* origin/pr/146:
fix #9025 hotfix for some minimal templates

* origin/pr/142:
Up the limit of files downloaded during a dom0 update.

Updating templates without qubes-core-agent-networking package
failed because qubes.UpdateProxy ...

Since the issue breaks updates, apply the fix via updater wrapper

QubesOS/qubes-issues#9025

apt-get update exits with code 100 on error, but updater as a whole uses
this code for "no updat...

This is totally possible during distupgrade. I hit the issue myself.
It wasn't even hard — I ju...

* origin/pr/140:
Work around a bug in PipeWire

PipeWire doesn't realize dom0 is a virtual machine and sets its quantums
too low, resulting in x...

* origin/pr/139:
Remove debugging statements
Initial support for archlinux updates through p...

* origin/pr/131:
Working version
Add script to generate Xen unified kernel images

Tested with:

qemu-system-x86_64 -nic none -serial mon:stdio \
-drive file=fat:rw:PA...

They don't have any secrets (the file is publicly available in git
repository and rpm package), ...

This is a prerequisite for secure boot.

Taken from
https://github.com/QubesOS/qubes-core-agent-linux/commit/300e864543219dc21334d3ffd365...

* origin/pr/135:
qubes-vm-update/dnf: import signing key if needed

* origin/pr/134:
qubes-vm-update: fix waiting for EOF on stdout/stderr
qubes-vm-update: bett...

When an update is installed from a given repository for the first time,
its signing key may not ...

Reboot is necessary after major Xen update, but with --downloadonly it
wasn't performed yet.

Qu...

Those FDs are opened in binary mode, so readline signals EOF as b'', not
'' or None.
When EOF is...

* origin/pr/132:
qubes-vm-update: do not update last-updates-check if checking updates fails

hide --just-print-progress from help, since it is more internal than user flag.

Qrexec service is dom0 are called as normal user. Template repos may be
writable by that user, b...

* origin/pr/129:
qubes-vm-update: do not report updates check if service.qubes-update-check is...

* origin/pr/128:
qubes-vm-update: refactor
qubes-vm-update: skip double selecting of templates

fixes QubesOS/qubes-issues#8162

There is no qvm-run --filter-escape-chars-stderr

Fixes: b33b09a "qvm-copy-to-vm: disable wait f...

* origin/pr/130:
dom0-update: avoid writing 'typescript' file

* origin/pr/126:
Safer unpacking of files in dom0

* origin/pr/123:
Avoid hardcoding user "user" in qubes-dom0-update

Write `script` output to /dev/null, it doesn't need to persist. It's
main purpose is printing to...

qfile-dom0-unpacker does not need to support unpacking directories or
symbolic links when receiv...

This can cause the copy to hang for no good reason. Also
unconditionally filter escape characte...

It is no longer compatible.

* origin/pr/124:
qubes-vm-update: change log level to info
qubes-vm-update: write `qubes-vm-...

Installation/update of requirements is performed by invoking `dnf` from the CLI, while updating ...

It's necessary for the "derived_vms" property.

* origin/pr/122:
qubes-vm-update: include all derived vms in restarting

* origin/pr/120:
If in doubt, do not scan zvols
Clean up qubes-dom0-update

UpdateVM might have a different default user.

fixes https://github.com/QubesOS/qubes-issues/issues/8133

requires: https://github.com/QubesOS/...

* origin/pr/121:
Do not allow trailing newlines in filenames

BootLoaderSpecification is not used in Qubes at all (it isn't compatible
with Xen), so remove wh...

Do not allow leading special characters either.

Safer to not scan a volume than to scan one.

Use bash regular expressions instead of echo | grep and echo | sed.

* origin/pr/118:
Move the zvol ignore rules much earlier in the udev chain of events.
Handle...

* origin/pr/117:
qubes-vm-update: fix logging for limited number of processes
qubes-vm-updat...

* revert-xterm:
dom0-updates: '~' is a valid character in a package version
dom0-updates: re...

Otherwise old directory remains on update, confusing pkg_resources
module.

Also, remove unused ...

* origin/pr/111:
qubes-vm-update: fix error for dummy progress bar.
qubes-vm-update: @marmar...

It's commonly used for prereleases.

Displaying updatevm output in an xterm provides negligible security
improvement over filtered ou...

They are useless as there is no network, and no multiple users or user
data in home dirs.

Dummy progress bar does not have a progress collector.

Handle the problem with VMs never reporting updates state at all (for example non-Linux VMs).