On Sun, Jun 23, 2019 at 11:54:40PM -0700, Sphere wrote:
> /etc/qubes-rpc/policy/qubes-UpdatesProxy
> $type:TemplateVM $default allow,target=VPN
> 
> As soon as I execute a sudo dnf update to my template VM, it takes a little 
> less than a second for it to go
> "Failed to synchronize cache for repo 'updates'"
> "Error: Failed to synchronize cache for repo 'updates'"
> 
> dom0 updates isn't suffering from this which is why I don't really get what 
> the problem is. At first I thought it's the custom resolv.conf being used for 
> dnscrypt-proxy but that doesn't seem to be the case after trying to use the 
> dns server of the vpn itself
> 
> Web browsing and everything else is working as intended through the VPN qube 
> and only TemplatVM updates are failing. I don't think there is a problem with 
> what I set on /etc/qubes-rpc/policy/qubes-UpdatesProxy
> 
> But I don't really face this problem when the target is set to the net VM. 
> That however is no good since I'm looking to utilize the VPN for Template 
> updating.
> 
> Is TemplateVM updating dependent on whether or not net VM is capable of 
> connecting to the internet and domain name resolutions?
> 

dom0 updates are governed by the global setting: Dom0 UpdateVM -
presumably *not* set to VPN.

Without knowing how your VPN qubes is configured, it's difficult to say
what's going on.
Are you able to browse from VPN?
Have you configured VPN qube to provide updateProxy service?

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190624150347.bgx3uwtfpj6hqs7i%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to