Add R4.3 keys and switch to R4.3 repositories

- fedora
- debian
- ubuntu

QubesOS/qubes-issues#9125

debian/qubes-core-agent.install

@@ -175,9 +175,9 @@ usr/lib/qubes/tinyproxy-wrapper
 usr/share/glib-2.0/schemas/*
 usr/share/kde4/services/*.desktop
 usr/share/keyrings/qubes-archive-keyring.gpg
-usr/share/keyrings/qubes-archive-keyring-4.2.gpg
+usr/share/keyrings/qubes-archive-keyring-4.3.gpg
 usr/share/keyrings/qubes-ubuntu-archive-keyring.gpg
-usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg
+usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg
 usr/share/kservices5/ServiceMenus/*.desktop
 usr/share/applications/*.desktop
 usr/share/applications/defaults.list

package-managers/Makefile

@@ -62,13 +62,13 @@ else
 	sed "s/@DIST@/$(DIST)/" apt-qubes-r4.list.in \
 		> $(DESTDIR)$(APTCONFDIR)/sources.list.d/qubes-r4.list
 endif
-	install -D -m 0644 apt-qubes-archive-keyring-4.2.gpg \
-		$(DESTDIR)/usr/share/keyrings/qubes-archive-keyring-4.2.gpg
-	ln -s qubes-archive-keyring-4.2.gpg \
+	install -D -m 0644 apt-qubes-archive-keyring-4.3.gpg \
+		$(DESTDIR)/usr/share/keyrings/qubes-archive-keyring-4.3.gpg
+	ln -s qubes-archive-keyring-4.3.gpg \
 		$(DESTDIR)/usr/share/keyrings/qubes-archive-keyring.gpg
-	install -D -m 0644 apt-qubes-ubuntu-archive-keyring-4.2.gpg \
-		$(DESTDIR)/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg
-	ln -s qubes-ubuntu-archive-keyring-4.2.gpg \
+	install -D -m 0644 apt-qubes-ubuntu-archive-keyring-4.3.gpg \
+		$(DESTDIR)/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg
+	ln -s qubes-ubuntu-archive-keyring-4.3.gpg \
 		$(DESTDIR)/usr/share/keyrings/qubes-ubuntu-archive-keyring.gpg
 	install -D -m 0644 apt-conf-00notify-hook \
 		$(DESTDIR)$(APTCONFDIR)/apt.conf.d/00notify-hook

package-managers/RPM-GPG-KEY-qubes-4.3-primary

@@ -0,0 +1,40 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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=
+=ZQg0
+-----END PGP PUBLIC KEY BLOCK-----

package-managers/apt-qubes-archive-keyring.gpg

@@ -1 +1 @@
-apt-qubes-archive-keyring-4.2.gpg
+apt-qubes-archive-keyring-4.3.gpg

package-managers/apt-qubes-r4-ubuntu.list.in

@@ -1,15 +1,15 @@
 # Main qubes updates repository
-deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg ] https://debu.qubes-os.org/r4.2/vm @DIST@ main
-#deb-src [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg ] https://debu.qubes-os.org/r4.2/vm @DIST@ main
+deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg ] https://debu.qubes-os.org/r4.3/vm @DIST@ main
+#deb-src [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg ] https://debu.qubes-os.org/r4.3/vm @DIST@ main
 
 # Qubes updates candidates repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg] https://debu.qubes-os.org/r4.2/vm @DIST@-testing main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg ]  https://debu.qubes-os.org/r4.2/vm @DIST@-testing main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg] https://debu.qubes-os.org/r4.3/vm @DIST@-testing main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg ]  https://debu.qubes-os.org/r4.3/vm @DIST@-testing main
 
 # Qubes security updates testing repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg] https://debu.qubes-os.org/r4.2/vm @DIST@-securitytesting main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg ] https://debu.qubes-os.org/r4.2/vm @DIST@-securitytesting main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg] https://debu.qubes-os.org/r4.3/vm @DIST@-securitytesting main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg ] https://debu.qubes-os.org/r4.3/vm @DIST@-securitytesting main
 
 # Qubes experimental/unstable repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg] https://debu.qubes-os.org/r4.2/vm @DIST@-unstable main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.2.gpg ] https://debu.qubes-os.org/r4.2/vm @DIST@-unstable main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg] https://debu.qubes-os.org/r4.3/vm @DIST@-unstable main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-ubuntu-archive-keyring-4.3.gpg ] https://debu.qubes-os.org/r4.3/vm @DIST@-unstable main

package-managers/apt-qubes-r4.list.in

@@ -1,33 +1,33 @@
 # Main qubes updates repository
-deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ] https://deb.qubes-os.org/r4.2/vm @DIST@ main
-#deb-src [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ] https://deb.qubes-os.org/r4.2/vm @DIST@ main
+deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ] https://deb.qubes-os.org/r4.3/vm @DIST@ main
+#deb-src [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ] https://deb.qubes-os.org/r4.3/vm @DIST@ main
 
