2010-04-05 20:58:57 +02:00
|
|
|
#
|
|
|
|
# This is the SPEC file for creating binary RPMs for the Dom0.
|
|
|
|
#
|
|
|
|
#
|
|
|
|
# The Qubes OS Project, http://www.qubes-os.org
|
|
|
|
#
|
|
|
|
# Copyright (C) 2010 Joanna Rutkowska <joanna@invisiblethingslab.com>
|
|
|
|
# Copyright (C) 2010 Rafal Wojtczuk <rafal@invisiblethingslab.com>
|
|
|
|
#
|
|
|
|
# This program is free software; you can redistribute it and/or
|
|
|
|
# modify it under the terms of the GNU General Public License
|
|
|
|
# as published by the Free Software Foundation; either version 2
|
|
|
|
# of the License, or (at your option) any later version.
|
|
|
|
#
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
# GNU General Public License for more details.
|
|
|
|
#
|
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
|
# along with this program; if not, write to the Free Software
|
|
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
#
|
|
|
|
#
|
|
|
|
|
|
|
|
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
|
|
|
|
|
|
|
|
%{!?version: %define version %(cat version_dom0)}
|
|
|
|
|
|
|
|
Name: qubes-core-dom0
|
|
|
|
Version: %{version}
|
|
|
|
Release: 1
|
|
|
|
Summary: The Qubes core files (Dom0-side)
|
|
|
|
|
|
|
|
Group: Qubes
|
|
|
|
Vendor: Invisible Things Lab
|
|
|
|
License: GPL
|
|
|
|
URL: http://www.qubes-os.org
|
|
|
|
Requires: python, xen-runtime, pciutils, python-inotify, python-daemon, kernel-qubes-dom0
|
2010-09-17 15:16:01 +02:00
|
|
|
Requires: NetworkManager >= 0.8.1-1
|
2010-04-05 20:58:57 +02:00
|
|
|
%define _builddir %(pwd)/dom0
|
|
|
|
|
|
|
|
%description
|
|
|
|
The Qubes core files for installation on Dom0.
|
|
|
|
|
2010-04-10 13:52:19 +02:00
|
|
|
%build
|
2010-08-30 11:40:19 +02:00
|
|
|
python -m compileall qvm-core qmemman
|
|
|
|
python -O -m compileall qvm-core qmemman
|
2010-06-02 15:50:22 +02:00
|
|
|
make -C restore
|
2010-09-03 16:23:09 +02:00
|
|
|
make -C ../common
|
2010-04-10 13:52:19 +02:00
|
|
|
|
2010-04-05 20:58:57 +02:00
|
|
|
%install
|
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/init.d
|
|
|
|
cp init.d/qubes_core $RPM_BUILD_ROOT/etc/init.d/
|
|
|
|
cp init.d/qubes_netvm $RPM_BUILD_ROOT/etc/init.d/
|
2010-09-22 10:24:57 +02:00
|
|
|
cp init.d/qubes_setupdvm $RPM_BUILD_ROOT/etc/init.d/
|
2010-04-05 20:58:57 +02:00
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/usr/bin/
|
|
|
|
cp qvm-tools/qvm-* $RPM_BUILD_ROOT/usr/bin
|
|
|
|
cp clipboard_notifier/qclipd $RPM_BUILD_ROOT/usr/bin
|
|
|
|
cp pendrive_swapper/qfilexchgd $RPM_BUILD_ROOT/usr/bin
|
2010-06-02 15:50:22 +02:00
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/xen/scripts
|
|
|
|
cp restore/block.qubes $RPM_BUILD_ROOT/etc/xen/scripts
|
2010-09-06 17:07:42 +02:00
|
|
|
cp ../common/vif-route-qubes $RPM_BUILD_ROOT/etc/xen/scripts
|
2010-04-05 20:58:57 +02:00
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT%{python_sitearch}/qubes
|
|
|
|
cp qvm-core/qubes.py $RPM_BUILD_ROOT%{python_sitearch}/qubes
