core-admin v4.3.19 (r4.3)

[qubesos-bot]

Update of core-admin to v4.3.19 for Qubes OS r4.3, see comments below for details and build status.

From commit: QubesOS/qubes-core-admin@447d0c6

Changes since previous version:
QubesOS/qubes-core-admin@447d0c69 version 4.3.19
QubesOS/qubes-core-admin@107cc6fe libvirt-xml: set guivm backend for stubdomain's gui
QubesOS/qubes-core-admin@d2d2ad84 pci: get device class out of libvirt xml
QubesOS/qubes-core-admin@04c16671 vm: automatically filter-out "nomodeset" kernel opt if GPU is attached
QubesOS/qubes-core-admin@5de215d5 Add the feature to prohibit starting of a qube

Referenced issues:
QubesOS/qubes-issues#9792
QubesOS/qubes-issues#9385
QubesOS/qubes-issues#9622

If you're release manager, you can issue GPG-inline signed command:

• Upload-component r4.3 core-admin 447d0c69ebbc3c06d2fd910cd614451ba8b41c49 current all (available 5 days from now)
• Upload-component r4.3 core-admin 447d0c69ebbc3c06d2fd910cd614451ba8b41c49 security-testing all

You can choose subset of distributions like:

• Upload-component r4.3 core-admin 447d0c69ebbc3c06d2fd910cd614451ba8b41c49 current vm-bookworm,vm-fc37 (available 5 days from now)

Above commands will work only if packages in current-testing repository were built from given commit (i.e. no new version superseded it).

For more information on how to test this update, please take a look at https://www.qubes-os.org/doc/testing/#updates.

[qubesos-bot]

Package for host was built (build log).

[qubesos-bot]

Package for host was uploaded to current-testing repository.

[qubesos-bot]

OpenQA test summary

Complete test suite and dependencies: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=2025022504-4.3&flavor=update

Test run included the following:

• video-companion v1.1.4-1 (r4.3) #5156
• core-libvirt v10.5.0-2 (r4.3) #5161
• core-admin-linux v4.3.10 (r4.3) #5437
• manager v4.3.9-1 (r4.3) #5446
• linux-kernel v6.6.77-1 (r4.3) #5435
• gui-agent-linux v4.3.5 (r4.3) #5404
• vmm-xen-stubdom-linux v4.3.3 (r4.3) #5459
• mgmt-salt-dom0-virtual-machines v4.3.0 (r4.3) #5463
• gui-daemon v4.3.7 (r4.3) #5308
• core-admin v4.3.19 (r4.3) #5462
• app-linux-split-gpg v2.0.75 (r4.3) #5136
• mgmt-salt v4.2.2 (r4.3) #4545
• linux-utils v4.3.7 (r4.3) #5352
• desktop-linux-common v4.2.13 (r4.3) #5376
• mgmt-salt-dom0-qvm v4.3.2 (r4.3) #5436
• core-vchan-xen v4.2.6 (r4.3) #5420
• linux-scrypt v1.3.2-1 (r4.3) #4571
• core-qubesdb v4.2.7 (r4.3) #5346
• linux-kernel v6.12.16-1 (r4.3) #5465
• core-admin-client v4.3.10 (r4.3) #5381
• desktop-linux-manager v4.3.9 (r4.3) #5449
• app-linux-usb-proxy v4.3.0 (r4.3) #5234
• vmm-xen v4.19.1-4 (r4.3) #5461
• core-agent-linux v4.3.18 (r4.3) #5464
• core-qrexec v4.3.3 (r4.3) #5425

New failures, excluding unstable

Compared to: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=2025021804-4.3&flavor=update

• system_tests_kde_gui_interactive

  • gui_keyboard_layout: wait_serial (wait serial expected)
    # wait_serial expected: "echo -e '[Layout]\nLayoutList=us,de' | sud...

  • gui_keyboard_layout: Failed (test died)
    # Test died: command 'test "$(cd ~user;ls e1*)" = "$(qvm-run -p wor...

• system_tests_basic_vm_qrexec_gui_xfs

  • TC_03_QvmRevertTemplateChanges: test_000_revert_linux (failure)
    AssertionError: '6fc08336c7bbd103b83a421c272c28fb928e0fc7' != '47c1...

