kernel downgrade

[Zrubi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

As I have hit by this bug booth in 4.0 and 3.2 versions:
https://github.com/QubesOS/qubes-issues/issues/3657

I have to downgrade the kernel, then prevent updating from this version.
If I try it under 4.0 I got this error:
(https://pastebin.com/vy4X4w8U)


[user@dom0 ~]$ sudo qubes-dom0-update kernel-latest-4.14.12
kernel-latest-qubes-vm-4.14.12
Using sys-firewall as UpdateVM to download updates for Dom0; this may
take some time...
Fedora 25 - x86_64 - Updates 2.3 MB/s | 24 MB
00:10
Fedora 25 - x86_64 2.6 MB/s | 50 MB
00:19
Qubes Dom0 Repository (updates) 1.0 MB/s | 3.0 MB
00:02
Qubes Templates repository 12 kB/s | 8.3 kB
00:00
Last metadata expiration check: -1 day, 22:01:22 ago on Thu Mar 29
18:22:53 2018.
Dependencies resolved.
========================================================================
========
Package Arch Version Repository
Size
========================================================================
========
Installing:
kernel-latest x86_64 1000:4.14.12-1.pvops.qubes
qubes-dom0-current 46 M
kernel-latest-qubes-vm
x86_64 1000:4.14.12-1.pvops.qubes
qubes-dom0-current 63 M

Transaction Summary
========================================================================
========
Install 2 Packages

Total download size: 108 M
Installed size: 108 M
DNF will only download packages for the transaction.
Downloading Packages:
(1/2): kernel-latest-4.14.12-1.pvops.qubes.x86_ 1.2 MB/s | 46 MB
00:38
(2/2): kernel-latest-qubes-vm-4.14.12-1.pvops.q 1.3 MB/s | 63 MB
00:47
- ------------------------------------------------------------------------
- --------
Total 2.3 MB/s | 108 MB
00:47
Complete!
The downloaded packages were saved in cache until the next successful
transaction.
You can remove cached packages by executing 'dnf clean packages'.
Qubes OS Repository for Dom0
84 MB/s | 209 kB 00:00
No package kernel-latest-4.14.12 available.
No package kernel-latest-qubes-vm-4.14.12 available.


that means the updateVM can successfully download that specific
version, but in dom0 the update script failing...

Any suggestion how to solve this?
And if I succed, how can I lock my system to this kernel version?

Thanks.
- --
Zrubi
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEw39Thm3rBIO+xeXXGjNaC1SPN2QFAlq8/PcACgkQGjNaC1SP
N2SHyhAAu5SQw3D/uYFDFzGEr3LcbG+16guDpqJoW3zBOeH1QhC56b/xEZDecZw6
qy5+DWpmAQnb3LAUxEAx3eAeJWzmJ7f/GPqs5Z1/u6wiDX/kyG5p8BMK1w0OgGHO
L4zGjEQ7sO9Ob0HpRSMPhYMPdzq0MJDQ1LcDCA4iK4obinwhTmacS1BifQmtWBQ9
ivv8LFzTKfd/ci5fGd9q9/LM8nouAQNUwnyTRAA/ND1JFnlQTgjaEYbN9kA0jmO6
wVkY+ik4L64UNMghLdbpf0w9ix5wpSPQgNMbE8KRGKul405YQZvcn4iYsTd9YtoP
X4ju/QziflV+51mI6fXpNNKQ2jgCImG7IkzDcegBjwHZdEA/XoELDYSGn3UcdYbx
DV7tm5F1P0Rl1rvHvqy3FUPf9uoBXk4Ar4320groVGSFn1iZZILkhIRLdpWzX0EE
P7kWVW/CzWnfSsXlcLqIoSWsmU79enK90spLnt1HJHVCpDf0hoQwCGGRj9dl7x8k
Y05vLf412SNfLMTK2+xzlrJBKxPsFlJvgQsDH3qmQRRidz9Rt4F3jGhEZN/P32bt
INXY6gofO6viMTNZ4lQzsAz0jBmc0zOYDgM0IbTtwuymMdZuPcJ9wQmIJosv1qDo
zl9HRAqYn4EHpS7bbSMKPTW5ehMQ7o8MNBQpOGMol0OJnlt1qsc=
=NUD3
-----END PGP SIGNATURE-----

[Patrik Hagara]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 03/29/2018 04:49 PM, Zrubi wrote:
> Any suggestion how to solve this?

Try this:
sudo qubes-dom0-update --action=downgrade [kernel packages]

> And if I succed, how can I lock my system to this kernel version?

Add the following line into /etc/yum.conf or /etc/dnf/dnf.conf
_outside_ of the section marked with "QUBES BEGIN" and "QUBES END":

exclude=kernel*


Cheers,
Patrik
-----BEGIN PGP SIGNATURE-----
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=tj6D
-----END PGP SIGNATURE-----