Qubes OS 4.0.2-rc1 has been released!

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Qubes Community,

We're pleased to announce the first release candidate for Qubes 4.0.2!

Features:
- All 4.0 dom0 updates to date
- Fedora 30 TemplateVM
- Debian 10 TemplateVM
- Whonix 15 Gateway and Workstation TemplateVMs
- Linux kernel 4.19 by default

Qubes 4.0.2-rc1 is available on the Downloads page. [1]


What is a point release?
------------------------

A point release does not designate a separate, new version of Qubes OS.
Rather, it designates its respective major or minor release (in this
case, 4.0) inclusive of all updates up to a certain point. Installing
Qubes 4.0 and fully updating it results in the same system as installing
Qubes 4.0.2.


What should I do?
-----------------

If you installed Qubes 4.0 or 4.0.1 and have fully updated [2], then
your system is already equivalent to a Qubes 4.0.2 installation. No
further action is required.

Regardless of your current OS, if you wish to install (or reinstall)
Qubes 4.0 for any reason, then the 4.0.2 ISO makes this more convenient
and secure, since it bundles all Qubes 4.0 updates to date.


Release candidate planning
--------------------------

If no major issues are discovered in 4.0.2-rc1, we expect the stable
release of 4.0.2 to follow in a few weeks. As usual, you can help by
reporting any bugs you encounter. [3]


[1] https://www.qubes-os.org/downloads/
[2] https://www.qubes-os.org/doc/updating-qubes-os/
[3] https://www.qubes-os.org/doc/reporting-bugs/

This announcement is also available on the Qubes website:
https://www.qubes-os.org/news/2019/07/09/qubes-4-0-2-rc1/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=yLBp
-----END PGP SIGNATURE-----

[dro...@gmail.com]

Great!

I was getting ready to ask when it might be out :)

I'll download the ISO and try it out. Time to wipe another drive...

[Chris Laprise]

On 7/10/19 3:52 AM, Andrew David Wong wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Dear Qubes Community,
>
> We're pleased to announce the first release candidate for Qubes 4.0.2!
>
> Features:
> - All 4.0 dom0 updates to date
> - Fedora 30 TemplateVM
> - Debian 10 TemplateVM
> - Whonix 15 Gateway and Workstation TemplateVMs
> - Linux kernel 4.19 by default
>
> Qubes 4.0.2-rc1 is available on the Downloads page. [1]

Users should be aware that the newer Debian template might not be able
to update without first running a command manually:

https://github.com/QubesOS/qubes-issues/issues/5149


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

[dro...@gmail.com]

> Users should be aware that the newer Debian template might not be able
> to update without first running a command manually:
>
> https://github.com/QubesOS/qubes-issues/issues/5149

Confirmed. I just reached that point. Downloaded the new ISO, installed okay. Updated each template okay.

BTW the above error no longer occurs with the whonix templates. They seem to be fixed now. That's good.

Also FYI: The Debian-10 error can be avoided by first installing Debian-9, then manually upgrading it to Debian-10.

[David Hobach]

On 7/10/19 3:52 AM, Andrew David Wong wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>>
>> Dear Qubes Community,
>>
>> We're pleased to announce the first release candidate for Qubes 4.0.2!
>>
>> Features:
>>   - All 4.0 dom0 updates to date
>>   - Fedora 30 TemplateVM
>>   - Debian 10 TemplateVM
>>   - Whonix 15 Gateway and Workstation TemplateVMs
>>   - Linux kernel 4.19 by default
>>
>> Qubes 4.0.2-rc1 is available on the Downloads page. [1]

I just checked

sudo qubes-dom0-update --action=search qubes-template

and found

debian-8
debian-9
fedora-30
fedora-25-minimal
fedora-28-minimal

No debian-10 however. Did I miss something?

[unman]

On Thu, Jul 11, 2019 at 12:11:24PM +0200, David Hobach wrote:
> On 7/10/19 3:52 AM, Andrew David Wong wrote:
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA512
> > >
> > > Dear Qubes Community,
> > >
> > > We're pleased to announce the first release candidate for Qubes 4.0.2!
> > >
> > > Features:

> > > ?? - All 4.0 dom0 updates to date
> > > ?? - Fedora 30 TemplateVM
> > > ?? - Debian 10 TemplateVM
> > > ?? - Whonix 15 Gateway and Workstation TemplateVMs
> > > ?? - Linux kernel 4.19 by default

> > >
> > > Qubes 4.0.2-rc1 is available on the Downloads page. [1]
>
> I just checked
>
> sudo qubes-dom0-update --action=search qubes-template
>
> and found
>
> debian-8
> debian-9
> fedora-30
> fedora-25-minimal
> fedora-28-minimal
>
> No debian-10 however. Did I miss something?

We haven't released a Debian-10 template as yet, except in testing.
The version in testing shows this behaviour, so it may be better to wait
until we have a template build *after* buster was released.

That rc includes a Debian-10 - it's a testing release of 4.0.2, and
includes the Debian-10 template from testing. Obviously the final
release of 4.0.2 wont have a Debian-10 that shows this behaviour.

[Chris Laprise]

Good to hear the template will be refreshed. But this isn't obvious, as
release candidates can become the actual release.

[dro...@gmail.com]

> Users should be aware that the newer Debian template might not be able
> to update without first running a command manually:
>
> https://github.com/QubesOS/qubes-issues/issues/5149

Sadly, this isn't going to work. Sure, you can add the command to the template, and then the template updates okay, but after that, every time you create a new VM from the template, each VM has the problem again. The template needs to be fixed, and I'm sure they will.

In the mean time, I will delete Debian-10, install Debian-9 template, clone to Debian-10, and do a manual update. That will give a better fix for now.

Still testing. Whonix gw/ws appear to be fine, but I haven't done much with those yet. More to come.

[unman]

On Thu, Jul 11, 2019 at 06:28:39AM -0700, dro...@gmail.com wrote:
> > Users should be aware that the newer Debian template might not be able
> > to update without first running a command manually:
> >
> > https://github.com/QubesOS/qubes-issues/issues/5149
>
> Sadly, this isn't going to work. Sure, you can add the command to the template, and then the template updates okay, but after that, every time you create a new VM from the template, each VM has the problem again. The template needs to be fixed, and I'm sure they will.
>

This doesnt seem to be true for debian-10. Once the repository
definition is fixed in the template, by running `apt update`,
it's fixed in TemplateBasedAppVMs. (naturally).

[dro...@gmail.com]

Nope. I created a templatebasedappvm, started it, tried to install something temporarily (forgot to add to original template vm, and didn't want to go thru the long process of shutting down current, starting template, installing app, stopping template, restarting vm, resuming work).

Gets the same error. Have to apply temp fix to any vm created from template. Not a big deal, but annoying enough for me to replace Debian-10.

[dro...@gmail.com]

> Nope. I created a templatebasedappvm, started it, tried to install something temporarily (forgot to add to original template vm, and didn't want to go thru the long process of shutting down current, starting template, installing app, stopping template, restarting vm, resuming work).
>
> Gets the same error. Have to apply temp fix to any vm created from template. Not a big deal, but annoying enough for me to replace Debian-10.

Okay now it's not doing it. Pretty sure I stopped/restarted everything the first time around. Glad it's okay now. I'll test this some more.