core-admin v4.3.20 (r4.3)

[qubesos-bot]

Update of core-admin to v4.3.20 for Qubes OS r4.3, see comments below for details and build status.

From commit: QubesOS/qubes-core-admin@5df3ba5

Changes since previous version:
QubesOS/qubes-core-admin@5df3ba5e version 4.3.20
QubesOS/qubes-core-admin@1e2f58a1 Merge remote-tracking branch 'origin/pr/665'
QubesOS/qubes-core-admin@258f1534 Merge remote-tracking branch 'origin/pr/654'
QubesOS/qubes-core-admin@60ed7443 Allow equal sign and coma in feature requests
QubesOS/qubes-core-admin@b2041b80 Merge remote-tracking branch 'origin/pr/650'
QubesOS/qubes-core-admin@9b06c226 Merge branch 'create-unknown-label'
QubesOS/qubes-core-admin@d75733d4 tests: log .xsession-errors from testvm2 only on failure
QubesOS/qubes-core-admin@ce5ebaa4 tests: add test for custom-persist feature
QubesOS/qubes-core-admin@9a898938 tests: move TC_06_AppVMMixin from basic to misc
QubesOS/qubes-core-admin@4464186a Remove extra -- from run-tests
QubesOS/qubes-core-admin@00c99805 Fix exception on unknown label when creating a VM
QubesOS/qubes-core-admin@78809ab3 custom-persist: add support of metadata
QubesOS/qubes-core-admin@7b1069ac add custom-persist unit tests
QubesOS/qubes-core-admin@3377fec6 add custom_persist extension

Referenced issues:
QubesOS/qubes-issues#9797
QubesOS/qubes-issues#9750
QubesOS/qubes-issues#1006

If you're release manager, you can issue GPG-inline signed command:

• Upload-component r4.3 core-admin 5df3ba5ea7327a8c90ca498795bc2b7765f2685b current all (available 5 days from now)
• Upload-component r4.3 core-admin 5df3ba5ea7327a8c90ca498795bc2b7765f2685b security-testing all

You can choose subset of distributions like:

• Upload-component r4.3 core-admin 5df3ba5ea7327a8c90ca498795bc2b7765f2685b current vm-bookworm,vm-fc37 (available 5 days from now)

Above commands will work only if packages in current-testing repository were built from given commit (i.e. no new version superseded it).

For more information on how to test this update, please take a look at https://www.qubes-os.org/doc/testing/#updates.

[qubesos-bot]

Package for host was built (build log).

[qubesos-bot]

Package for host was uploaded to current-testing repository.

[qubesos-bot]

OpenQA test summary

Complete test suite and dependencies: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=2025030404-4.3&flavor=update

Test run included the following:

• desktop-linux-manager v4.3.9 (r4.3) #5449
• video-companion v1.1.4-1 (r4.3) #5156
• mgmt-salt-dom0-qvm v4.3.2 (r4.3) #5436
• linux-utils v4.3.9 (r4.3) #5473
• vmm-xen-stubdom-linux v4.3.3 (r4.3) #5459
• core-libvirt v10.5.0-2 (r4.3) #5161
• gui-agent-linux v4.3.6 (r4.3) #5470
• core-qubesdb v4.3.0 (r4.3) #5475
• desktop-linux-common v4.2.13 (r4.3) #5376
• vmm-xen v4.19.1-4 (r4.3) #5461
• manager v4.3.9-1 (r4.3) #5446
• mgmt-salt v4.2.2 (r4.3) #4545
• core-admin-linux v4.3.10 (r4.3) #5437
• app-linux-split-gpg v2.0.75 (r4.3) #5136
• linux-scrypt v1.3.2-1 (r4.3) #4571
• mgmt-salt-dom0-virtual-machines v4.3.0 (r4.3) #5463
• core-vchan-xen v4.2.6 (r4.3) #5420
• core-admin-client v4.3.12 (r4.3) #5476
• core-agent-linux v4.3.19 (r4.3) #5478
• linux-kernel v6.12.16-1 (r4.3) #5465
• gui-daemon v4.3.7 (r4.3) #5308
• core-admin v4.3.20 (r4.3) #5474
• app-linux-usb-proxy v4.3.0 (r4.3) #5234
• core-qrexec v4.3.4 (r4.3) #5469

New failures, excluding unstable

Compared to: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=2025021804-4.3&flavor=update

• system_tests_kde_gui_interactive

  • gui_keyboard_layout: wait_serial (wait serial expected)
    # wait_serial expected: "echo -e '[Layout]\nLayoutList=us,de' | sud...

  • gui_keyboard_layout: Failed (test died)
    # Test died: command 'test "$(cd ~user;ls e1*)" = "$(qvm-run -p wor...

• system_tests_guivm_vnc_gui_interactive

  • guivm_manager: unnamed test (unknown)
  • guivm_manager: Failed (test died)
    # Test died: no candidate needle with tag(s) 'qubes-qube-manager' m...

• system_tests_network_updates

  • VmUpdates_debian-12-xfce: test_120_updates_available_notification_qubes_vm_update (error)
    subprocess.CalledProcessError: Command '/usr/lib/qubes/upgrades-sta...

• system_tests_qrexec

  • TC_00_Qrexec_fedora-41-xfce: test_065_qrexec_exit_code_vm (failure)
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^... AssertionError: b'125\n' != b'0\n'

• system_tests_splitgpg

  • TC_00_Direct_whonix-gateway-17: test_060_output_and_status_fd (error)
    qubes.exc.QubesVMError: Cannot connect to qrexec agent for 120 seco...

Failed tests

7 failures

• system_tests_kde_gui_interactive

  • gui_keyboard_layout: wait_serial (wait serial expected)
    # wait_serial expected: "echo -e '[Layout]\nLayoutList=us,de' | sud...

  • gui_keyboard_layout: Failed (test died)
    # Test died: command 'test "$(cd ~user;ls e1*)" = "$(qvm-run -p wor...

• system_tests_guivm_vnc_gui_interactive

  • guivm_manager: unnamed test (unknown)
  • guivm_manager: Failed (test died)
    # Test died: no candidate needle with tag(s) 'qubes-qube-manager' m...

• system_tests_network_updates

  • VmUpdates_debian-12-xfce: test_120_updates_available_notification_qubes_vm_update (error)
    subprocess.CalledProcessError: Command '/usr/lib/qubes/upgrades-sta...

• system_tests_qrexec

  • TC_00_Qrexec_fedora-41-xfce: test_065_qrexec_exit_code_vm (failure)
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^... AssertionError: b'125\n' != b'0\n'

• system_tests_splitgpg

  • TC_00_Direct_whonix-gateway-17: test_060_output_and_status_fd (error)
    qubes.exc.QubesVMError: Cannot connect to qrexec agent for 120 seco...

Fixed failures

Compared to: https://openqa.qubes-os.org/tests/129058#dependencies

15 fixed

• system_tests_whonix

  • whonixcheck: fail (unknown)
    Whonixcheck for sys-whonix failed...

  • whonixcheck: unnamed test (unknown)

• system_tests_audio

  • TC_20_AudioVM_Pulse_whonix-workstation-17: test_223_audio_play_hvm (failure)
    AssertionError: too short audio, expected 10s, got 7.33528344671201...

  • TC_20_AudioVM_PipeWire_whonix-workstation-17: test_226_audio_playback_pipewire (failure)
    AssertionError: too short audio, expected 10s, got 9.19027210884353...

  • TC_20_AudioVM_PipeWire_whonix-workstation-17: test_251_audio_playback_audiovm_pipewire_late_start (failure)
    AssertionError: too short audio, expected 10s, got 9.22900226757369...

• system_tests_kde_gui_interactive

  • clipboard_and_web: unnamed test (unknown)
  • clipboard_and_web: Failed (test died)
    # Test died: no candidate needle with tag(s) 'clipboard-paste-notif...

• system_tests_basic_vm_qrexec_gui_btrfs

  • TC_03_QvmRevertTemplateChanges: test_000_revert_linux (error)
    subprocess.CalledProcessError: Command '['sha1sum', '/var/lib/qubes...

• system_tests_qrexec

  • TC_00_Qrexec_whonix-workstation-17: test_070_qrexec_vm_simultaneous_write (failure)
    exited with non-zero code 125; stderr: b"dd: error writing 'standa...

