how to reinstall whonix-14 templates

[Claudio Chinicz]

Hi,

I've broken my whonix-gw-14 when trying to upgrade to whonix-15 and ended up removing both gw and ws templates for version 14.

I'me trying to reinstall following instructions from https://www.qubes-os.org/doc/templates/ but it does not work.

Anyone can help with instructions to download whonix-14 from scratch?

Thanks in advance,
Claudio

[Chris Laprise]

Per the instructions here:

https://www.qubes-os.org/doc/reinstall-template/

...you can reinstall them with '--action=reinstall' (try this first) or
if that doesn't work use '--action=upgrade'.

--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

[Claudio Chinicz]

Hi Chris,

I tried on dom0 to issue the commands and I got a message "using sys-firewall as UpdateVM to download updates for Dom0; this may take some time..." but nothing happened.

Did I do something wrong? did I miss something?

Thanks

[panina]

On Mon, 2019-07-08 at 22:03 -0700, Claudio Chinicz wrote:

> On Monday, 8 July 2019 11:37:35 UTC+3, Claudio Chinicz  wrote:

> > Hi,

> >

> > I've broken my whonix-gw-14 when trying to upgrade to whonix-15 and > > ended up removing both gw and ws templates for version 14.

> >

> > I'me trying to reinstall following instructions from > > https://www.qubes-os.org/doc/templates/ but it does not work.

> >

> > Anyone can help with instructions to download whonix-14 from > > scratch?

> >

> > Thanks in advance,

> > Claudio

Not an answer to the follow-up question, but:

I recently installed whonix-15 from scratch, and did it from instructions from whonix' webpage. They have qubes-specific instructions, including instructions referring to upgrading from 14 to 15.

Anyway, I used the qubes salt command to install and set everything up, `sudo qubesctl state.sls qvm.anon-whonix`. It is quiet, and takes ages, and says nothing, and may not be aborted. This is annoying. But if it's allowed to run uninteruppted, it'll do the job.

<3

/panina

>

> Hi Chris,

>

> I tried on dom0 to issue the commands and I got a message "using sys- > firewall as UpdateVM to download updates for Dom0; this may take some > time..." but nothing happened.

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 11/07/2019 4.47 PM, panina wrote:
> [...]

>
> Not an answer to the follow-up question, but: I recently installed
> whonix-15 from scratch, and did it from instructions from whonix'
> webpage. They have qubes-specific instructions, including
> instructions referring to upgrading from 14 to 15. Anyway, I used
> the qubes salt command to install and set everything up, `sudo
> qubesctl state.sls qvm.anon-whonix`. It is quiet, and takes ages,
> and says nothing, and may not be aborted.

FWIW, there is an issue open to address part of this:

https://github.com/QubesOS/qubes-issues/issues/4215

> This is annoying. But if it's allowed to run uninteruppted, it'll
> do the job. <3 /panina

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=RbIB
-----END PGP SIGNATURE-----

[cla...@chinicz.com]

Hi Panina,

Thanks for replying. I've tried 'sudo qubesctl state.sls qvm.anon-whonix' but got an error (see below).

Actually, as I had removed all whonix related templates and AppVMs manually, when I ran the above command I've got 7 errors and I then created AppVMs named "whonix-gw-15", "whonix-ws-15", "anon-whonix", "sys-whonix" and "whonix-ws-15-dvm", all based on Debian 9, and the number of errors reduced to just 2.

Any ideas what may have gone wrong?

Regards

[claudio@dom0 ~]$ sudo qubesctl state.sls qvm.anon-whonix
[ERROR ] Command '['systemd-run', '--scope', 'qubes-dom0-update', '-y', '--best', '--allowerasing', '--disablerepo=*', '--enablerepo=qubes-templates-community-testing', '--clean', '--action=install', 'qubes-template-whonix-ws-15']' failed with return code: 1
[ERROR ] stdout: Running scope as unit: run-r1789c0ddd26148eda963d137c81386a6.scope
Using mirage-firewall-wifi as UpdateVM to download updates for Dom0; this may take some time...
[ERROR ] retcode: 1
[ERROR ] Error occurred installing package(s). Additional info follows:

