Unfortunately single "install" command installs only one version of
package, even if multiple matches, so must list all versions explicitly.
Include all major releases from 3.2 to 3.11 to not require change it too
often.
Also exclude kernel from fedora repos to force use of qubes kernel.
...even if NetworkManager is running.
Actually it is started by anaconda (and needed to provide D-Bus
interface) even if service disabled in systemd configuration.