fed29 templates/upgrade

[John S.Recdep]

Hello, since there are now templates available with dom0 for fedora-29
does that mean one could also upgrade from 28->29 safely in a
similar/same way as say from 26->27 27->28 etc

please advise


PS: could you plz remind me what the qvm command was to determine which
templates are available via sudo dom0 update?

[799]

Hello John,

On Fri, 4 Jan 2019 at 00:37, John S.Recdep <yre...@riseup.net> wrote:

Hello, since there are now templates available with dom0 for fedora-29
does that mean one could also upgrade from 28->29   safely in a
similar/same way  as say from 26->27 27->28  etc

My recommendation is to rebuild your custom templates from a XXX-minimal template.

this will also make sure that you know all manual steps to rebuild your system from scratch.

I have scripts which are creating all the templates I need from dom0.

very good, if you want to start with fresh templates from time to time.

PS: could you plz remind me what the qvm command was to determine which
templates are available via  sudo dom0 update?

The command you are looking for is (in dom0):

sudo qubes-dom0-update --action=search qubes-template

You will find more information here in the (excellent) Qubes Docs:

https://www.qubes-os.org/doc/software-update-dom0/

If you're fearless you can also look into other repositories and search for packages there:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing --action=search qubes-template
sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing --action=search qubes-template
sudo qubes-dom0-update --enablerepo=qubes-dom0-unstable --action=search qubes-template

regards

- O

[22...@tutamail.com]

Thanks 799...I learned something!

Similar to 799 but less hardcore...I always download a fresh template(vs upgrade). In my case I ran with a full/fresh Fedora-29 after the Fedora-28 hplip issues, and added any new software from fresh:

https://www.qubes-os.org/doc/templates/

[John S.Recdep]

hmm, ok let's say I just use the new fresh 29 template, is there some
way that I can know what non-stock software I installed on my Fedora-28
template, as I can't remember all that I may have installed ....


So, no advice on upgrading from my 28 template at this time? I find it
strange that the template is in the dom0 updates available, but I see no
notice in the news section on qubes website nor here ......


Seems like this happened with 28 release as well

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 1/3/19 11:31 PM, John S.Recdep wrote:
> On 1/3/19 2:51 PM, 22rip-2xk3N/kkaK1Wk0Htik3J/w...@public.gmane.org
> wrote:
>> Thanks 799...I learned something!
>>
>> Similar to 799 but less hardcore...I always download a fresh
>> template(vs upgrade). In my case I ran with a full/fresh
>> Fedora-29 after the Fedora-28 hplip issues, and added any new
>> software from fresh:
>>
>> https://www.qubes-os.org/doc/templates/
>>
>
>
> hmm, ok let's say I just use the new fresh 29 template, is there
> some way that I can know what non-stock software I installed on my
> Fedora-28 template, as I can't remember all that I may have
> installed ....
>

This is more of a Fedora question than a Qubes question. As far as I
know, there isn't a clean way to do this. Following Marek's advice
from years ago, I just keep a list of the packages that I install in
each of my templates.

>
> So, no advice on upgrading from my 28 template at this time? I find
> it strange that the template is in the dom0 updates available, but
> I see no notice in the news section on qubes website nor here
> ......
>

See:

https://github.com/QubesOS/qubes-issues/issues/4223

and

https://github.com/QubesOS/qubes-doc/pull/739

>
> Seems like this happened with 28 release as well
>

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=EMl8
-----END PGP SIGNATURE-----

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Fri, Jan 04, 2019 at 05:37:07AM -0600, Andrew David Wong wrote:
> On 1/3/19 11:31 PM, John S.Recdep wrote:
> > On 1/3/19 2:51 PM, 22rip-2xk3N/kkaK1Wk0Htik3J/w...@public.gmane.org
> > wrote:
> >> Thanks 799...I learned something!
> >>
> >> Similar to 799 but less hardcore...I always download a fresh
> >> template(vs upgrade). In my case I ran with a full/fresh
> >> Fedora-29 after the Fedora-28 hplip issues, and added any new
> >> software from fresh:
> >>
> >> https://www.qubes-os.org/doc/templates/
> >>
> >
> >
> > hmm, ok let's say I just use the new fresh 29 template, is there
> > some way that I can know what non-stock software I installed on my
> > Fedora-28 template, as I can't remember all that I may have
> > installed ....
> >
>
> This is more of a Fedora question than a Qubes question. As far as I
> know, there isn't a clean way to do this. Following Marek's advice
> from years ago, I just keep a list of the packages that I install in
> each of my templates.

