/qubes-issues

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

qubes-updates-proxy: Proxying refused on filtered url "http://security.debian.org/dists/jessie/updates/InRelease" #1422

Closed
adrelanos opened this Issue Nov 13, 2015 · 20 comments

Comments

Assignees
No one assigned
Labels
Projects
None yet
Milestone
No milestone
3 participants
@adrelanos @marmarek @andrewdavidwong
@adrelanos
Member

adrelanos commented Nov 13, 2015

In sys-net or sys-whonix.

sudo journalctl -f -u qubes-updates-proxy

Then run sudo apt-get update in connected TemplateVM.

Nov 14 00:09:03 sys-net tinyproxy[491]: Proxying refused on filtered url "http://security.debian.org/dists/jessie/updates/InRelease"
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 13, 2015

Member

Interesting, it should be allowed by this line:

/dists/[a-z-]*/\(InRelease\|Release\|Release.gpg\)\(\|\|/\|\/download\|\?.*\)$

Do you see what is wrong with it? Or maybe you have some other rule there?
Member

marmarek commented Nov 13, 2015

Interesting, it should be allowed by this line:

/dists/[a-z-]*/\(InRelease\|Release\|Release.gpg\)\(\|\|/\|\/download\|\?.*\)$

Do you see what is wrong with it? Or maybe you have some other rule there?
@adrelanos

This comment has been minimized.

Show comment
Hide comment
@adrelanos

adrelanos Nov 13, 2015

Member

Marek Marczykowski-Górecki:

Do you see what is wrong with it?

Unfortunately not, I am not good at regex.

Or maybe you have some other rule there?

I never modified that config file. Just now diffed them to make sure.
No difference.
Member

adrelanos commented Nov 13, 2015

Marek Marczykowski-Górecki:

Do you see what is wrong with it?

Unfortunately not, I am not good at regex.

Or maybe you have some other rule there?

I never modified that config file. Just now diffed them to make sure.
No difference.
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 13, 2015

Member

I see the problem: jessie/updates doesn't match to [a-z-]*. Interesting that other lines there are already fixed in QubesOS/qubes-core-agent-linux@5bd3080
Member

marmarek commented Nov 13, 2015

I see the problem: jessie/updates doesn't match to [a-z-]*. Interesting that other lines there are already fixed in QubesOS/qubes-core-agent-linux@5bd3080
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 13, 2015

Member

While at it - maybe fix #1188 ?
Member

marmarek commented Nov 13, 2015

While at it - maybe fix #1188 ?

@marmarek marmarek closed this in marmarek/old-qubes-core-agent-linux@5377dc5 Nov 13, 2015

marmarek added a commit to QubesOS/qubes-core-agent-linux that referenced this issue Nov 15, 2015

@marmarek
Really fix update-proxy rules for debian security fixes repo 
Reported by @adrelanos
Fixes QubesOS/qubes-issues#1422

(cherry picked from commit 5377dc5)
Verified
This commit was signed with a verified signature.
@marmarek marmarek Marek Marczykowski-Górecki
GPG key ID: 063938BA42CFA724 Learn about signing commits
e19b947
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 15, 2015

Member

Automated announcement from builder-github

The package qubes-core-agent_3.0.21-1+deb8u1 has been pushed to the r3.0 testing repository for the Debian jessie template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing jessie-testing, then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update
Member

marmarek commented Nov 15, 2015

Automated announcement from builder-github

The package qubes-core-agent_3.0.21-1+deb8u1 has been pushed to the r3.0 testing repository for the Debian jessie template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing jessie-testing, then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

@marmarek marmarek added the r3.0-jessie-testing label Nov 15, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 15, 2015

Member

Automated announcement from builder-github

The package qubes-core-agent_3.0.21-1+deb7u1 has been pushed to the r3.0 testing repository for the Debian wheezy template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing wheezy-testing, then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update
Member

marmarek commented Nov 15, 2015

Automated announcement from builder-github

The package qubes-core-agent_3.0.21-1+deb7u1 has been pushed to the r3.0 testing repository for the Debian wheezy template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing wheezy-testing, then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

@marmarek marmarek added the r3.0-wheezy-testing label Nov 15, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 15, 2015

Member

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc20 has been pushed to the r3.0 testing repository for the Fedora fc20 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

Changes included in this update
Member

marmarek commented Nov 15, 2015

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc20 has been pushed to the r3.0 testing repository for the Fedora fc20 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

Changes included in this update

@marmarek marmarek added the r3.0-fc20-testing label Nov 15, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 15, 2015

Member

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc21 has been pushed to the r3.0 testing repository for the Fedora fc21 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

Changes included in this update
Member

marmarek commented Nov 15, 2015

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc21 has been pushed to the r3.0 testing repository for the Fedora fc21 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

Changes included in this update

@marmarek marmarek added the r3.0-fc21-testing label Nov 15, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 15, 2015

Member

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc22 has been pushed to the r3.0 testing repository for the Fedora fc22 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

Changes included in this update
Member

marmarek commented Nov 15, 2015

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc22 has been pushed to the r3.0 testing repository for the Fedora fc22 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