• system_tests_extra

  • TC_00_QVCTest_whonix-workstation-17: test_010_screenshare (failure)
    ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError: 0 == 0

• system_tests_network_updates

  • TC_00_Dom0Upgrade_whonix-gateway-17: test_001_update_check (failure)
    ^... AssertionError: '' is not true

• system_tests_qrexec

  • TC_00_Qrexec_whonix-workstation-17: test_083_qrexec_service_argument_specific_implementation (error)
    subprocess.CalledProcessError: Command '/usr/lib/qubes/qrexec-clien...

• system_tests_audio

  • TC_20_AudioVM_PipeWire_whonix-workstation-17: test_228_audio_rec_unmuted_pipewire (error + cleanup)
    raise TimeoutError from exc_val... TimeoutError

Failed tests

7 failures

• system_tests_kde_gui_interactive

  • gui_keyboard_layout: wait_serial (wait serial expected)
    # wait_serial expected: "echo -e '[Layout]\nLayoutList=us,de' | sud...

  • gui_keyboard_layout: Failed (test died)
    # Test died: command 'test "$(cd ~user;ls e1*)" = "$(qvm-run -p wor...

• system_tests_basic_vm_qrexec_gui_xfs

  • TC_03_QvmRevertTemplateChanges: test_000_revert_linux (failure)
    AssertionError: '6fc08336c7bbd103b83a421c272c28fb928e0fc7' != '47c1...

• system_tests_extra

  • TC_00_QVCTest_whonix-workstation-17: test_010_screenshare (failure)
    ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError: 0 == 0

• system_tests_network_updates

  • TC_00_Dom0Upgrade_whonix-gateway-17: test_001_update_check (failure)
    ^... AssertionError: '' is not true

• system_tests_qrexec

  • TC_00_Qrexec_whonix-workstation-17: test_083_qrexec_service_argument_specific_implementation (error)
    subprocess.CalledProcessError: Command '/usr/lib/qubes/qrexec-clien...

• system_tests_audio

  • TC_20_AudioVM_PipeWire_whonix-workstation-17: test_228_audio_rec_unmuted_pipewire (error + cleanup)
    raise TimeoutError from exc_val... TimeoutError

Fixed failures

Compared to: https://openqa.qubes-os.org/tests/129058#dependencies

15 fixed

• system_tests_whonix

  • whonixcheck: fail (unknown)
    Whonixcheck for sys-whonix failed...

  • whonixcheck: unnamed test (unknown)

• system_tests_kde_gui_interactive

  • clipboard_and_web: unnamed test (unknown)
  • clipboard_and_web: Failed (test died)
    # Test died: no candidate needle with tag(s) 'clipboard-paste-notif...

• system_tests_whonix@hw7

  • whonixcheck: fail (unknown)
    Whonixcheck for sys-whonix failed...

  • whonixcheck: unnamed test (unknown)

• system_tests_basic_vm_qrexec_gui_btrfs

  • TC_03_QvmRevertTemplateChanges: test_000_revert_linux (error)
    subprocess.CalledProcessError: Command '['sha1sum', '/var/lib/qubes...

• system_tests_qrexec

  • TC_00_Qrexec_whonix-workstation-17: test_070_qrexec_vm_simultaneous_write (failure)
    exited with non-zero code 125; stderr: b"dd: error writing 'standa...

• system_tests_suspend

  • suspend: unnamed test (unknown)
  • suspend: Failed (test died)
    # Test died: no candidate needle with tag(s) 'SUSPEND-FAILED' match...

• system_tests_suspend@hw1

  • suspend: unnamed test (unknown)
  • suspend: Failed (test died)
    # Test died: no candidate needle with tag(s) 'SUSPEND-FAILED' match...

• system_tests_audio

  • TC_20_AudioVM_Pulse_whonix-workstation-17: test_223_audio_play_hvm (failure)
    AssertionError: too short audio, expected 10s, got 7.33528344671201...

  • TC_20_AudioVM_PipeWire_whonix-workstation-17: test_226_audio_playback_pipewire (failure)
    AssertionError: too short audio, expected 10s, got 9.19027210884353...

