I ran a test after cloning and transforming a debian-8 template to a debian-9 template. The sys-net vm exhibited the same trouble with getting an IP assignment using the debian-9 template as the fedora-24 and 25 templates. So, it looks like I have something fundamentally misconfigured in dom0 (and I try not to touch it) in my installation where it can only use the original templates for sys-net and sys-firewall. I'm able to use the newer templates for all the other qubes.
I tested sys-net and sys-firewall incrementally with different underlying templates and the only ones that would work were fedora-23 or debian-8. I've switched to debian-8 for sys-net and sys-firewall since it works. I'll then start with a fresh install with Qubes 4.0 and migrate my user qubes. When I have time I'll look into the IP assignment process and the firewall to see what's going on. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8f627dd1-80c6-4472-9513-5f98a05ab9df%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
