{"action":"created","issue":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/3737","repository_url":"https://api.github.com/repos/QubesOS/qubes-issues","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/3737/labels{/name}","comments_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/3737/comments","events_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/3737/events","html_url":"https://github.com/QubesOS/qubes-issues/issues/3737","id":308118188,"number":3737,"title":"Fedora templates do not update the Qubes' repos through Whonix update proxy (R4.0-RC5) : \" Error: Failed to synchronize cache for repo 'qubes-vm-r4.0-current' \"","user":{"login":"n1m1","id":7090974,"avatar_url":"https://avatars0.githubusercontent.com/u/7090974?v=4","gravatar_id":"","url":"https://api.github.com/users/n1m1","html_url":"https://github.com/n1m1","followers_url":"https://api.github.com/users/n1m1/followers","following_url":"https://api.github.com/users/n1m1/following{/other_user}","gists_url":"https://api.github.com/users/n1m1/gists{/gist_id}","starred_url":"https://api.github.com/users/n1m1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/n1m1/subscriptions","organizations_url":"https://api.github.com/users/n1m1/orgs","repos_url":"https://api.github.com/users/n1m1/repos","events_url":"https://api.github.com/users/n1m1/events{/privacy}","received_events_url":"https://api.github.com/users/n1m1/received_events","type":"User","site_admin":false},"labels":[{"id":183969432,"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/duplicate","name":"duplicate","color":"bfe5bf","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-03-23T17:30:16Z","updated_at":"2018-03-24T12:37:43Z","closed_at":null,"author_association":"NONE","body":"### Qubes OS version:\r\n<!-- (e.g., `R3.2`)\r\n     You can get it from the dom0 terminal with the command\r\n         `cat /etc/qubes-release`\r\n     Type below this line. -->\r\n\r\nR4.0-rc5\r\n\r\n\r\n\r\n<!-- Type above this line. -->\r\n### Affected component(s): \r\n<!-- Type below this line. -->\r\n\r\nFedora templates.\r\n\r\n\r\n\r\n<!-- Type above this line. -->\r\n---\r\n<!--------------------------->\r\n### Steps to reproduce the behavior:\r\n<!-- Use single backticks (`) for in-line code snippets and\r\n     triple backticks (```) for code blocks.\r\n     Type below this line. -->\r\n\r\nIn a Fedora template type:\r\n`sudo dnf update`\r\n\r\nQubes is configured in order to update the templates through sys-whonix-14. Below the conf file in Dom0' (/etc/qubes-rpc/policy/qubes.UpdatesProxy)\r\n \r\n```\r\n\r\n$type:TemplateVM $default allow,target=sys-whonix-14\r\n$tag:whonix-updatevm $default allow,target=sys-whonix-14\r\n$tag:whonix-updatevm $anyvm deny\r\n## Note that policy parsing stops at the first match,\r\n## so adding anything below \"$anyvm $anyvm action\" line will have no effect\r\n\r\n## Please use a single # to start your custom comments\r\n\r\n# Default rule for all TemplateVMs - direct the connection to sys-net\r\n$type:TemplateVM $default allow,target=sys-net\r\n\r\n$anyvm $anyvm deny\r\n```\r\n\r\n\r\n<!-- Type above this line. -->\r\n### Expected behavior:\r\n<!-- Type below this line. -->\r\n\r\nThe Fedora template is updated\r\n\r\n\r\n\r\n<!-- Type above this line. -->\r\n### Actual behavior:\r\n<!-- Type below this line. -->\r\n\r\nThe Fedora repos properly work, but the Qubes' ones do not. Here is the output I get.\r\n\r\n```\r\nFedora 26 - x86_64 - Updates                    561 kB/s |  21 MB     00:38    \r\nFedora 26 - x86_64                              916 kB/s |  53 MB     00:59    \r\nError: Failed to synchronize cache for repo 'qubes-vm-r4.0-current'\r\n```\r\n\r\n\r\n<!-- Type above this line. -->\r\n### General notes:\r\n<!-- Type below this line. -->\r\n\r\n- I started to experience this behavior only after updating to Qubes 4.0-rc5. This issue was not present in Qubes 4.0-rc4\r\n- I do not have this issue with Debian-based templates. `apt update && apt upgrade` just work.\r\n- `qubes-dom0-update` just works.\r\n-  Qubes-updates-proxy is installed in sys-whonix and sys-net\r\n- If I change this line` $type:TemplateVM $default allow,target=sys-whonix-14` in `$type:TemplateVM $default allow,target=sys-net` everything works as expected.\r\n- This is the output of `systemctl status qubes-updates-proxy` in sys-whonix-14\r\n\r\n```\r\n● qubes-updates-proxy.service - Qubes updates proxy (tinyproxy)\r\n   Loaded: loaded (/lib/systemd/system/qubes-updates-proxy.service; enabled; vendor preset: enabled)\r\n  Drop-In: /lib/systemd/system/qubes-updates-proxy.service.d\r\n           └─40_qubes-whonix.conf\r\n   Active: active (running) since Fri 2018-03-23 14:37:20 UTC; 2h 10min ago\r\n  Process: 887 ExecStartPre=/usr/bin/install -d --owner tinyproxy --group tinyproxy /var/run/tinyproxy (code=exited, status=0/SUCCESS)\r\n Main PID: 892 (tinyproxy)\r\n    Tasks: 8 (limit: 4915)\r\n   CGroup: /system.slice/qubes-updates-proxy.service\r\n           ├─ 892 /usr/sbin/tinyproxy -d -c /etc/tinyproxy/tinyproxy-updates.conf\r\n           ├─ 898 /usr/sbin/tinyproxy -d -c /etc/tinyproxy/tinyproxy-updates.conf\r\n           ├─ 899 /usr/sbin/tinyproxy -d -c /etc/tinyproxy/tinyproxy-updates.conf\r\n           ├─3367 /usr/sbin/tinyproxy -d -c /etc/tinyproxy/tinyproxy-updates.conf\r\n           ├─3396 /usr/sbin/tinyproxy -d -c /etc/tinyproxy/tinyproxy-updates.conf\r\n           ├─3455 /usr/sbin/tinyproxy -d -c /etc/tinyproxy/tinyproxy-updates.conf\r\n           ├─8643 /usr/sbin/tinyproxy -d -c /etc/tinyproxy/tinyproxy-updates.conf\r\n           └─9233 /usr/sbin/tinyproxy -d -c /etc/tinyproxy/tinyproxy-updates.conf\r\n\r\nMar 23 14:36:56 host tinyproxy[892]: Waiting servers (0) is less than MinSpareServers (2). Creating new child.\r\nMar 23 14:37:01 host tinyproxy[892]: Waiting servers (0) is less than MinSpareServers (2). Creating new child.                                                                                                                                                \r\nMar 23 14:37:06 host tinyproxy[892]: Waiting servers (0) is less than MinSpareServers (2). Creating new child.                                                                                                                                                \r\nMar 23 14:38:05 host tinyproxy[898]: Proxying refused on filtered domain \"127.0.0.1\"                                                                                                                                                                          \r\nMar 23 16:39:03 host tinyproxy[892]: Waiting servers (1) is less than MinSpareServers (2). Creating new child.                                                                                                                                                \r\nMar 23 16:39:35 host tinyproxy[3455]: Error reading readable client_fd 10                                                                                                                                                                                     \r\nMar 23 16:39:35 host tinyproxy[3455]: Could not retrieve request entity                                                                                                                                                                                       \r\nMar 23 16:39:35 host tinyproxy[8643]: Error reading readable client_fd 10                                                                                                                                                                                     \r\nMar 23 16:39:35 host tinyproxy[8643]: Could not retrieve request entity                                                                                                                                                                                       \r\nMar 23 16:42:33 host tinyproxy[892]: Waiting servers (0) is less than MinSpareServers (2). Creating new child.  \r\n```\r\n- Running `sudo systemctl restart qubes-updates-proxy` in sys-whonix-14 did not sort effect.\r\n\r\n<!-- Type above this line. -->\r\n---\r\n<!--------------------------->\r\n### Related issues:\r\n<!-- Type below this line. -->\r\n\r\n#3557 and #3135 ? \r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/comments/375885397","html_url":"https://github.com/QubesOS/qubes-issues/issues/3737#issuecomment-375885397","issue_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/3737","id":375885397,"user":{"login":"n1m1","id":7090974,"avatar_url":"https://avatars0.githubusercontent.com/u/7090974?v=4","gravatar_id":"","url":"https://api.github.com/users/n1m1","html_url":"https://github.com/n1m1","followers_url":"https://api.github.com/users/n1m1/followers","following_url":"https://api.github.com/users/n1m1/following{/other_user}","gists_url":"https://api.github.com/users/n1m1/gists{/gist_id}","starred_url":"https://api.github.com/users/n1m1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/n1m1/subscriptions","organizations_url":"https://api.github.com/users/n1m1/orgs","repos_url":"https://api.github.com/users/n1m1/repos","events_url":"https://api.github.com/users/n1m1/events{/privacy}","received_events_url":"https://api.github.com/users/n1m1/received_events","type":"User","site_admin":false},"created_at":"2018-03-24T12:37:43Z","updated_at":"2018-03-24T12:37:43Z","author_association":"NONE","body":"Thanks @andrewdavidwong and @marmarek for your kind and prompt answers. I am not using onion services on Qubes 4.0: the problem is not related to them. \r\n\r\nP.s: just a note, not related with this issue. I use onion services on a different laptop where I run Qubes 3.2 and, until few days ago, I've never ever experienced a problem with them."}}
{"actor":{"display_login":"n1m1"}}