Fedora 28 has reached EOL

96 views
Skip to first unread message

Andrew David Wong

unread,
May 30, 2019, 12:32:49 AM5/30/19
to qubes...@googlegroups.com, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Qubes Community,

Fedora 28 has reached EOL (end-of-life). [1] We strongly recommend that
all Qubes users upgrade their Fedora 28 TemplateVMs and StandaloneVMs to
Fedora 29 immediately. We provide step-by-step upgrade instructions for
upgrading from Fedora 28 to 29. [2] For a complete list of TemplateVM
versions supported for your specific version of Qubes, see Supported
TemplateVM Versions. [3]

We also provide a fresh Fedora 29 TemplateVM package through the
official Qubes repositories, which you can install in dom0 by following
the standard installation instructions. [4]

After upgrading your TemplateVMs, please remember to set all qubes that
were using the old template to use the new one. The instructions to do
this can be found in the upgrade instructions for Fedora 28 to 29. [2]

Please note that no user action is required regarding the OS version in
dom0. For details, please see our Note on dom0 and EOL. [5]


[1] https://fedoraproject.org/wiki/End_of_life
[2] https://www.qubes-os.org/doc/template/fedora/upgrade-28-to-29/
[3] https://www.qubes-os.org/doc/supported-versions/#templatevms
[4] https://www.qubes-os.org/doc/templates/fedora/#installing
[5] https://www.qubes-os.org/doc/supported-versions/#note-on-dom0-and-eol

This announcement is also available on the Qubes website:
https://www.qubes-os.org/news/2019/05/29/fedora-28-eol/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=1vJE
-----END PGP SIGNATURE-----

Chris Laprise

unread,
May 30, 2019, 2:38:53 PM5/30/19
to qubes...@googlegroups.com, Andrew David Wong, qubes...@googlegroups.com

I'm getting strangeness from the fedora-30 release:

1. As soon as the template installed I started it and ran 'dnf update'.
It downloaded repo data then said 'nothing to do'. Less than 2 minutes
later I get a popup saying fedora-30 has updates available.... I run dnf
update again and there are 219 packages to update.

2. Trying to remove thunderbird, dnf wants to remove 67 packages incl.
most of qubes*, nftables, salt, tinyproxy. It would be good to be able
to remove thunderbird or other large apps without the OS crumbling to
pieces.

--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

Marek Marczykowski-Górecki

unread,
May 30, 2019, 2:45:28 PM5/30/19
to Chris Laprise, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, May 30, 2019 at 02:38:46PM -0400, Chris Laprise wrote:
>
> I'm getting strangeness from the fedora-30 release:
>
> 1. As soon as the template installed I started it and ran 'dnf update'. It
> downloaded repo data then said 'nothing to do'. Less than 2 minutes later I
> get a popup saying fedora-30 has updates available.... I run dnf update
> again and there are 219 packages to update.

This is dnf thinking metadata cache is up to date. dnf update --refresh
should do the job.

> 2. Trying to remove thunderbird, dnf wants to remove 67 packages incl. most
> of qubes*, nftables, salt, tinyproxy. It would be good to be able to remove
> thunderbird or other large apps without the OS crumbling to pieces.

Try dnf --setopt=clean_requirements_on_remove=0 remove thunderbird

clean_requirements_on_remove=True behaves like 'apt autoremove'. And
qubes-vm-recommended depends on thunderbird-qubes, which depends on
thunderbird. So when you remove thunderbird, qubes-vm-recommended needs
to be removed too.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlzwJL0ACgkQ24/THMrX
1yyxjwf/V6DPJ7x7+e4IrO3vEeX+3iWHQLBg065Q1Z5lT/GU7Rw0Jsu0efP66VyA
71la73wl57cGkbbFT/zxvX7ivuyiIsFU2PvAsTbEBZ6GTUUzLZUU5MCdvmQ7ug1F
C//vqz3Hwke+UaQ54D09Gx/ur67BEWve6aMQq9iwJMGgV9/jBtVRehQV1S/pGMLH
AbNCwCeigTPdhK+i36gdHQByLPZ+9H4rpd0CdUzdaFiKY1d94SgLRPa2Roodpcc4
HstUhGtjKAyV4KVX7LSqbUwJLjGV1n6kLaWi81hHf7fWSSbyjLV0hTyBbOHj1S/s
19RAP3obd+q/blHeVilVBxWL5JJuWg==
=m8oh
-----END PGP SIGNATURE-----

haaber

unread,
May 30, 2019, 7:46:35 PM5/30/19
to qubes...@googlegroups.com

Just one question: which Fedora version is dom0 based on? Is there some
need for updates that I ignore? Bernhard

Andrew David Wong

unread,
May 30, 2019, 10:11:05 PM5/30/19
to haaber, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 30/05/2019 6.46 PM, haaber wrote:
> Just one question: which Fedora version is dom0 based on?

In Qubes 4.0, dom0 is based on Fedora 25.

This is always documented for every Qubes version here:

https://www.qubes-os.org/doc/supported-versions/#dom0

> Is there some need for updates that I ignore?

No. Dom0 is isolated from domUs. DomUs can access only a few
interfaces, such as Xen, device backends (in the dom0 kernel and in
other VMs, such as the NetVM), and Qubes tools (gui-daemon,
qrexec-daemon, etc.). These components are security-critical, and we
provide updates for all of them (when necessary), regardless of the
support status of the base distribution. For this reason, we consider
it safe to continue using a given base distribution in dom0 even after
it has reached EOL (end-of-life).

This is documented here:

https://www.qubes-os.org/doc/supported-versions/#note-on-dom0-and-eol

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlzwjSMACgkQ203TvDlQ
MDCaexAAi5PzP+sAwzFYhEydSXG5l5Wy+7HefNe41rdcSxl2D0YaBEiiGdKNw6ZN
oMRpM3vODWuHV2bEBdkDktXRIuGdB82IKm0PqZn5gUfmUEGxfyL95oDl68qA50ZR
X6fITb9lOZRj5eqbtC14TkEcEK4u1VerV5nC2Etm0nUfvXkT3gqc1yI8ZhSm+ZJz
4whaq8RHUDtoMYN7T9xIqh0VBWI8q5O3gHTGWFstT9BTJzRkiub/qsOVxrNAr6Ae
ejTvE6NBSD9emtJWDEQeJscBiUOAFZbGjZaHoVyMZQaNy9wK3gruRY5W20arBJXL
bD37p3lAdrloZsgYMUzv3ZQT0+HCY6v/Mll+/9HJuTP9yNK/0tsifK25x4iz45VN
ncvPi1GPX4ixVlchdsdOCd7qz7ZtZ0+8X/YEY9LuvgK1eA8U4kpdUdm9qfPy6fUK
kP610fUiEwzYq21a1DitpWsb5K8TlIbAhSYffIFsuIScAyrPq13FB/v2FNIRc54z
uapogpUawFefxr3W7xJWVxuJhhlAlNxfWZfj6h19hMf18ppjgjR4XgB0ij2RrOch
jcDO9JDXsMsxIkK8dsdrxr3JO+yAExYSVO9EIzmnD8YTQ9o7ObzRI1a0tgv3hhOy
3HT0JRFtm2tixEtMP292An4jpiz+2V6dH9aEkcig5SlJgudnuEo=
=wJng
-----END PGP SIGNATURE-----

Reply all
Reply to author
Forward
0 new messages