QubesOS / qubes-issues

The Qubes OS Project issue tracker
https://www.qubes-os.org/doc/issue-tracking/
541 stars 48 forks source link

Upgrading fedora-39 fails when sys-net uses debian-12-xfce #9155

Open zaz opened 6 months ago

zaz commented 6 months ago

Qubes OS release

4.2.1

Brief summary

When sys-net uses the debian-12-xfce template, upgrading fedora-39 fails.

This may have been an issue with a modified bash profile in the TVM, so feel free to close this until myself or someone else confirms the issue.

That being said, the Qubes update mechanism should be made robust against errors in Bash configuration, so perhaps that deserves its own issue.

Steps to reproduce

  1. set sys-firewall to a disposable fedora-39 VM
  2. set sys-net to debian-12-xfce
  3. run sudo dnf upgrade in fedora-39

Expected behavior

System is upgraded.

Actual behavior

Fedora 39 - x86_64 - Updates                    0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'updates':
  - Curl error (43): A libcurl function was given a bad argument for https://mirrors.fedoraproject.org/metalink?repo=updates-released-f39&arch=x86_64 []
Error: Failed to download metadata for repo 'updates': Cannot prepare internal mirrorlist: Curl error (43): A libcurl function was given a bad argument for https://mirrors.fedoraproject.org/metalink?repo=updates-released-f39&arch=x86_64 []

I then shut down sys-net, switched its template to fedora-39, booted sys-net and re-ran sudo dnf upgrade in fedora-39 and it upgraded without issue.

Curl version

[user@fedora-39 ~]$ curl --version
curl 8.2.1 (x86_64-redhat-linux-gnu) libcurl/8.2.1 OpenSSL/3.1.1 zlib/1.2.13 libidn2/2.3.7 nghttp2/1.55.1
Release-Date: 2023-07-26
Protocols: file ftp ftps http https
Features: alt-svc AsynchDNS GSS-API HSTS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz SPNEGO SSL threadsafe UnixSockets
user@debian-12-xfce:~$ curl --version
curl 7.88.1 (x86_64-pc-linux-gnu) libcurl/7.88.1 OpenSSL/3.0.11 zlib/1.2.13 brotli/1.0.9 zstd/1.5.4 libidn2/2.3.3 libpsl/0.21.2 (+libidn2/2.3.3) libssh2/1.10.0 nghttp2/1.52.0 librtmp/2.3 OpenLDAP/2.5.13
Release-Date: 2023-02-20, security patched: 7.88.1-10+deb12u5
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS brotli GSS-API HSTS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL threadsafe TLS-SRP UnixSockets zstd
geraldhobbes commented 4 months ago

Does it help to run systemctl start qubes-updates-proxy in fedora-39 before doing dnf update?