From d39112fa8c2c601ea4b04e0a5c469feaee726591 Mon Sep 17 00:00:00 2001 From: Jason Mehring Date: Fri, 1 May 2015 01:35:36 -0400 Subject: [PATCH 1/2] debian: Only notify dom0 on apt-get post hook; don't update package index There is a possiblilty of the apt-get post hook getting triggered more than once for each apt-get session, therefore we only notify dom0 that there are no updates available and do not perform an apt-get update. The qubes-update-check.service will still perform an update so even if the dist-upgrade failed and there was actually more files to update the qubes-update-check.serivce would then at some point notify dom0 about those updates being available --- network/00notiy-hook | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/network/00notiy-hook b/network/00notiy-hook index a1764c5..0e55e8f 100644 --- a/network/00notiy-hook +++ b/network/00notiy-hook @@ -1,2 +1 @@ -#DPkg::Post-Invoke {"echo 'invoked' >> /tmp/apt-post-invoke; systemctl start qubes-update-check.service";}; -DPkg::Post-Invoke {"systemctl start qubes-update-check.service";}; +DPkg::Post-Invoke {"/usr/lib/qubes/qrexec-client-vm dom0 qubes.NotifyUpdates /bin/sh -c 'echo 0'";}; From faf20db7ac7a909f8199b78886ebefdd01f6ce50 Mon Sep 17 00:00:00 2001 From: Jason Mehring Date: Fri, 1 May 2015 05:03:14 -0400 Subject: [PATCH 2/2] debian: Allow apt-get post hook to fail gracefully (won't work in chroot) --- network/00notiy-hook | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/network/00notiy-hook b/network/00notiy-hook index 0e55e8f..2d56c2e 100644 --- a/network/00notiy-hook +++ b/network/00notiy-hook @@ -1 +1 @@ -DPkg::Post-Invoke {"/usr/lib/qubes/qrexec-client-vm dom0 qubes.NotifyUpdates /bin/sh -c 'echo 0'";}; +DPkg::Post-Invoke {"/usr/lib/qubes/qrexec-client-vm dom0 qubes.NotifyUpdates /bin/sh -c 'echo 0' || true";};