• system_tests_suspend

  • suspend: unnamed test (unknown)
  • suspend: Failed (test died)
    # Test died: no candidate needle with tag(s) 'SUSPEND-FAILED' match...

• system_tests_whonix@hw7

  • whonixcheck: fail (unknown)
    Whonixcheck for sys-whonix failed...

  • whonixcheck: unnamed test (unknown)

• system_tests_suspend@hw1

  • suspend: unnamed test (unknown)
  • suspend: Failed (test died)
    # Test died: no candidate needle with tag(s) 'SUSPEND-FAILED' match...

Unstable tests

Performance Tests

Performance degradation:

32 performance degradations

• debian-12-xfce_exec-data-simplex: 62.53 :small_red_triangle_up: ( previous job: 48.93, degradation: 127.80%)
• debian-12-xfce_exec-data-duplex: 68.47 :small_red_triangle_up: ( previous job: 50.76, degradation: 134.89%)
• debian-12-xfce_exec-data-duplex-root: 84.21 :small_red_triangle_up: ( previous job: 64.91, degradation: 129.74%)
• debian-12-xfce_socket-data-duplex: 164.95 :small_red_triangle_up: ( previous job: 81.49, degradation: 202.42%)
• fedora-41-xfce_exec-data-simplex: 74.26 :small_red_triangle_up: ( previous job: 49.65, degradation: 149.57%)
• fedora-41-xfce_exec-data-duplex: 71.58 :small_red_triangle_up: ( previous job: 49.08, degradation: 145.84%)
• fedora-41-xfce_exec-data-duplex-root: 112.20 :small_red_triangle_up: ( previous job: 81.65, degradation: 137.41%)
• fedora-41-xfce_socket-data-duplex: 147.18 :small_red_triangle_up: ( previous job: 78.62, degradation: 187.20%)
• whonix-gateway-17_socket: 9.12 :small_red_triangle_up: ( previous job: 7.54, degradation: 120.88%)
• whonix-gateway-17_exec-data-simplex: 70.86 :small_red_triangle_up: ( previous job: 48.76, degradation: 145.32%)
• whonix-gateway-17_exec-data-duplex: 73.98 :small_red_triangle_up: ( previous job: 48.55, degradation: 152.36%)
• whonix-gateway-17_exec-data-duplex-root: 95.22 :small_red_triangle_up: ( previous job: 70.13, degradation: 135.78%)
• whonix-gateway-17_socket-data-duplex: 170.65 :small_red_triangle_up: ( previous job: 82.74, degradation: 206.25%)
• whonix-workstation-17_exec-data-simplex: 73.90 :small_red_triangle_up: ( previous job: 47.01, degradation: 157.18%)
• whonix-workstation-17_exec-data-duplex: 63.74 :small_red_triangle_up: ( previous job: 49.48, degradation: 128.84%)
• whonix-workstation-17_exec-data-duplex-root: 90.60 :small_red_triangle_up: ( previous job: 79.93, degradation: 113.35%)
• whonix-workstation-17_socket-data-duplex: 161.98 :small_red_triangle_up: ( previous job: 81.71, degradation: 198.23%)
• dom0_root_seq1m_q8t1_read 3:read_bandwidth_kb: 379231.00 :small_red_triangle_up: ( previous job: 486352.00, degradation: 77.97%)
• dom0_root_seq1m_q8t1_write 3:write_bandwidth_kb: 154393.00 :small_red_triangle_up: ( previous job: 276742.00, degradation: 55.79%)
• dom0_root_seq1m_q1t1_read 3:read_bandwidth_kb: 129937.00 :small_red_triangle_up: ( previous job: 423495.00, degradation: 30.68%)
• dom0_root_seq1m_q1t1_write 3:write_bandwidth_kb: 61963.00 :small_red_triangle_up: ( previous job: 185030.00, degradation: 33.49%)
• dom0_root_rnd4k_q32t1_write 3:write_bandwidth_kb: 2861.00 :small_red_triangle_up: ( previous job: 3277.00, degradation: 87.31%)
• dom0_varlibqubes_rnd4k_q32t1_write 3:write_bandwidth_kb: 5414.00 :small_red_triangle_up: ( previous job: 8767.00, degradation: 61.75%)
• fedora-41-xfce_root_seq1m_q1t1_read 3:read_bandwidth_kb: 302706.00 :small_red_triangle_up: ( previous job: 343795.00, degradation: 88.05%)
• fedora-41-xfce_root_rnd4k_q32t1_write 3:write_bandwidth_kb: 2404.00 :small_red_triangle_up: ( previous job: 3785.00, degradation: 63.51%)
• fedora-41-xfce_private_seq1m_q1t1_read 3:read_bandwidth_kb: 298229.00 :small_red_triangle_up: ( previous job: 357875.00, degradation: 83.33%)
• fedora-41-xfce_private_rnd4k_q32t1_read 3:read_bandwidth_kb: 79188.00 :small_red_triangle_up: ( previous job: 87999.00, degradation: 89.99%)
• fedora-41-xfce_private_rnd4k_q32t1_write 3:write_bandwidth_kb: 2014.00 :small_red_triangle_up: ( previous job: 3885.00, degradation: 51.84%)
• fedora-41-xfce_private_rnd4k_q1t1_read 3:read_bandwidth_kb: 6733.00 :small_red_triangle_up: ( previous job: 8744.00, degradation: 77.00%)
• fedora-41-xfce_volatile_seq1m_q8t1_read 3:read_bandwidth_kb: 311797.00 :small_red_triangle_up: ( previous job: 392725.00, degradation: 79.39%)
• fedora-41-xfce_volatile_seq1m_q8t1_write 3:write_bandwidth_kb: 93933.00 :small_red_triangle_up: ( previous job: 139933.00, degradation: 67.13%)
• fedora-41-xfce_volatile_rnd4k_q1t1_write 3:write_bandwidth_kb: 1331.00 :small_red_triangle_up: ( previous job: 2693.00, degradation: 49.42%)