  • TC_20_AudioVM_PipeWire_whonix-workstation-17: test_251_audio_playback_audiovm_pipewire_late_start (failure)
    AssertionError: too short audio, expected 10s, got 9.22900226757369...

Unstable tests

Performance Tests

Performance degradation:

30 performance degradations

• debian-12-xfce_exec-data-simplex: 69.37 :small_red_triangle_up: ( previous job: 48.93, degradation: 141.76%)
• debian-12-xfce_exec-data-duplex: 71.29 :small_red_triangle_up: ( previous job: 50.76, degradation: 140.44%)
• debian-12-xfce_exec-data-duplex-root: 84.73 :small_red_triangle_up: ( previous job: 64.91, degradation: 130.54%)
• debian-12-xfce_socket-data-duplex: 151.92 :small_red_triangle_up: ( previous job: 81.49, degradation: 186.43%)
• fedora-41-xfce_exec-data-simplex: 63.82 :small_red_triangle_up: ( previous job: 49.65, degradation: 128.54%)
• fedora-41-xfce_exec-data-duplex: 74.96 :small_red_triangle_up: ( previous job: 49.08, degradation: 152.73%)
• fedora-41-xfce_exec-data-duplex-root: 110.43 :small_red_triangle_up: ( previous job: 81.65, degradation: 135.24%)
• fedora-41-xfce_socket-data-duplex: 138.16 :small_red_triangle_up: ( previous job: 78.62, degradation: 175.72%)
• whonix-gateway-17_exec-data-simplex: 77.03 :small_red_triangle_up: ( previous job: 48.76, degradation: 157.96%)
• whonix-gateway-17_exec-data-duplex: 64.30 :small_red_triangle_up: ( previous job: 48.55, degradation: 132.44%)
• whonix-gateway-17_exec-data-duplex-root: 93.74 :small_red_triangle_up: ( previous job: 70.13, degradation: 133.67%)
• whonix-gateway-17_socket-data-duplex: 157.89 :small_red_triangle_up: ( previous job: 82.74, degradation: 190.82%)
• whonix-workstation-17_socket-root: 9.69 :small_red_triangle_up: ( previous job: 8.20, degradation: 118.20%)
• whonix-workstation-17_exec-data-simplex: 63.42 :small_red_triangle_up: ( previous job: 47.01, degradation: 134.89%)
• whonix-workstation-17_exec-data-duplex: 71.98 :small_red_triangle_up: ( previous job: 49.48, degradation: 145.50%)
• whonix-workstation-17_exec-data-duplex-root: 89.48 :small_red_triangle_up: ( previous job: 79.93, degradation: 111.95%)
• whonix-workstation-17_socket-data-duplex: 147.94 :small_red_triangle_up: ( previous job: 81.71, degradation: 181.06%)
• dom0_root_seq1m_q8t1_read 3:read_bandwidth_kb: 328295.00 :small_red_triangle_up: ( previous job: 486352.00, degradation: 67.50%)
• dom0_root_seq1m_q8t1_write 3:write_bandwidth_kb: 124422.00 :small_red_triangle_up: ( previous job: 276742.00, degradation: 44.96%)
• dom0_root_seq1m_q1t1_read 3:read_bandwidth_kb: 120374.00 :small_red_triangle_up: ( previous job: 423495.00, degradation: 28.42%)
• dom0_root_seq1m_q1t1_write 3:write_bandwidth_kb: 29962.00 :small_red_triangle_up: ( previous job: 185030.00, degradation: 16.19%)
• dom0_root_rnd4k_q32t1_read 3:read_bandwidth_kb: 19594.00 :small_red_triangle_up: ( previous job: 100699.00, degradation: 19.46%)
• fedora-41-xfce_root_seq1m_q1t1_read 3:read_bandwidth_kb: 293883.00 :small_red_triangle_up: ( previous job: 343795.00, degradation: 85.48%)
• fedora-41-xfce_root_rnd4k_q32t1_write 3:write_bandwidth_kb: 2963.00 :small_red_triangle_up: ( previous job: 3785.00, degradation: 78.28%)
• fedora-41-xfce_private_seq1m_q1t1_read 3:read_bandwidth_kb: 295790.00 :small_red_triangle_up: ( previous job: 357875.00, degradation: 82.65%)
• fedora-41-xfce_private_rnd4k_q32t1_write 3:write_bandwidth_kb: 3323.00 :small_red_triangle_up: ( previous job: 3885.00, degradation: 85.53%)
• fedora-41-xfce_volatile_seq1m_q1t1_write 3:write_bandwidth_kb: 69725.00 :small_red_triangle_up: ( previous job: 78093.00, degradation: 89.28%)
• fedora-41-xfce_volatile_rnd4k_q32t1_write 3:write_bandwidth_kb: 2646.00 :small_red_triangle_up: ( previous job: 3959.00, degradation: 66.84%)
• fedora-41-xfce_volatile_rnd4k_q1t1_read 3:read_bandwidth_kb: 7107.00 :small_red_triangle_up: ( previous job: 8408.00, degradation: 84.53%)
• fedora-41-xfce_volatile_rnd4k_q1t1_write 3:write_bandwidth_kb: 2321.00 :small_red_triangle_up: ( previous job: 2693.00, degradation: 86.19%)