|
2010-04-10 13:52:19 +02:00
|
|
|
cp qvm-core/qubes.py[co] $RPM_BUILD_ROOT%{python_sitearch}/qubes
|
2010-04-05 20:58:57 +02:00
|
|
|
cp qvm-core/__init__.py $RPM_BUILD_ROOT%{python_sitearch}/qubes
|
2010-04-10 13:52:19 +02:00
|
|
|
cp qvm-core/__init__.py[co] $RPM_BUILD_ROOT%{python_sitearch}/qubes
|
2010-08-30 11:40:19 +02:00
|
|
|
cp qmemman/qmemman*py $RPM_BUILD_ROOT%{python_sitearch}/qubes
|
|
|
|
cp qmemman/qmemman*py[co] $RPM_BUILD_ROOT%{python_sitearch}/qubes
|
2010-04-05 20:58:57 +02:00
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
cp aux-tools/patch_appvm_initramfs.sh $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
cp aux-tools/unbind_pci_device.sh $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
cp aux-tools/unbind_all_network_devices $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
cp aux-tools/convert_apptemplate2vm.sh $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
cp aux-tools/convert_dirtemplate2vm.sh $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
cp aux-tools/create_apps_for_appvm.sh $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
cp aux-tools/remove_appvm_appmenus.sh $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
cp pendrive_swapper/qubes_pencmd $RPM_BUILD_ROOT/usr/lib/qubes
|
2010-08-30 11:40:19 +02:00
|
|
|
cp qmemman/server.py $RPM_BUILD_ROOT/usr/lib/qubes/qmemman_daemon.py
|
|
|
|
cp ../common/meminfo-writer $RPM_BUILD_ROOT/usr/lib/qubes/
|
2010-04-05 20:58:57 +02:00
|
|
|
|
2010-07-16 11:19:03 +02:00
|
|
|
cp restore/xenstore-watch restore/qvm-create-default-dvm $RPM_BUILD_ROOT/usr/bin
|
2010-07-22 14:54:34 +02:00
|
|
|
cp restore/qubes_restore restore/xenfreepages $RPM_BUILD_ROOT/usr/lib/qubes
|
2010-07-16 10:26:55 +02:00
|
|
|
cp restore/qubes_prepare_saved_domain.sh $RPM_BUILD_ROOT/usr/lib/qubes
|
|
|
|
|
2010-04-05 20:58:57 +02:00
|
|
|
mkdir -p $RPM_BUILD_ROOT/var/lib/qubes
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/var/lib/qubes/vm-templates
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/var/lib/qubes/appvms
|
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/var/lib/qubes/backup
|
2010-07-13 04:32:42 +02:00
|
|
|
mkdir -p $RPM_BUILD_ROOT/var/lib/qubes/dvmdata
|
2010-04-05 20:58:57 +02:00
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/usr/share/qubes/icons
|
|
|
|
cp icons/*.png $RPM_BUILD_ROOT/usr/share/qubes/icons
|
|
|
|
|
2010-05-20 12:54:05 +02:00
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/yum.repos.d
|
2010-06-18 01:41:10 +02:00
|
|
|
cp ../dom0/qubes.repo $RPM_BUILD_ROOT/etc/yum.repos.d
|
2010-04-05 20:58:57 +02:00
|
|
|
|
2010-05-31 15:23:51 +02:00
|
|
|
mkdir -p $RPM_BUILD_ROOT/usr/bin
|
2010-07-16 10:26:55 +02:00
|
|
|
cp ../common/qubes_setup_dnat_to_ns $RPM_BUILD_ROOT/usr/lib/qubes
|
2010-09-17 15:16:01 +02:00
|
|
|
cp ../common/qubes_fix_nm_conf.sh $RPM_BUILD_ROOT/usr/lib/qubes
|
2010-05-31 15:23:51 +02:00
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/dhclient.d
|