 # Qubes updates candidates repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg] https://deb.qubes-os.org/r4.2/vm @DIST@-testing main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ]  https://deb.qubes-os.org/r4.2/vm @DIST@-testing main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg] https://deb.qubes-os.org/r4.3/vm @DIST@-testing main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ]  https://deb.qubes-os.org/r4.3/vm @DIST@-testing main
 
 # Qubes security updates testing repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg] https://deb.qubes-os.org/r4.2/vm @DIST@-securitytesting main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ] https://deb.qubes-os.org/r4.2/vm @DIST@-securitytesting main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg] https://deb.qubes-os.org/r4.3/vm @DIST@-securitytesting main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ] https://deb.qubes-os.org/r4.3/vm @DIST@-securitytesting main
 
 # Qubes experimental/unstable repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg] https://deb.qubes-os.org/r4.2/vm @DIST@-unstable main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ] https://deb.qubes-os.org/r4.2/vm @DIST@-unstable main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg] https://deb.qubes-os.org/r4.3/vm @DIST@-unstable main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ] https://deb.qubes-os.org/r4.3/vm @DIST@-unstable main
 
 
 # Qubes Tor updates repositories
 # Main qubes updates repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/vm @DIST@ main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/vm @DIST@ main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/vm @DIST@ main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/vm @DIST@ main
 
 # Qubes updates candidates repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/vm @DIST@-testing main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/vm @DIST@-testing main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/vm @DIST@-testing main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/vm @DIST@-testing main
 
 # Qubes security updates testing repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/vm @DIST@-securitytesting main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/vm @DIST@-securitytesting main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/vm @DIST@-securitytesting main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/vm @DIST@-securitytesting main
 
 # Qubes experimental/unstable repository
-#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/vm @DIST@-unstable main
-#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.2.gpg ] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/vm @DIST@-unstable main
+#deb [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/vm @DIST@-unstable main
+#deb-src  [arch=amd64 signed-by=/usr/share/keyrings/qubes-archive-keyring-4.3.gpg ] tor+http://deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/vm @DIST@-unstable main

package-managers/apt-qubes-ubuntu-archive-keyring.gpg

@@ -1 +1 @@
-apt-qubes-ubuntu-archive-keyring-4.2.gpg
+apt-qubes-ubuntu-archive-keyring-4.3.gpg

package-managers/yum-qubes-r4.repo.in

@@ -1,38 +1,38 @@
-[qubes-vm-r4.2-current]
+[qubes-vm-r4.3-current]
 name = Qubes OS Repository for VM (updates)
-baseurl = https://yum.qubes-os.org/r4.2/current/vm/@DIST@$releasever
-#baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/current/vm/@DIST@$releasever
-gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4.2-primary
+baseurl = https://yum.qubes-os.org/r4.3/current/vm/@DIST@$releasever
+#baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/current/vm/@DIST@$releasever
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4.3-primary
 skip_if_unavailable=False
 gpgcheck = 1
 repo_gpgcheck = 1
 enabled=1
 
-[qubes-vm-r4.2-current-testing]
+[qubes-vm-r4.3-current-testing]
 name = Qubes OS Repository for VM (updates-testing)
-baseurl = https://yum.qubes-os.org/r4.2/current-testing/vm/@DIST@$releasever
-#baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/current-testing/vm/@DIST@$releasever
-gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4.2-primary
+baseurl = https://yum.qubes-os.org/r4.3/current-testing/vm/@DIST@$releasever
+#baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/current-testing/vm/@DIST@$releasever
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4.3-primary
 skip_if_unavailable=False
 gpgcheck = 1
 repo_gpgcheck = 1
 enabled=0
 
-[qubes-vm-r4.2-security-testing]
+[qubes-vm-r4.3-security-testing]
 name = Qubes OS Repository for VM (security-testing)
-baseurl = https://yum.qubes-os.org/r4.2/security-testing/vm/@DIST@$releasever
-#baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/security-testing/vm/@DIST@$releasever
-gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4.2-primary
+baseurl = https://yum.qubes-os.org/r4.3/security-testing/vm/@DIST@$releasever
+#baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/security-testing/vm/@DIST@$releasever
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4.3-primary
 skip_if_unavailable=False
 gpgcheck = 1
 repo_gpgcheck = 1
 enabled=0
 
-[qubes-vm-r4.2-unstable]
+[qubes-vm-r4.3-unstable]
 name = Qubes OS Repository for VM (unstable)
-baseurl = https://yum.qubes-os.org/r4.2/unstable/vm/@DIST@$releasever
-#baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.2/unstable/vm/@DIST@$releasever
-gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4.2-unstable
+baseurl = https://yum.qubes-os.org/r4.3/unstable/vm/@DIST@$releasever
+#baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.3/unstable/vm/@DIST@$releasever
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4.3-unstable
 gpgcheck = 1
 repo_gpgcheck = 1
 enabled=0