Since some dnf version it is possible:

sudo dnf history userinstalled

dnf mark can be used to adjust the list (without actually
installing/removing packages). This may list some more packages, as it
will include default packages installed by the template builder. But
should be a good starting point for such a list.

>
> >
> > So, no advice on upgrading from my 28 template at this time? I find
> > it strange that the template is in the dom0 updates available, but
> > I see no notice in the news section on qubes website nor here
> > ......
> >
>
> See:
>
> https://github.com/QubesOS/qubes-issues/issues/4223
>
> and
>
> https://github.com/QubesOS/qubes-doc/pull/739
>
> >
> > Seems like this happened with 28 release as well
> >
>

- --

Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlwvTgAACgkQ24/THMrX
1yxPrggAirGLmrqKZm73SVrEoSraBBgGIN7hXEXxgsKr4jtK5ymU7YEVyO2zc44S
wQKcSJrmbO7VlGTNRGmxmMRsFa5f5j5Yxn1HaKeTKFd0HHLJja00SbpYCVnx6RFP
1cLSrAWwHHxazMImQ0mKkeBhmlHI45/dD30EwWJ3C2gYWCPj6PjHyfTpl61itf5M
zPuMBAcyxemZ0LNgg2mCtD56i60n6c44d8+1xjPCBgdDTKbMkk72TTejv3MAuEdC
qeREUS9QPBwR5Zbx0Fr72YIXRsXOEPYT3zi996u48lRXmHdo90AByq2zc4PJKUpc
YdSTPPu4su9j+iPKzxWQUrPl5xt/wQ==
=4V1h
-----END PGP SIGNATURE-----

[unman]

The problem with that is that it outputs version numbers, which isnt
particularly helpful.
dnf repoquery --qf "%{name}" --userinstalled
Will give you just the names.

Somewhat more naively, 'dnf list installed|cut -f1 -d" "|tail -n +3'
will give you a complete list which you could feed to 'dnf install'.

Debian has apt-clone which works nicely. I don't know if there's a Fedora
equivalent.

[John S.Recdep]

So, Andrew does this mean that although the Fedora-29 Template is
available via sudo qubes-dom0-update that it still has issues and hence
it is not officially advisable to use it ? ( whether via 'fresh' d/l nor
'upgrades' ? )

Forgive me, am just a layman, not sure what I would expect to interpret
from the github links (perhaps the fact that there are any issues
provides the answer?)

My repos are just the default qubes 4.0+ versions

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Well, you said you found it strange that there was no documentation or
announcement for the Fedora 29 template. These links show why: the
documentation is still being worked on, and the necessary steps prior to
the announcement have not yet been completed. (In fact, at the time of
this writing, the issue still indicates that the template has not yet
migrated to the stable repo, which appears to be false.)

In order to avoid this sort of confusion in the future, perhaps we
should refrain from migrating new templates to the stable repo until
documentation and an announcement are ready to be published, then do
it all simultaneously. What do you think, Marek?

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlwwHc0ACgkQ203TvDlQ
MDC3vxAAojbKj36me1TyU3iC+++fzvbV3Cz0NBideZaLmQkXXkydgmM8XFgVgLrT
4dgLsSBsg0M9x3FtzVzz653kvPYm/2n1YGjEboNiq19DbByqfvqCeKhEvxPXGwS4
XP/bFzvtQ9fG/kqRWU03npdqBes9qlhiBOzn2Qnhfc3KNuZvX4U1i5IPTZnipuh+
FSCqYdbbOq8dnjhu3zChq9A4GFD74f/jnx+bvP9NV0GWjGIFQQ/Y+Iza6HhlcO+y
gAFLOR3shPFz4PAfJztSKzdaINavIWYqJtU07WIKVb4GJS1dnoU7B0NPyB73wdoa
2iSKoZkr8Yb2ZamdqvAaZP4JUnyG6QeakpW7fG4xtDWTpJnuKw1BvTxqTFAybJ3F
sz2A807BmI/ie8znIU7BDCTihFnqw3oXAic550crMhh0WSjR8sYKTc8c3Nmpbv0V
y9V0p12h+HuljaPQk8AXGa1QA2wviVS3r9gjN1VNKls8R2QwIqjohkitr5v9j9i/
Hz1X/ctZ9o64h9v8laVwpkLeWeNKjMWxLhD/a0FEqDeVkIxD+sS85uf5x2hkJyaD
mUaxgax/WduElTaZW5unLPub8ZUOD7nLSjDrz9WZw3iDnuZl4CcG2qUNHBQPl6RT
eh/Hb3mPTKSp4M+hB1msXa/FaCLy5OI3EiryRE6yXLu3xsx1c6g=
=mpOV
-----END PGP SIGNATURE-----

