phase out manual use of qubes-dom0-update by user / replace it by salt

[adrelanos]

Talked to Marek at 34c3. We concluded the following.

• Installing Whonix manually using qubes-dom0-update got too difficult since too many manual modifications of dom0 would be required.
• Most users shall no longer install Whonix using qubes-dom0-update.
  • Most users shall install Whonix using Qubes salt.
• Most users shall no longer update using qubes-dom0-update.
  • Should use sudo qubesctl --templates pkg.upgrade instead.
• We need salt commands for installation of arch linux and others
• Modify qubes-dom0-update to tell the user it is recommended to use salt instead.

Basically, let's phase out manual use of qubes-dom0-update by users.

Technical background:

• Marek said we cannot make qubes-dom0-update run salt, because salt is running qubes-dom0-update and it must not be circular. Would be tricky because not clear which salt salt formula to enable.
• This is a description what Qubes salt does (confirmed by Marek): https://www.whonix.org/wiki/Dev/Qubes#salt

[tasket]

Then salt will still use qubes-dom0-update in R4.1...?

[tasket]

Then salt will still use qubes-dom0-update in R4.1...?

[adrelanos]

Yes, salt will continue to call qubes-dom0-update.

[adrelanos]

Yes, salt will continue to call qubes-dom0-update.

[adrelanos]

//cc @awokd

[adrelanos]

//cc @awokd

[awokd]

Thanks for the heads up @adrelanos , hadn't seen this. I linked #1983 from the R4.0 doc tracking ticket.

[awokd]

Thanks for the heads up @adrelanos , hadn't seen this. I linked #1983 from the R4.0 doc tracking ticket.

[andrewdavidwong]

Per #3595 (comment), this issue should be understood more generally to include things like the creation of whonix-ws-based VMs, not as limited solely to qubes-dom0-update.

[andrewdavidwong]

Per #3595 (comment), this issue should be understood more generally to include things like the creation of whonix-ws-based VMs, not as limited solely to qubes-dom0-update.