errors:
- Running scope as unit: run-r1789c0ddd26148eda963d137c81386a6.scope
Using mirage-firewall-wifi as UpdateVM to download updates for Dom0; this may take some time...
[ERROR ] Command '['systemd-run', '--scope', 'qubes-dom0-update', '-y', '--best', '--allowerasing', '--disablerepo=*', '--enablerepo=qubes-templates-community-testing', '--action=install', 'qubes-template-whonix-gw-15']' failed with return code: 1
[ERROR ] stdout: Running scope as unit: run-rd5f513c50db443948c87208dba3e2b67.scope
Using mirage-firewall-wifi as UpdateVM to download updates for Dom0; this may take some time...
[ERROR ] retcode: 1
[ERROR ] Error occurred installing package(s). Additional info follows:

errors:
- Running scope as unit: run-rd5f513c50db443948c87208dba3e2b67.scope
Using mirage-firewall-wifi as UpdateVM to download updates for Dom0; this may take some time...
local:
----------
ID: template-whonix-ws-15
Function: pkg.installed
Name: qubes-template-whonix-ws-15
Result: False
Comment: Error occurred installing package(s). Additional info follows:

errors:
- Running scope as unit: run-r1789c0ddd26148eda963d137c81386a6.scope
Using mirage-firewall-wifi as UpdateVM to download updates for Dom0; this may take some time...
Started: 16:53:01.289456
Duration: 5021.715 ms
Changes:
----------
ID: whonix-ws-tag
Function: qvm.vm
Name: whonix-ws-15
Result: True
Comment: ====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'whonix-ws' = Enabled

====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,whonix-updatevm
Started: 16:53:06.313710
Duration: 93.93 ms
Changes:
----------
ID: whonix-ws-update-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.UpdatesProxy
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.UpdatesProxy is in correct state
Started: 16:53:06.409703
Duration: 2.975 ms
Changes:
----------
ID: whonix-get-date-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.GetDate
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.GetDate is in correct state
Started: 16:53:06.412767
Duration: 1.109 ms
Changes:
----------
ID: template-whonix-gw-15
Function: pkg.installed
Name: qubes-template-whonix-gw-15
Result: False
Comment: Error occurred installing package(s). Additional info follows:

errors:
- Running scope as unit: run-rd5f513c50db443948c87208dba3e2b67.scope
Using mirage-firewall-wifi as UpdateVM to download updates for Dom0; this may take some time...
Started: 16:53:06.413953
Duration: 2753.597 ms
Changes:
----------
ID: whonix-gw-tag
Function: qvm.vm
Name: whonix-gw-15
Result: True
Comment: ====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'whonix-gw' = Enabled

====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,whonix-updatevm
Started: 16:53:09.167801
Duration: 98.203 ms
Changes:
----------
ID: whonix-gw-update-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.UpdatesProxy
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.UpdatesProxy is in correct state
Started: 16:53:09.266122
Duration: 1.787 ms
Changes:
----------
ID: sys-net
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-net
VM sys-net exists None
Started: 16:53:09.267999
Duration: 202.445 ms
Changes:
----------
ID: sys-firewall
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-firewall
VM sys-firewall exists None
Started: 16:53:09.470855
Duration: 204.465 ms
Changes:
----------
ID: sys-whonix
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-whonix
VM sys-whonix exists None
Started: 16:53:09.675706
Duration: 206.403 ms
Changes:
----------
ID: whonix-ws-15-dvm
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check whonix-ws-15-dvm
VM whonix-ws-15-dvm exists None
Started: 16:53:09.885824
Duration: 203.506 ms
Changes:
----------
ID: qvm-appmenus --update whonix-ws-15-dvm
Function: cmd.run
Result: True
Comment: State was not run because none of the onchanges reqs changed
Changes:
----------
ID: anon-whonix
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check anon-whonix
VM anon-whonix exists None
Started: 16:53:10.090071
Duration: 201.804 ms
Changes:

Summary for local
-------------
Succeeded: 11
Failed: 2
-------------
Total states run: 13
Total run time: 8.992 s
DOM0 configuration failed, not continuing
[claudio@dom0 ~]$