Go to file
Marek Marczykowski-Górecki e424c7df9c
qvm-template: verify template package signature directly at download
Make the download() function save the package into a temporary space and
move to the target location only after checking the signature. This is
safer option than requiring all callers to explicitly verify the
signature. Also, make the download() function verify if the template
name inside the package matches what was requested.
Especially, make `qvm-template download` action verify the signature
too.

On `qvm-template install` avoid checking the signature again for
downloaded packages, by passing extra argument to the verify_rpm()
function. But still verify signature of packages loaded from disk.
2021-02-18 21:43:57 +01:00
ci Fix CI dependencies 2020-08-31 02:02:12 +08:00
debian deb,rpm: depend on qubes-repo-templates 2021-02-06 16:03:39 +01:00
doc qvm-template: use UpdateVM by default 2021-02-06 16:03:37 +01:00
etc Fix missing semi-colon and new line 2020-06-24 15:45:36 +02:00
qubesadmin qvm-template: verify template package signature directly at download 2021-02-18 21:43:57 +01:00
rpm_spec deb,rpm: depend on qubes-repo-templates 2021-02-06 16:03:39 +01:00
scripts Add qubes-guivm-session utility 2020-07-29 12:11:03 +02:00
test-packages qvm-template: call rpmkeys --checksig for signature verification 2021-02-06 16:03:38 +01:00
.gitignore Makefile: add clean of pkgs and debian changelog.* 2020-06-16 17:09:07 +02:00
.pylintrc Add stubs for rpm module and initial tests for qvm-template install 2020-09-04 01:56:15 +08:00
.travis.yml travis: use sourced config, switch to R4.1 2020-08-03 04:55:46 +02:00
LICENSE Initial commit 2017-03-01 23:48:53 +01:00
Makefile Add qubes-guivm-session utility 2020-07-29 12:11:03 +02:00
Makefile.builder debian: initial packaging 2017-05-20 03:15:23 +02:00
README.md Drop Python2 support 2020-01-15 21:41:52 +01:00
run-tests Drop Python2 support 2020-01-15 21:41:52 +01:00
setup.py Added dynamic X keyboard event monitoring to qvm_start_daemon.py 2020-07-15 14:04:25 +02:00
version version 4.1.9 2020-08-12 11:01:43 +02:00

This is client side implementation of Qubes Admin API. See https://www.qubes-os.org/doc/admin-api/ for protocol specification.

Compatibility

This package requires Python >= 3.5