core-qrexec v4.3.8 (r4.3)

[qubesos-bot]

Update of core-qrexec to v4.3.8 for Qubes OS r4.3, see comments below for details and build status.

From commit: QubesOS/qubes-core-qrexec@051604d

Changes since previous version:
QubesOS/qubes-core-qrexec@051604d version 4.3.8
QubesOS/qubes-core-qrexec@65f5934 Merge branch 'update-restart'
QubesOS/qubes-core-qrexec@39f349a rpm: fix systemd unit installation
QubesOS/qubes-core-qrexec@6fd3696 Merge remote-tracking branch 'origin/pr/204'
QubesOS/qubes-core-qrexec@27facce Restart qrexec-agent on update
QubesOS/qubes-core-qrexec@4d62b9e Don't translate dom0 to @adminvm
QubesOS/qubes-core-qrexec@6bdf8f0 Merge remote-tracking branch 'origin/pr/200'
QubesOS/qubes-core-qrexec@006eece Merge remote-tracking branch 'origin/pr/203'
QubesOS/qubes-core-qrexec@ec1f865 Fix TestClient::test_run_dom0_service_socket_no_read
QubesOS/qubes-core-qrexec@7b7e4fe tests/policy_parser: Cleanup commented out code
QubesOS/qubes-core-qrexec@e66ccf8 Re-add target override tests
QubesOS/qubes-core-qrexec@aff2e68 Merge remote-tracking branch 'origin/pr/201'
QubesOS/qubes-core-qrexec@9e2ac95 Fix uuid_to_name
QubesOS/qubes-core-qrexec@3c9572c qrexec-policy-agent: Replace usage of deprecated Gtk.Entry.set_icon_from_stock
QubesOS/qubes-core-qrexec@08fba14 qrexec-policy-daemon: reject policy.Eval for an empty service name
QubesOS/qubes-core-qrexec@604aa0a tests: Fix test for too long destination qube name
QubesOS/qubes-core-qrexec@5dbf2f0 tests: always mock get_system_info when mock_request is used

Referenced issues:
QubesOS/qubes-issues#9870

If you're release manager, you can issue GPG-inline signed command:

• Upload-component r4.3 core-qrexec 051604dc55192b07c0a1c5213b761e9450623970 current all (available 5 days from now)
• Upload-component r4.3 core-qrexec 051604dc55192b07c0a1c5213b761e9450623970 security-testing all

You can choose subset of distributions like:

• Upload-component r4.3 core-qrexec 051604dc55192b07c0a1c5213b761e9450623970 current vm-bookworm,vm-fc37 (available 5 days from now)

Above commands will work only if packages in current-testing repository were built from given commit (i.e. no new version superseded it).

For more information on how to test this update, please take a look at https://www.qubes-os.org/doc/testing/#updates.

[qubesos-bot]

Package for vm-bookworm failed to build (build log) ((('core-qrexec:vm-debian-12.amd64:debian: Failed to build packages: Failed to run '/usr/bin/qvm-run-vm -- disp821 env -- VERBOSE=1 DEBUG=1 BACKEND_VMM=xen bash -c 'mkdir -p /builder/cache/aptcache && /builder/plugins/build_deb/scripts/create-local-repo /builder/repository debian bookworm && sudo -E pbuilder update --distribution bookworm --configfile /builder/pbuilder/pbuilderrc --othermirror "deb [trusted=yes] file:///tmp/qubes-deb bookworm main" && sudo -E pbuilder build --override-config --distribution bookworm --configfile /builder/pbuilder/pbuilderrc --othermirror "deb [trusted=yes] file:///tmp/qubes-deb bookworm main" /builder/build/qubes-core-qrexec_4.3.8-1+deb12u1.dsc && /builder/plugins/build_deb/scripts/patch-changes /builder/build/qubes-core-qrexec_4.3.8-1+deb12u1.dsc /builder/pbuilder/results/qubes-core-qrexec_4.3.8-1+deb12u1_amd64.buildinfo /builder/pbuilder/results/qubes-core-qrexec_4.3.8-1+deb12u1_amd64.changes'' (status=1).',),)).

[qubesos-secondary-bot]

Package for vm-jammy was built (build log).

[qubesos-secondary-bot]

Package for vm-jammy was uploaded to current-testing repository.

[qubesos-secondary-bot]

Package for vm-archlinux failed to build (build log) ((("core-qrexec:vm-archlinux-rolling.x86_64:archlinux: Failed to build PKGs: Failed to run '/usr/bin/qvm-run-vm -- disp8801 env -- VERBOSE=1 DEBUG=1 BACKEND_VMM=xen DIST=archlinux PACKAGE_SET=vm bash -c 'sudo cp /builder/plugins/chroot_archlinux/conf/makepkg-x86_64.conf /usr/local/share/devtools/makepkg.conf.d/qubes-x86_64.conf && sudo mkdir -p /builder/cache/qubes-x86_64 && cd /builder/cache/qubes-x86_64 && sudo tar xf /builder/cache/root.tar.gz && sudo /builder/plugins/chroot_archlinux/scripts/generate-pacman /builder/plugins/chroot_archlinux/conf/pacman.conf.j2 /usr/local/share/devtools/pacman.conf.d/qubes-x86_64.conf && sudo rm -rf /etc/pacman.d/gnupg/private-keys-v1.d && sudo pacman-key --init && sudo pacman-key --populate && sudo /builder/plugins/chroot_archlinux/scripts/generate-pacman /builder/plugins/chroot_archlinux/conf/pacman.conf.j2 /usr/local/share/devtools/pacman.conf.d/qubes-x86_64.conf --enable-builder-local && sudo /builder/plugins/build_archlinux/scripts/update-local-repo.sh /builder/cache/qubes-x86_64/root /builder/repository && cd /builder/core-qrexec && sudo qubes-x86_64-build -r /builder/cache -- -d /builder/repository:/builder/repository -- --syncdeps --noconfirm --skipinteg | cat'' (status=1)..",),)).