The /etc/qubes-rpc/qubes.UpdateProxy file doesn't exist in minimal
templates by default. Do not ...

Since the issue breaks updates, apply the fix via updater wrapper

QubesOS/qubes-issues#9025

* origin/pr/26:
Sync qubes_dom0_update.py with upstream yumpkg.py

* origin/pr/22:
Avoid ugly state name

Sync with 2478e75dcab97d056d7eabdd1844bb60a4b1b70d upstream.
This mostly consists of reformattin...

Previously it aborted only if some package was missing, but failed to
set 'updates' variable. Th...

The 'file' salt module is broken in Fedora 37. Until fix is packaged in
Fedora package, avoid us...

cmd.run is for short commands, not long scripts. Use cmd.script
instead, which avoids printing ...

* origin/pr/20:
Fix line buffering warning Temporary fix of the upstream salt bug with line bu...

Otherwise the user will think the command has succeeded when it has not.

Fixes QubesOS/qubes-is...

Temporary fix of the upstream salt bug with line buffering warning (https://github.com/saltstack/...

QubesOS/qubes-issues#6982

Instead of refusing to update. While Fedora 32 is EOL already, do not
break updates, as that's t...

* origin/pr/16:
Disable deltarpm via Salt

apt as released in initial debian-10 template, requires confirming the
repository change from st...

It isn't needed anymore with dnf >= 4.7.0, so drop it to avoid side
effects (inability to instal...

This disables deltarpm via Salt in Red Hat-based distros.

Mitigate CVE-2021-20271 and similar issues, by telling RPM to always
check the signature (not ju...

* origin/pr/14:
Avoid extra refreshes when updating dom0

There can be also epoch prefix.

Salt doesn’t support this well at all. As a workaround, first refresh
the cache manually, then ...

Now that --console --show-output options are used, they need to be
supported.

New qubes-dom0-update hides updatevm output unless those options are
added.

`qubes-dom0-update` forces the output from updatevm to be red. This is
specifically because of `...

Replace non-printable characters with underscore, in case
qubes-dom0-update didn't done it alrea...

The salt module do parse some of the output when querying repository
(things like listing availa...

This imports the metadata signing keys.

One that does support 'list' and 'search' actions.

QubesOS/qubes-issues#5252

This is broken in salt 3000 (saltstack/salt#56131) currently shipped in
Fedora 30. Since those s...

This makes pkg.latest_version and pkg.list_upgrades work correctly
with repo parameters (fromrep...

QubesOS/qubes-issues#5529

It may happen that no updates are available anymore (for example already
installed). In this cas...

QubesOS/qubes-issues#4613

Fixes 2f04b19 Update based on yumpkg from salt 2019.2

Fixes QubesOS/qubes-issues#5057

QubesOS/qubes-issues#4613

If onion repositories are enabled, rpm/dpkg will not replace repository
definitions and will sav...

Remove it before performing an update, otherwise apt update fails.
It shouldn't be there in the ...

Multiple modules in salt.utils were split into separate submodules.

QubesOS/qubes-issues#4225

Salt's pkg.uptodate use 'dnf clear expire-cache' to force metadata cache
expire, but unfortunate...

This name needs to be unique among all the states. update/vm.sls may be
too common (especially a...

The DSA-4371 update procedure, as written with plain states is not
really declarative. If for no...

This is the first state shipped by this package, so adjust FORMULA file
accordingly.

QubesOS/qu...

Update libapt-pkg* with redirects disabled.

QubesOS/qubes-issues#4752

Not only clean local cache, but also the one in updatevm.

QubesOS/qubes-issues#2718

Dom0 have only one repository - synthetic one, built from packages
downloaded by updatevm. If cl...

Sync with the salt version used in fc25-based dom0. The direct reason
for this change is API inc...

This module doesn't really need to do anything to repo definition. And
since it is optional, dro...

Move to qubes-builder

Signed-off-by: Marek Marczykowski-Górecki <[email protected]>

Just updating dom0 metadata cache isn't enough, because it's only about
loading cached offline r...

Salt inserts some dictionaries into local namespace, but static analysis
tools don't know that.

Dom0 doesn't have direct access to (online) repository metadata and
since most of Fedora reposit...

This is mostly to better support DNF. Although most of the commands are
unusable on Qubes dom0 b...

It isn't used anymore

QubesOS/qubes-issues#2048

QubesOS/qubes-issues#1926

Tag for commit babd2ef263eb8915c2e3f803d44d8494bf428610

# gpg: Signature made Wed 23 Dec 2015 1...

Fields were re-ordered putting ones that may be changed more often near the top

It doesn't make sense to have other release numbers when we are in
control over actual package v...