE9CskN
gjyXaRW5PIdaYroqCQsJgKXMmkJiLVbcDijqjNKJEp+a+JpKVq9mjmwjRokW+3GH
NB7eKMJhmdNhiaSKmA4X0nInj7TE3Sc4rY+c4oeEFz4BBL+MqzlC7k72YR22tWw=
=HHmp
-----END PGP SIGNATURE-----