[John S.Recdep]

OK understood, thx for the clarification.


BTW all: no luck with the suggested methods of determining what extra
packages I may have installed in the fedora-28 Template ..... but I'll
just live with the fresh fedora-29 template

[799]

Hello,

Am Sa., 5. Jan. 2019, 05:01 hat John S.Recdep <yre...@riseup.net> geschrieben:

[...]

BTW all: no luck with the suggested methods of determining what extra
packages I may have installed in the fedora-28 Template ..... but I'll
just live with the fresh fedora-29 template

I had the same problem and that's why I am setting up my templates only via scripts which I can run from dom0.

This improves speed to rebuild templates and also I know exactly what I have installed.

What you can do to get the differences between two templates:

1) run "dnf list installed > packagelist1.txt

Do the same in the other VM

2) compare both lists:

grep -Fxv -f packagelist1.txt packagelist2.txt

- O

[Stuart Perkins]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

No job is complete until the paperwork is done.. :)
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEg3cTCwPFs8wewas+M1E7j4SmKVQFAlwwl8AACgkQM1E7j4Sm
KVQVVwf/RuriwEawNv4BoIpReNUu4weMmZtFWfekwwy+Z9df1yzNeV0tEnvuveoS
zY9an0s98m0yBRRWRZUcUYj52m/GtRR8SuzPRSlwui4aq+8tFPT+VLwn8jELFxnL
VGZJHsOSxtIauDJZB7i5n1q0aJR6gTRmSt259HUr1H9bxqEL+EoktxxiWLxgXSLO
Z2ttSg62LHguBPpm/Wx3cptFokOVPLHaAO7IOH4fN2i4J9VVMSG6LiHpEnI2PbQU
oDu6vsuNIc+BoAg76YbqdwjyDm6QCgCoJhTH44m/+SICaHjuzRl9Zt7lZdAVE4PQ
E+zoQTDS3ZR7D++1z4aHMJXDvjGL2w==
=Iypo
-----END PGP SIGNATURE-----

[John S.Recdep]

On 1/5/19 12:26 AM, 799 wrote:
> Hello,
>

> Am Sa., 5. Jan. 2019, 05:01 hat John S.Recdep <yrebstv-sGOZH3h...@public.gmane.org>

> geschrieben:
>
>> [...]
>> BTW all: no luck with the suggested methods of determining what extra
>> packages I may have installed in the fedora-28 Template ..... but I'll
>> just live with the fresh fedora-29 template
>
>
> I had the same problem and that's why I am setting up my templates only via
> scripts which I can run from dom0.
> This improves speed to rebuild templates and also I know exactly what I
> have installed.
>
> What you can do to get the differences between two templates:
>
> 1) run "dnf list installed > packagelist1.txt
> Do the same in the other VM
>
> 2) compare both lists:
> grep -Fxv -f packagelist1.txt packagelist2.txt
>
> - O
>

I'm running this in fed-28 terminal and fed-29 template terminal ; mv
file2 to the other template but your grep cmd is just showing a list of
all packages, maybe because of the version update numerical changes ...
guess I can look back at previous post of how to remove the version
change numbers, if it might matter

[John S.Recdep]

On 1/4/19 2:34 AM, unman wrote:
> dnf repoquery --qf "%{name}" --userinstalled

this works then using the grep command....

of interesting note is that of the few packages found is pulseaudio-qubes

which I think I accidentally autoremoved and had to reinstall so maybe
it got a new name or package name, but doesn't mean I must install it
again in fed-29 template