Introduction

This guide will explain how to change the update proxy qube that is used when updating templates, this may be useful if you want to download your updates through a VPN or a qube with some caching.

Explanations

The default update proxy is defined in /etc/qubes/policy.d/90-default.policy in dom0, it defaults to sys-whonix for qubes tagged whonix (which are tor qubes), otherwise it's sys-net for all other templates.

Setup

In this example, we will use a qube named sys-vpn as a proxy for the templates VMs:

Dom0

In dom0, as root edit the file /etc/qubes/policy.d/30-user.policy, it will override the default settings, add this content:

qubes.UpdatesProxy      *   @type:TemplateVM        @default    allow target=sys-vpn

sys-vpn qube

In the settings of sys-vpn qube, go to the Services tab, in the drop down list select qubes-updates-proxy and then click on the [+ Add] button.

Restart the qube, done!