Remaining performance tests:

40 tests

• debian-12-xfce_exec: 7.14 🟢 ( previous job: 7.15, improvement: 99.88%)
• debian-12-xfce_exec-root: 28.12 :small_red_triangle_up: ( previous job: 27.97, degradation: 100.53%)
• debian-12-xfce_socket: 8.33 🟢 ( previous job: 8.33, improvement: 99.98%)
• debian-12-xfce_socket-root: 8.93 :small_red_triangle_up: ( previous job: 8.20, degradation: 108.82%)
• fedora-41-xfce_exec: 9.13 🟢 ( previous job: 9.13, improvement: 99.96%)
• fedora-41-xfce_exec-root: 61.63 :small_red_triangle_up: ( previous job: 61.17, degradation: 100.74%)
• fedora-41-xfce_socket: 8.57 🟢 ( previous job: 8.66, improvement: 98.91%)
• fedora-41-xfce_socket-root: 8.67 :small_red_triangle_up: ( previous job: 8.61, degradation: 100.70%)
• whonix-gateway-17_exec: 6.53 🟢 ( previous job: 7.87, improvement: 82.98%)
• whonix-gateway-17_exec-root: 39.55 :small_red_triangle_up: ( previous job: 38.36, degradation: 103.08%)
• whonix-gateway-17_socket-root: 7.16 🟢 ( previous job: 8.27, improvement: 86.52%)
• whonix-workstation-17_exec: 8.37 :small_red_triangle_up: ( previous job: 8.23, degradation: 101.67%)
• whonix-workstation-17_exec-root: 54.79 :small_red_triangle_up: ( previous job: 52.56, degradation: 104.24%)
• whonix-workstation-17_socket: 8.61 :small_red_triangle_up: ( previous job: 8.21, degradation: 104.89%)
• whonix-workstation-17_socket-root: 8.73 :small_red_triangle_up: ( previous job: 8.20, degradation: 106.54%)
• dom0_root_rnd4k_q32t1_read 3:read_bandwidth_kb: 102640.00 :green_circle: ( previous job: 100699.00, improvement: 101.93%)
• dom0_root_rnd4k_q1t1_read 3:read_bandwidth_kb: 9150.00 :small_red_triangle_up: ( previous job: 10163.00, degradation: 90.03%)
• dom0_root_rnd4k_q1t1_write 3:write_bandwidth_kb: 3707.00 :green_circle: ( previous job: 282.00, improvement: 1314.54%)
• dom0_varlibqubes_seq1m_q8t1_read 3:read_bandwidth_kb: 481882.00 :green_circle: ( previous job: 475329.00, improvement: 101.38%)
• dom0_varlibqubes_seq1m_q8t1_write 3:write_bandwidth_kb: 276961.00 :green_circle: ( previous job: 95209.00, improvement: 290.90%)
• dom0_varlibqubes_seq1m_q1t1_read 3:read_bandwidth_kb: 432938.00 :small_red_triangle_up: ( previous job: 433474.00, degradation: 99.88%)
• dom0_varlibqubes_seq1m_q1t1_write 3:write_bandwidth_kb: 185458.00 :green_circle: ( previous job: 164133.00, improvement: 112.99%)
• dom0_varlibqubes_rnd4k_q32t1_read 3:read_bandwidth_kb: 105279.00 :green_circle: ( previous job: 99808.00, improvement: 105.48%)
