Always update dom0 dnf.conf even if it is deleted

Also drop yum. It is not used anymore

Author: alimirjamali

dom0-updates/patch-dnf-config

@@ -0,0 +1,32 @@
+#!/bin/sh
+#
+# The Qubes OS Project, http://www.qubes-os.org
+#
+# Copyright (C) 2025  Marek Marczykowski-Górecki
+#                           <[email protected]>
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+#
+#
+
+BEGIN_MARKER="### QUBES BEGIN ###"
+END_MARKER="### QUBES END ###"
+
+set -e
+
+[ ! -f /etc/dnf/dnf.conf ]; exit 0
+
+sed -i -e "/^$BEGIN_MARKER$/,/^$END_MARKER$/{d}"  /etc/dnf/dnf.conf
+

dom0-updates/patch-dnf-yum-config

@@ -0,0 +1,3 @@
+[main]
+reposdir=/etc/yum.real.repos.d
+installonlypkgs = kernel, kernel-qubes-vm"

dom0-updates/protect-qubes.conf

@@ -108,7 +108,8 @@ make install DESTDIR=$RPM_BUILD_ROOT
 install -m 0755 -D -- dom0-updates/qubes-dom0-updates.cron "$RPM_BUILD_ROOT/etc/cron.daily/qubes-dom0-updates.cron"
 install -D dom0-updates/qubes-dom0-update $RPM_BUILD_ROOT/usr/bin/qubes-dom0-update
 install -D dom0-updates/qubes-receive-updates $RPM_BUILD_ROOT/usr/libexec/qubes/qubes-receive-updates
-install -D dom0-updates/patch-dnf-yum-config $RPM_BUILD_ROOT/usr/lib/qubes/patch-dnf-yum-config
+install -D dom0-updates/patch-dnf-config $RPM_BUILD_ROOT/usr/lib/qubes/patch-dnf-config
+install -m 0644 -D dom0-updates/dom0-updates/protect-qubes.conf $RPM_BUILD_ROOT/usr/share/dnf5/libdnf.conf.d/protect-qubes.conf
 install -m 0644 -D dom0-updates/qubes-cached.repo $RPM_BUILD_ROOT/etc/yum.real.repos.d/qubes-cached.repo
 install -D dom0-updates/qfile-dom0-unpacker $RPM_BUILD_ROOT/usr/libexec/qubes/qfile-dom0-unpacker
 install -d $RPM_BUILD_ROOT/etc/qubes-rpc
@@ -210,7 +211,7 @@ fi
 %post
 set -eo pipefail
 
-/usr/lib/qubes/patch-dnf-yum-config
+/usr/lib/qubes/patch-dnf-config
 
 systemctl --quiet enable qubes-suspend.service
 systemctl --quiet preset usbguard.service
@@ -270,7 +271,7 @@ chmod -x /etc/grub.d/10_linux
 /etc/cron.daily/qubes-dom0-updates.cron
 /etc/yum.real.repos.d/qubes-cached.repo
 %_bindir/qubes-dom0-update
-/usr/lib/qubes/patch-dnf-yum-config
+/usr/lib/qubes/patch-dnf-config
 %attr(4750,root,qubes) /usr/libexec/qubes/qfile-dom0-unpacker
 /usr/libexec/qubes/qubes-receive-updates
 /etc/qubes-rpc/qubes.ReceiveUpdates