Changes included in this update

@marmarek marmarek added the r3.0-fc22-testing label Nov 15, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 15, 2015

Member

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc23 has been pushed to the r3.0 testing repository for the Fedora fc23 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

Changes included in this update
Member

marmarek commented Nov 15, 2015

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc23 has been pushed to the r3.0 testing repository for the Fedora fc23 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r3.0-current-testing

Changes included in this update

@marmarek marmarek added the r3.0-fc23-testing label Nov 15, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 29, 2015

Member

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc20 has been pushed to the r3.0 stable repository for the Fedora fc20 template.
To install this update, please use the standard update command:

sudo yum update

Changes included in this update
Member

marmarek commented Nov 29, 2015

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc20 has been pushed to the r3.0 stable repository for the Fedora fc20 template.
To install this update, please use the standard update command:

sudo yum update

Changes included in this update

@marmarek marmarek added r3.0-fc20-stable and removed r3.0-fc20-testing labels Nov 29, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 29, 2015

Member

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc21 has been pushed to the r3.0 stable repository for the Fedora fc21 template.
To install this update, please use the standard update command:

sudo yum update

Changes included in this update
Member

marmarek commented Nov 29, 2015

Automated announcement from builder-github

The package qubes-core-vm-3.0.21-1.fc21 has been pushed to the r3.0 stable repository for the Fedora fc21 template.
To install this update, please use the standard update command:

sudo yum update

Changes included in this update

@marmarek marmarek added r3.0-fc21-stable and removed r3.0-fc21-testing labels Nov 29, 2015

@andrewdavidwong

This comment has been minimized.

Show comment
Hide comment
@andrewdavidwong

andrewdavidwong Nov 30, 2015

Member

On a Fedora 23 template with qubes-core-vm-3.0.21-1.fc23, using an https URL for a non-Fedora repo still fails. Changing the https to http allows it to go through.
Member

andrewdavidwong commented Nov 30, 2015

On a Fedora 23 template with qubes-core-vm-3.0.21-1.fc23, using an https URL for a non-Fedora repo still fails. Changing the https to http allows it to go through.
@andrewdavidwong

This comment has been minimized.

Show comment
Hide comment
@andrewdavidwong

andrewdavidwong Dec 4, 2015

Member

On a Fedora 23 template with qubes-core-vm-3.0.21-1.fc23, using an https URL for a non-Fedora repo still fails. Changing the https to http allows it to go through.

Am I confused, or is this actually relevant?
Member

andrewdavidwong commented Dec 4, 2015

On a Fedora 23 template with qubes-core-vm-3.0.21-1.fc23, using an https URL for a non-Fedora repo still fails. Changing the https to http allows it to go through.

Am I confused, or is this actually relevant?
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Dec 4, 2015

Member

This one is about debian security updates. HTTPS is handled in separate ticket #1188 and it probably won't be backported to R3.0.
Member

marmarek commented Dec 4, 2015

This one is about debian security updates. HTTPS is handled in separate ticket #1188 and it probably won't be backported to R3.0.
@andrewdavidwong

This comment has been minimized.

Show comment
Hide comment
@andrewdavidwong

andrewdavidwong Dec 4, 2015

Member

Oh, ok. builder-github posted a bunch of messages about Fedora templates, so I thought it was supposed to apply to Fedora as well.
Member

andrewdavidwong commented Dec 4, 2015

Oh, ok. builder-github posted a bunch of messages about Fedora templates, so I thought it was supposed to apply to Fedora as well.
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Dec 4, 2015

Member

Yes - netvm based on Fedora (with an updates proxy) can be used also to proxy Debian updates :)
Member

marmarek commented Dec 4, 2015

Yes - netvm based on Fedora (with an updates proxy) can be used also to proxy Debian updates :)
@andrewdavidwong

This comment has been minimized.

Show comment
Hide comment
@andrewdavidwong

andrewdavidwong Dec 5, 2015

Member

Ah, I understand now, thank you. My mistake!
Member

andrewdavidwong commented Dec 5, 2015

Ah, I understand now, thank you. My mistake!
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Dec 20, 2015

Member

Automated announcement from builder-github

The package qubes-core-agent_3.0.21-1+deb8u1 has been pushed to the r3.0 stable repository for the Debian jessie template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update
Member

marmarek commented Dec 20, 2015

Automated announcement from builder-github

The package qubes-core-agent_3.0.21-1+deb8u1 has been pushed to the r3.0 stable repository for the Debian jessie template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

@marmarek marmarek added r3.0-jessie-stable and removed r3.0-jessie-testing labels Dec 20, 2015

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Dec 20, 2015

Member

Automated announcement from builder-github

The package qubes-core-agent_3.0.21-1+deb7u1 has been pushed to the r3.0 stable repository for the Debian wheezy template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update
Member

marmarek commented Dec 20, 2015

Automated announcement from builder-github

The package qubes-core-agent_3.0.21-1+deb7u1 has been pushed to the r3.0 stable repository for the Debian wheezy template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

@marmarek marmarek added r3.0-wheezy-stable and removed r3.0-wheezy-testing labels Dec 20, 2015

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment