dist-upgrade to stretch-backports

user@host:~$ sudo aptitude dist-upgrade -yt stretch-backports
The following packages will be REMOVED:                                                                                                                                                                                                                                         
  qubes-core-agent-passwordless-root{u} qubes-whonix-shared-packages-recommended{u}                                                                                                                                                                                             
The following packages will be upgraded:                                                                                                                                                                                                                                        
  qubes-whonix-workstation{b}                                                                                                                                                                                                                                                   
1 packages upgraded, 0 newly installed, 2 to remove and 0 not upgraded.                                                                                                                                                                                                         
Need to get 24.8 kB of archives. After unpacking 106 kB will be freed.                                                                                                                                                                                                          
The following packages have unmet dependencies:                                                                                                                                                                                                                                 
 qubes-whonix-workstation : Depends: qubes-whonix-shared-packages-recommended-cli which is a virtual package and is not provided by any available package                                                                                                                       
																																																																				
The following actions will resolve these dependencies:                                                                                                                                                                                                                          
																																																																				
	 Remove the following packages:                                                                                                                                                                                                                                             
1)     qubes-whonix-workstation [3:6.9-1 (now)]                                                                                                                                                                                                                                 
																																																																				
																																																																				
																																																																				
The following packages will be REMOVED:                                                                                                                                                                                                                                         
  anon-apps-config{u} anon-apt-sources-list{u} anon-base-files{u} anon-gpg-tweaks{u} anon-iceweasel-warning{u} anon-mixmaster{u} anon-ws-base-files{u} anon-ws-disable-stacked-tor{u} anon-ws-dns-conf{u} apparmor-profile-anondist{u} apt-file{u} apt-transport-tor{u}         
  ark{u} baloo-kf5{u} bindp{u} bootclockrandomization{u} catdoc{u} codecrypt{u} command-not-found{u} damngpl{u} debsums{u} dnsutils{u} dolphin{u} enigmail{u} faketime{u} gnupg-agent{u} gpl-sources-download{u} grub-enable-apparmor{u} gtk2-engines-oxygen{u}                 
  gtk2-engines-pixbuf{u} gtk3-engines-breeze{u} gwenview{u} hardened-desktop-applications-kde{u} hardened-packages-dependencies-cli{u} hardened-packages-recommended-cli{u} hexchat{u} hexchat-common{u} kcalc{u} kde-baseapps-data{u} kde-config-gtk-style{u}                  
  kde-config-gtk-style-preview{u} kde-config-screenlocker{u} kde-config-sddm{u} kde-style-oxygen-qt5{u} kdepasswd{u} kdesudo{u} kfind{u} kgpg{u} kinit{u} kmenuedit{u} kscreen{u} ksysguard{u} ksysguard-data{u} ksysguardd{u} ksystemlog{u} ktexteditor-data{u}                
  ktexteditor-katepart{u} kwrite{u} libakonadi-contact4{u} libakonadi-kde4{u} libakonadiprotocolinternals1{u} libapt-pkg-perl{u} libcrypto++6{u} libdmtx0a{u} libdolphinvcs5{u} libepub0{u} libexporter-tiny-perl{u} libfaketime{u} libfile-fnmatch-perl{u} libgit2-24{u}       
  libhttp-parser2.1{u} libical2{u} libirs160{u} libjs-underscore{u} libkabc4{u} libkcalcore4{u} libkexiv2-11{u} libkexiv2-data{u} libkf5activities5{u} libkf5baloo5{u} libkf5balooengine5{u} libkf5baloowidgets5{u} libkf5calendarevents5{u} libkf5filemetadata-bin{u} 
  libkf5filemetadata-data{u} libkf5filemetadata3{u} libkf5idletime5{u} libkf5itemmodels5{u} libkf5js5{u} libkf5kdcraw5{u} libkf5khtml-data{u} libkf5khtml5{u} libkf5kipi-data{u} libkf5kipi31.0.0{u} libkf5newstuff-data{u} libkf5newstuff5{u} libkf5plasma5{u} 
  libkf5plasmaquick5{u} libkf5screen-bin{u} libkf5screen7{u} libkf5style5{u} libkf5sysguard-bin{u} libkf5sysguard-data{u} libkf5texteditor5{u} libkf5waylandclient5{u} libkf5waylandserver5{u} libkldap4{u} libkmime4{u} libkonq-common{u} libkonq5-templates{u} 
  libkonq5abi1{u} libkpimutils4{u} libkprintutils4{u} libkresources4{u} libkscreenlocker5{u} libksgrd7{u} libksignalplotter7{u} liblist-moreutils-perl{u} libokularcore7{u} liboxygenstyle5-5{u} liboxygenstyleconfig5-5{u} libpkcs11-helper1{u} libpoppler-qt4-4{u} 
  libpoppler-qt5-1{u} libprison0{u} libprocesscore7{u} libprocessui7{u} libqimageblitz4{u} libqjson0{u} libqmobipocket1{u} libqt5multimedia5{u} libqt5multimediaquick-p5{u} libqt5opengl5{u} libqt5webkit5{u} libregexp-assemble-perl{u} libsysfs2{u} libxcb-composite0{u} 
  libxcb-damage0{u} libzip4{u} man-db{u} most{u} okular{u} openvpn{u} p7zip{u} p7zip-full{u} plasma-framework{u} plasma-pa{u} policyrcd-script-zg2{u} polkit-kde-agent-1{u} pulseaudio-module-gconf{u} pwgen{u} python-gdbm{u} python-gobject{u} python-hachoir-core{u} 
  python-hachoir-parser{u} python-msgpack{u} python-poppler{u} python3-dateutil{u} python3-gevent{u} python3-greenlet{u} python3-guimessages{u} python3-sdnotify{u} python3-yaml{u} qml-module-org-kde-draganddrop{u} qml-module-org-kde-kquickcontrols{u} 
  qml-module-org-kde-kquickcontrolsaddons{u} qml-module-qtgraphicaleffects{u} qml-module-qtmultimedia{u} qml-module-qtquick-controls{u} qml-module-qtquick-dialogs{u} qml-module-qtquick-layouts{u} qml-module-qtquick-privatewidgets{u} qml-module-qtquick-window2{u} 
  qml-module-qtquick2{u} qubes-core-agent-passwordless-root{u} qubes-gpg-split{u} qubes-pdf-converter{u} qubes-thunderbird{u} qubes-whonix{u} qubes-whonix-shared-packages-recommended{u} qubes-whonix-workstation{a} qubes-whonix-workstation-packages-recommended{u} 
  ricochet-im{u} rsync{u} scurl{u} sdwdate{u} sdwdate-gui{u} secure-delete{u} security-misc{u} spectre-meltdown-checker{u} sysfsutils{u} systemsettings{u} telnet{u} timesanitycheck{u} timezone-utc{u} tor-ctrl{u} usability-misc{u} uwt{u} vbox-disable-timesync{u} 
  virt-what{u} vlc{u} vlc-bin{u} vlc-l10n{u} vlc-plugin-qt{u} vrms{u} whonix-base-files{u} whonix-firewall{u} whonix-initializer{u} whonix-legacy{u} whonix-repository{u} whonix-shared-default-applications-gui{u} whonix-shared-packages-dependencies-cli{u} 
  whonix-shared-packages-recommended-cli{u} whonix-welcome-page{u} whonix-workstation-default-applications-gui{u} whonix-workstation-packages-dependencies-cli{u} whonix-workstation-packages-dependencies-pre{u} whonix-workstation-packages-recommended-cli{u} 
  whonix-workstation-shared-packages-shared-meta{u} whonix-ws-desktop-shortcuts{u} whonix-ws-irc-chat-support{u} whonix-ws-network-conf{u} whonix-ws-start-menu-additions{u} whonixcheck{u} xchat-improved-privacy{u} xul-ext-torbirdy{u} youtube-dl{u} zsh{u} 
  zsh-common{u} 
0 packages upgraded, 0 newly installed, 229 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 255 MB will be freed.
(Reading database ... 150871 files and directories currently installed.)
Removing qubes-whonix-workstation (3:6.9-1) ...

I may kill myself right now. I cannot believe Iā€™ve done this.

Donā€™t ever do dist-upgrade to stretch-backports.

I donā€™t think that works with Debian so also not with Whonix.

sudo apt-get install qubes-whonix-workstation

Might also refer to https://www.qubes-os.org/doc/software-update-vm/#reverting-changes-to-a-templatevm-r40 if you havenā€™t restarted it yet.

1 Like

Yes, the issue is not that I have dist-upgradeā€™d to stretch-backports, I have been on stretch-backports for quite some time in both whonix and debian-9 templates.

The issue is that I included the ā€œassume Yesā€ flag, and it automatically removed all my important packages because I used aptitude instead of apt.

Now I need to fix it before I close anything.

qvm-volume revert whonix-ws-14:root

That seems to have remedied my issue. Thanks.

That was scary though. Could have lost all my crypto and PGP keys.

Lake Monster:> Could have lost all my crypto and PGP keys.
How? If they are in TemplateBasedVMs are they should be, you can just
fix the underlying TemplateVM by re-installing it.

Yes, I overreacted.

Now there is a new issue though:

The following packages were automatically installed and are no longer required:
  anon-apps-config anon-apt-sources-list anon-gpg-tweaks anon-iceweasel-warning anon-mixmaster anon-ws-base-files anon-ws-dns-conf apparmor-profile-anondist apt-file apt-transport-tor ark baloo-kf5 bindp bootclockrandomization catdoc codecrypt command-not-found damngpl
  debsums dnsutils dolphin faketime gnupg-agent gpl-sources-download grub-enable-apparmor gtk2-engines-oxygen gtk2-engines-pixbuf gtk3-engines-breeze gwenview hardened-desktop-applications-kde hardened-packages-dependencies-cli hardened-packages-recommended-cli hexchat
  hexchat-common kcalc kde-baseapps-data kde-config-gtk-style kde-config-gtk-style-preview kde-config-screenlocker kde-config-sddm kde-style-oxygen-qt5 kdepasswd kdesudo kfind kgpg kinit kmenuedit kscreen ksysguard ksysguard-data ksysguardd ksystemlog ktexteditor-data
  ktexteditor-katepart kwrite libakonadi-contact4 libakonadi-kde4 libakonadiprotocolinternals1 libapt-pkg-perl libcrypto++6 libdmtx0a libdolphinvcs5 libepub0 libexporter-tiny-perl libfaketime libfile-fnmatch-perl libgit2-24 libhttp-parser2.1 libical2 libirs160
  libjs-underscore libkabc4 libkcalcore4 libkexiv2-11 libkexiv2-data libkf5activities5 libkf5baloo5 libkf5balooengine5 libkf5baloowidgets5 libkf5calendarevents5 libkf5filemetadata-bin libkf5filemetadata-data libkf5filemetadata3 libkf5idletime5 libkf5itemmodels5
  libkf5js5 libkf5kdcraw5 libkf5khtml-data libkf5khtml5 libkf5kipi-data libkf5kipi31.0.0 libkf5newstuff-data libkf5newstuff5 libkf5plasma5 libkf5plasmaquick5 libkf5screen-bin libkf5screen7 libkf5style5 libkf5sysguard-bin libkf5sysguard-data libkf5texteditor5
  libkf5waylandclient5 libkf5waylandserver5 libkldap4 libkmime4 libkonq-common libkonq5-templates libkonq5abi1 libkpimutils4 libkprintutils4 libkresources4 libkscreenlocker5 libksgrd7 libksignalplotter7 liblist-moreutils-perl libokularcore7 liboxygenstyle5-5
  liboxygenstyleconfig5-5 libpkcs11-helper1 libpoppler-qt4-4 libpoppler-qt5-1 libprison0 libprocesscore7 libprocessui7 libqimageblitz4 libqjson0 libqmobipocket1 libqt5multimedia5 libqt5multimediaquick-p5 libregexp-assemble-perl libsysfs2 libxcb-composite0 libxcb-damage0
  libzip4 man-db most okular openvpn p7zip p7zip-full plasma-framework plasma-pa policyrcd-script-zg2 polkit-kde-agent-1 pulseaudio-module-gconf pwgen python-gdbm python-gobject python-hachoir-core python-hachoir-parser python-msgpack python-poppler python3-dateutil
  python3-gevent python3-greenlet python3-guimessages python3-sdnotify python3-yaml qml-module-org-kde-draganddrop qml-module-org-kde-kquickcontrols qml-module-org-kde-kquickcontrolsaddons qml-module-qtmultimedia qubes-core-agent-passwordless-root qubes-gpg-split
  qubes-pdf-converter qubes-thunderbird qubes-whonix qubes-whonix-shared-packages-recommended qubes-whonix-workstation-packages-recommended ricochet-im rsync scurl sdwdate sdwdate-gui secure-delete security-misc spectre-meltdown-checker sysfsutils systemsettings telnet
  timesanitycheck timezone-utc tor-ctrl usability-misc uwt vbox-disable-timesync virt-what vlc vlc-bin vlc-l10n vlc-plugin-qt vrms whonix-base-files whonix-firewall whonix-initializer whonix-legacy whonix-repository whonix-shared-default-applications-gui
  whonix-shared-packages-dependencies-cli whonix-shared-packages-recommended-cli whonix-welcome-page whonix-workstation-packages-dependencies-cli whonix-workstation-packages-dependencies-pre whonix-workstation-packages-recommended-cli whonix-ws-desktop-shortcuts
  whonix-ws-irc-chat-support whonix-ws-network-conf whonix-ws-start-menu-additions whonixcheck xchat-improved-privacy xul-ext-torbirdy youtube-dl zsh zsh-common
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  enigmail qubes-whonix-workstation whonix-workstation-default-applications-gui whonix-workstation-shared-packages-shared-meta
The following NEW packages will be installed:
  libjsoncpp1
The following packages will be upgraded:
  ghostscript libgs9 libgs9-common thunderbird
4 upgraded, 1 newly installed, 4 to remove and 0 not upgraded.
Need to get 43.5 MB of archives.
After this operation, 28.8 MB of additional disk space will be used.
Do you want to continue? [Y/n] 

I feel like I donā€™t want to continue, but I canā€™t say for certain.

The following packages have unmet dependencies:                                                                                                                                                                                                                                 
 thunderbird : Breaks: enigmail (< 2:2~) but 2:1.9.9-1~deb9u1 is installed

I have the same issue. Just a simple apt-get update; apt-get dist-upgrade on my whonix-ws-14, without any modifications done to it. Was working fine on Thursday or Friday.

The following packages will be REMOVED:
    anon-workstation-default-applications anon-workstation-packages-recommended enigmail qubes-whonix-workstation whonix-workstation-shared-packages-shared-meta

Hereā€™s the bit from my /var/log/apt/history.log. Previous successful standard dist-upgrade was on the 11th.

Start-Date: 2018-09-11  03:05:20
Commandline: /usr/bin/apt-get -y dist-upgrade
Upgrade: libgs9:amd64 (9.20~dfsg-3.2+deb9u2, 9.20~dfsg-3.2+deb9u4), libgs9-common:amd64 (9.20~dfsg-3.2+deb9u2, 9.20~dfsg-3.2+deb9u4)
End-Date: 2018-09-11  03:05:25


Start-Date: 2018-09-17  05:12:23
Commandline: /usr/bin/apt-get -y dist-upgrade
Install: libjsoncpp1:amd64 (1.7.4-3, automatic)
Upgrade: libgs9:amd64 (9.20~dfsg-3.2+deb9u4, 9.20~dfsg-3.2+deb9u5), libgs9-common:amd64 (9.20~dfsg-3.2+deb9u4, 9.20~dfsg-3.2+deb9u5), thunderbird:amd64 (1:52.9.1-1~deb9u1, 1:60.0-3~deb9u1)
Remove: qubes-whonix-workstation:amd64 (3:6.3-1), anon-workstation-default-applications:amd64 (3:6.3-1), anon-workstation-packages-recommended:amd64 (3:6.3-1), whonix-workstation-shared-packages-shared-meta:amd64 (3:6.3-1), enigmail:amd64 (2:1.9.9-1~deb9u1)
End-Date: 2018-09-17  05:12:53

Use aptitude to do a dist-upgrade. It will give you the option to downgrade Thunderbird, which will un-brake enigmail, and then everything should be fine.

sudo aptitude dist-upgrade

(as opposed to apt-get)

Indeed, an apt-get install thunderbird=1:52.8.0-1~deb9u1 downgraded it, and then I was able to apt-get install anon-workstation-default-applications anon-workstation-packages-recommended enigmail qubes-whonix-workstation whonix-workstation-shared-packages-shared-meta to get those packages back.

Very weird dependency fail for Debian.

The following packages have unmet dependencies:
 thunderbird : Breaks: enigmail (< 2:2~) but 2:1.9.9-1~deb9u1 is to be installed
               Recommends: lightning (= 1:60.0-3~deb9u1) but it is not going to be installed
               Recommends: myspell-en-us but it is not installable or
                           hunspell-dictionary or
                           myspell-dictionary

See:

Which Whonix repository are you using? stable, stable-proposed-updates, testers?

aptitude: unsupported. Please upgrade as per Operating System Software and Updates - Kicksecure. No Whonix developers or testers are using aptitude.

dist-upgrade to stretch-backports: unsupported. backports are discouraged and should only be used in a by-case basis. Upgrading a whole distribution to stretch-backports is a very bad idea. I havenā€™t heard anyone else before doing that.

anon-workstation-default-applications

Deprecated. ā†’ whonix-workstation-default-applications-gui

anon-workstation-packages-recommended

Deprecated. ā†’ whonix-workstation-packages-recommended-gui

qubes-whonix-workstation

On Qubes-Whonix-Workstation:

sudo apt-get install qubes-whonix-workstation

Should be enough to make sure no package is missing. The sudo apt-get autoremove should be minimal. Packages no longer found in anon-meta-packages/debian/control at master Ā· Whonix/anon-meta-packages Ā· GitHub are fine to be auto removed.

https://packages.debian.org/search?keywords=enigmail

stretch (stable) (mail): GPG support for Thunderbird and Debian Icedove
2:1.9.9-1~deb9u1: all

Where did you get enigmail 2.2 from?

I never manually installed it. So itā€™s come down as part of some dependency earlier, or as part of when I installed whonix-ws-14. Iā€™ve never even run Thunderbird or Enigmail in a Whonix VM.

From within the whonix-14-ws TemplateVM:

root@host:/var/log/apt# apt-cache policy enigmail
enigmail:
  Installed: 2:1.9.9-1~deb9u1
  Candidate: 2:1.9.9-1~deb9u1
  Version table:
 *** 2:1.9.9-1~deb9u1 500
        500 tor+http://sgvtcaew4bxjd7ln.onion stretch/updates/main amd64 Packages                                                                                    
        500 http://security.debian.org stretch/updates/main amd64 Packages                                                                                           
        500 tor+http://vwakviie2ienjx6t.onion/debian stretch/main amd64 Packages                                                                                     
        500 http://ftp.us.debian.org/debian stretch/main amd64 Packages                                                                                              
        100 /var/lib/dpkg/status      

No appearance of enigmail in my apt/history.log since 2nd August (earliest log I have)

1 Like

Iā€™m using just ā€˜stretchā€™ in my whonix.list:

deb tor+http://deb.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion stretch main
#deb-src tor+http://deb.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion stretch main

deb http://deb.whonix.org stretch main

I have no stretch-backports mentioned anywhere in /etc/apt/. (grep -r)

1 Like

See:

I am on stretch-testers, dist-upgraded to backports. Will soon be testing buster.

Iā€™m also have all qubes repos enabled.

My systemā€™s alright, usually. If anything breaks, Iā€™m a template cloning away from recovery.

1 Like

Thanks for being a tester!

That could break.