2010-07-16 10:26:55 +02:00
|
|
|
ln -s /usr/lib/qubes/qubes_setup_dnat_to_ns $RPM_BUILD_ROOT/etc/dhclient.d/qubes_setup_dnat_to_ns.sh
|
2010-05-31 15:23:51 +02:00
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/NetworkManager/dispatcher.d/
|
|
|
|
cp ../common/qubes_nmhook $RPM_BUILD_ROOT/etc/NetworkManager/dispatcher.d/
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/sysconfig
|
2010-09-06 15:10:01 +02:00
|
|
|
cp ../common/iptables $RPM_BUILD_ROOT/etc/sysconfig
|
2010-07-06 16:22:34 +02:00
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/usr/lib64/pm-utils/sleep.d
|
|
|
|
cp pm-utils/01qubes-sync-vms-clock $RPM_BUILD_ROOT/usr/lib64/pm-utils/sleep.d/
|
2010-07-08 12:41:29 +02:00
|
|
|
cp pm-utils/02qubes-pause-vms $RPM_BUILD_ROOT/usr/lib64/pm-utils/sleep.d/
|
2010-07-06 16:22:34 +02:00
|
|
|
|
2010-06-02 15:50:22 +02:00
|
|
|
%triggerin -- xen-runtime
|
|
|
|
sed -i 's/\/block /\/block.qubes /' /etc/udev/rules.d/xen-backend.rules
|
|
|
|
|
2010-04-05 20:58:57 +02:00
|
|
|
%post
|
2010-05-31 15:23:51 +02:00
|
|
|
|
2010-09-17 15:16:01 +02:00
|
|
|
/usr/lib/qubes/qubes_fix_nm_conf.sh
|
|
|
|
|
2010-07-06 16:36:04 +02:00
|
|
|
if [ -e /etc/yum.repos.d/qubes-r1-dom0.repo ]; then
|
|
|
|
# we want the user to use the repo that comes with qubes-code-dom0 packages instead
|
|
|
|
rm -f /etc/yum.repos.d/qubes-r1-dom0.repo
|
|
|
|
fi
|
|
|
|
|
2010-04-05 20:58:57 +02:00
|
|
|
if [ "$1" != 1 ] ; then
|
|
|
|
# do this whole %post thing only when updating for the first time...
|
|
|
|
exit 0
|
|
|
|
fi
|
|
|
|
|
2010-06-15 12:20:40 +02:00
|
|
|
# TODO: This is only temporary, until we will have our own installer
|
|
|
|
for f in /etc/init.d/*
|
|
|
|
do
|
|
|
|
srv=`basename $f`
|
|
|
|
[ $srv = 'functions' ] && continue
|
|
|
|
[ $srv = 'killall' ] && continue
|
|
|
|
[ $srv = 'halt' ] && continue
|
|
|
|
chkconfig $srv off
|
|
|
|
done
|
|
|
|
|
2010-06-14 23:52:21 +02:00
|
|
|
chkconfig iptables on
|
|
|
|
chkconfig NetworkManager on
|
2010-05-31 11:54:33 +02:00
|
|
|
chkconfig rsyslog on
|
2010-04-05 20:58:57 +02:00
|
|
|
chkconfig haldaemon on
|
|
|
|
chkconfig messagebus on
|
|
|
|
chkconfig xenstored on
|
|
|
|
chkconfig xend on
|
|
|
|
chkconfig xenconsoled on
|
|
|
|
|
2010-06-14 23:52:21 +02:00
|
|
|
sed 's/^net.ipv4.ip_forward.*/net.ipv4.ip_forward = 1/' -i /etc/sysctl.conf
|
|
|
|
|
2010-04-05 20:58:57 +02:00
|
|
|
chkconfig --add qubes_core || echo "WARNING: Cannot add service qubes_core!"
|
|
|
|
chkconfig --add qubes_netvm || echo "WARNING: Cannot add service qubes_netvm!"
|
2010-09-22 10:24:57 +02:00
|
|
|
chkconfig --add qubes_setupdvm || echo "WARNING: Cannot add service qubes_setupdvm!"
|
2010-04-05 20:58:57 +02:00
|
|
|
|
|
|
|
chkconfig qubes_core on || echo "WARNING: Cannot enable service qubes_core!"
|
|
|
|
chkconfig qubes_netvm on || echo "WARNING: Cannot enable service qubes_netvm!"
|
2010-09-22 10:24:57 +02:00
|
|
|
chkconfig qubes_setupdvm on || echo "WARNING: Cannot enable service qubes_setupdvm!"