Remaining performance tests:

42 tests

• debian-12-xfce_exec: 7.55 :small_red_triangle_up: ( previous job: 7.15, degradation: 105.54%)
• debian-12-xfce_exec-root: 29.46 :small_red_triangle_up: ( previous job: 27.97, degradation: 105.33%)
• debian-12-xfce_socket: 8.34 :small_red_triangle_up: ( previous job: 8.33, degradation: 100.09%)
• debian-12-xfce_socket-root: 8.24 :small_red_triangle_up: ( previous job: 8.20, degradation: 100.51%)
• fedora-41-xfce_exec: 9.24 :small_red_triangle_up: ( previous job: 9.13, degradation: 101.21%)
• fedora-41-xfce_exec-root: 66.48 :small_red_triangle_up: ( previous job: 61.17, degradation: 108.67%)
• fedora-41-xfce_socket: 8.88 :small_red_triangle_up: ( previous job: 8.66, degradation: 102.50%)
• fedora-41-xfce_socket-root: 8.94 :small_red_triangle_up: ( previous job: 8.61, degradation: 103.92%)
• whonix-gateway-17_exec: 7.75 🟢 ( previous job: 7.87, improvement: 98.57%)
• whonix-gateway-17_exec-root: 40.62 :small_red_triangle_up: ( previous job: 38.36, degradation: 105.87%)
• whonix-gateway-17_socket: 7.19 🟢 ( previous job: 7.54, improvement: 95.34%)
• whonix-gateway-17_socket-root: 7.48 🟢 ( previous job: 8.27, improvement: 90.45%)
• whonix-workstation-17_exec: 7.94 🟢 ( previous job: 8.23, improvement: 96.42%)
• whonix-workstation-17_exec-root: 54.69 :small_red_triangle_up: ( previous job: 52.56, degradation: 104.06%)
• whonix-workstation-17_socket: 8.66 :small_red_triangle_up: ( previous job: 8.21, degradation: 105.45%)
• dom0_root_rnd4k_q32t1_write 3:write_bandwidth_kb: 3285.00 :green_circle: ( previous job: 3277.00, improvement: 100.24%)
• dom0_root_rnd4k_q1t1_read 3:read_bandwidth_kb: 11567.00 :green_circle: ( previous job: 10163.00, improvement: 113.81%)
• dom0_root_rnd4k_q1t1_write 3:write_bandwidth_kb: 3078.00 :green_circle: ( previous job: 282.00, improvement: 1091.49%)
• dom0_varlibqubes_seq1m_q8t1_read 3:read_bandwidth_kb: 476192.00 :green_circle: ( previous job: 475329.00, improvement: 100.18%)
• dom0_varlibqubes_seq1m_q8t1_write 3:write_bandwidth_kb: 259420.00 :green_circle: ( previous job: 95209.00, improvement: 272.47%)
• dom0_varlibqubes_seq1m_q1t1_read 3:read_bandwidth_kb: 435817.00 :green_circle: ( previous job: 433474.00, improvement: 100.54%)
• dom0_varlibqubes_seq1m_q1t1_write 3:write_bandwidth_kb: 192370.00 :green_circle: ( previous job: 164133.00, improvement: 117.20%)
• dom0_varlibqubes_rnd4k_q32t1_read 3:read_bandwidth_kb: 101481.00 :green_circle: ( previous job: 99808.00, improvement: 101.68%)