• dom0_varlibqubes_rnd4k_q1t1_read 3:read_bandwidth_kb: 7737.00 :green_circle: ( previous job: 7053.00, improvement: 109.70%)
• dom0_varlibqubes_rnd4k_q1t1_write 3:write_bandwidth_kb: 4193.00 :green_circle: ( previous job: 3868.00, improvement: 108.40%)
• fedora-41-xfce_root_seq1m_q8t1_read 3:read_bandwidth_kb: 390967.00 :small_red_triangle_up: ( previous job: 396586.00, degradation: 98.58%)
• fedora-41-xfce_root_seq1m_q8t1_write 3:write_bandwidth_kb: 151860.00 :green_circle: ( previous job: 99783.00, improvement: 152.19%)
• fedora-41-xfce_root_seq1m_q1t1_write 3:write_bandwidth_kb: 84346.00 :green_circle: ( previous job: 44770.00, improvement: 188.40%)
• fedora-41-xfce_root_rnd4k_q32t1_read 3:read_bandwidth_kb: 83163.00 :small_red_triangle_up: ( previous job: 86742.00, degradation: 95.87%)
• fedora-41-xfce_root_rnd4k_q1t1_read 3:read_bandwidth_kb: 8455.00 :small_red_triangle_up: ( previous job: 8623.00, degradation: 98.05%)
• fedora-41-xfce_root_rnd4k_q1t1_write 3:write_bandwidth_kb: 1581.00 :green_circle: ( previous job: 1126.00, improvement: 140.41%)
• fedora-41-xfce_private_seq1m_q8t1_read 3:read_bandwidth_kb: 371177.00 :small_red_triangle_up: ( previous job: 401907.00, degradation: 92.35%)
• fedora-41-xfce_private_seq1m_q8t1_write 3:write_bandwidth_kb: 163603.00 :green_circle: ( previous job: 116848.00, improvement: 140.01%)
• fedora-41-xfce_private_seq1m_q1t1_write 3:write_bandwidth_kb: 50699.00 :green_circle: ( previous job: 41375.00, improvement: 122.54%)
• fedora-41-xfce_private_rnd4k_q1t1_write 3:write_bandwidth_kb: 1693.00 :green_circle: ( previous job: 1613.00, improvement: 104.96%)
• fedora-41-xfce_volatile_seq1m_q1t1_read 3:read_bandwidth_kb: 317365.00 :green_circle: ( previous job: 294875.00, improvement: 107.63%)
• fedora-41-xfce_volatile_seq1m_q1t1_write 3:write_bandwidth_kb: 87461.00 :green_circle: ( previous job: 78093.00, improvement: 112.00%)
• fedora-41-xfce_volatile_rnd4k_q32t1_read 3:read_bandwidth_kb: 84792.00 :green_circle: ( previous job: 71108.00, improvement: 119.24%)
• fedora-41-xfce_volatile_rnd4k_q32t1_write 3:write_bandwidth_kb: 3744.00 :small_red_triangle_up: ( previous job: 3959.00, degradation: 94.57%)
• fedora-41-xfce_volatile_rnd4k_q1t1_read 3:read_bandwidth_kb: 8216.00 :small_red_triangle_up: ( previous job: 8408.00, degradation: 97.72%)

[marmarek]

Superseded by #5480