• dom0_varlibqubes_rnd4k_q32t1_write 3:write_bandwidth_kb: 9959.00 :green_circle: ( previous job: 8767.00, improvement: 113.60%)
• dom0_varlibqubes_rnd4k_q1t1_read 3:read_bandwidth_kb: 7945.00 :green_circle: ( previous job: 7053.00, improvement: 112.65%)
• dom0_varlibqubes_rnd4k_q1t1_write 3:write_bandwidth_kb: 3954.00 :green_circle: ( previous job: 3868.00, improvement: 102.22%)
• fedora-41-xfce_root_seq1m_q8t1_read 3:read_bandwidth_kb: 374491.00 :small_red_triangle_up: ( previous job: 396586.00, degradation: 94.43%)
• fedora-41-xfce_root_seq1m_q8t1_write 3:write_bandwidth_kb: 156365.00 :green_circle: ( previous job: 99783.00, improvement: 156.71%)
• fedora-41-xfce_root_seq1m_q1t1_write 3:write_bandwidth_kb: 110443.00 :green_circle: ( previous job: 44770.00, improvement: 246.69%)
• fedora-41-xfce_root_rnd4k_q32t1_read 3:read_bandwidth_kb: 84323.00 :small_red_triangle_up: ( previous job: 86742.00, degradation: 97.21%)
• fedora-41-xfce_root_rnd4k_q1t1_read 3:read_bandwidth_kb: 9037.00 :green_circle: ( previous job: 8623.00, improvement: 104.80%)
• fedora-41-xfce_root_rnd4k_q1t1_write 3:write_bandwidth_kb: 1475.00 :green_circle: ( previous job: 1126.00, improvement: 130.99%)
• fedora-41-xfce_private_seq1m_q8t1_read 3:read_bandwidth_kb: 378684.00 :small_red_triangle_up: ( previous job: 401907.00, degradation: 94.22%)
• fedora-41-xfce_private_seq1m_q8t1_write 3:write_bandwidth_kb: 144744.00 :green_circle: ( previous job: 116848.00, improvement: 123.87%)
• fedora-41-xfce_private_seq1m_q1t1_write 3:write_bandwidth_kb: 73595.00 :green_circle: ( previous job: 41375.00, improvement: 177.87%)
• fedora-41-xfce_private_rnd4k_q32t1_read 3:read_bandwidth_kb: 90170.00 :green_circle: ( previous job: 87999.00, improvement: 102.47%)
• fedora-41-xfce_private_rnd4k_q1t1_read 3:read_bandwidth_kb: 8098.00 :small_red_triangle_up: ( previous job: 8744.00, degradation: 92.61%)
• fedora-41-xfce_private_rnd4k_q1t1_write 3:write_bandwidth_kb: 1729.00 :green_circle: ( previous job: 1613.00, improvement: 107.19%)
• fedora-41-xfce_volatile_seq1m_q8t1_read 3:read_bandwidth_kb: 393461.00 :green_circle: ( previous job: 392725.00, improvement: 100.19%)
• fedora-41-xfce_volatile_seq1m_q8t1_write 3:write_bandwidth_kb: 181674.00 :green_circle: ( previous job: 139933.00, improvement: 129.83%)
• fedora-41-xfce_volatile_seq1m_q1t1_read 3:read_bandwidth_kb: 368309.00 :green_circle: ( previous job: 294875.00, improvement: 124.90%)
• fedora-41-xfce_volatile_rnd4k_q32t1_read 3:read_bandwidth_kb: 64163.00 :small_red_triangle_up: ( previous job: 71108.00, degradation: 90.23%)

[marmarek]

Superseded by #5474