|
2010-04-05 20:58:57 +02:00
|
|
|
|
|
|
|
if ! [ -e /var/lib/qubes/qubes.xml ]; then
|
|
|
|
# echo "Initializing Qubes DB..."
|
|
|
|
umask 007; sg qubes -c qvm-init-storage
|
|
|
|
fi
|
|
|
|
for i in /usr/share/qubes/icons/*.png ; do
|
|
|
|
xdg-icon-resource install --novendor --size 48 $i
|
|
|
|
done
|
|
|
|
|
|
|
|
%clean
|
|
|
|
rm -rf $RPM_BUILD_ROOT
|
|
|
|
|
|
|
|
%pre
|
|
|
|
if ! grep -q ^qubes: /etc/group ; then
|
|
|
|
groupadd qubes
|
|
|
|
fi
|
|
|
|
|
|
|
|
%preun
|
|
|
|
if [ "$1" = 0 ] ; then
|
|
|
|
for i in /usr/share/qubes/icons/*.png ; do
|
|
|
|
xdg-icon-resource uninstall --novendor --size 48 $i
|
|
|
|
done
|
|
|
|
fi
|
|
|
|
|
|
|
|
%postun
|
|
|
|
if [ "$1" = 0 ] ; then
|
|
|
|
# no more packages left
|
|
|
|
chgrp root /etc/xen
|
|
|
|
chmod 700 /etc/xen
|
|
|
|
groupdel qubes
|
2010-06-02 15:50:22 +02:00
|
|
|
sed -i 's/\/block.qubes /\/block /' /etc/udev/rules.d/xen-backend.rules
|
2010-04-05 20:58:57 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
%files
|
|
|
|
%defattr(-,root,root,-)
|
|
|
|
/etc/init.d/qubes_core
|
|
|
|
/etc/init.d/qubes_netvm
|
2010-09-22 10:24:57 +02:00
|
|
|
/etc/init.d/qubes_setupdvm
|
2010-04-05 20:58:57 +02:00
|
|
|
/usr/bin/qvm-*
|
|
|
|
/usr/bin/qclipd
|
|
|
|
/usr/bin/qfilexchgd
|
|
|
|
%{python_sitearch}/qubes/qubes.py
|
|
|
|
%{python_sitearch}/qubes/qubes.pyc
|
|
|
|
%{python_sitearch}/qubes/qubes.pyo
|
|
|
|
%{python_sitearch}/qubes/__init__.py
|
|
|
|
%{python_sitearch}/qubes/__init__.pyc
|
|
|
|
%{python_sitearch}/qubes/__init__.pyo
|
2010-08-30 11:40:19 +02:00
|
|
|
%{python_sitearch}/qubes/qmemman*.py*
|
2010-04-05 20:58:57 +02:00
|
|
|
/usr/lib/qubes/patch_appvm_initramfs.sh
|
|
|
|
/usr/lib/qubes/unbind_pci_device.sh
|
|
|
|
/usr/lib/qubes/unbind_all_network_devices
|
|
|
|
/usr/lib/qubes/convert_apptemplate2vm.sh
|
|
|
|
/usr/lib/qubes/convert_dirtemplate2vm.sh
|
|
|
|
/usr/lib/qubes/create_apps_for_appvm.sh
|
|
|
|
/usr/lib/qubes/remove_appvm_appmenus.sh
|
|
|
|
/usr/lib/qubes/qubes_pencmd
|
2010-08-30 11:40:19 +02:00
|
|
|
/usr/lib/qubes/qmemman_daemon.py*
|
|
|
|
/usr/lib/qubes/meminfo-writer
|
2010-04-05 20:58:57 +02:00
|
|
|
%attr(770,root,qubes) %dir /var/lib/qubes
|
|
|
|
%attr(770,root,qubes) %dir /var/lib/qubes/vm-templates
|
|
|
|
%attr(770,root,qubes) %dir /var/lib/qubes/appvms
|
|
|
|
%attr(770,root,qubes) %dir /var/lib/qubes/backup
|
2010-07-13 04:32:42 +02:00
|
|
|
%attr(770,root,qubes) %dir /var/lib/qubes/dvmdata
|
2010-04-05 20:58:57 +02:00
|
|
|
%dir /usr/share/qubes/icons/*.png
|
2010-05-20 12:54:05 +02:00
|
|
|
/etc/yum.repos.d/qubes.repo
|
2010-07-16 10:26:55 +02:00
|
|
|
/usr/lib/qubes/qubes_setup_dnat_to_ns
|
2010-09-17 15:16:01 +02:00
|
|
|
/usr/lib/qubes/qubes_fix_nm_conf.sh
|
2010-05-31 15:23:51 +02:00
|
|
|
/etc/dhclient.d/qubes_setup_dnat_to_ns.sh
|
|
|
|
/etc/NetworkManager/dispatcher.d/qubes_nmhook
|
|
|
|
/etc/sysconfig/iptables
|
2010-07-06 16:22:34 +02:00
|
|
|
/usr/lib64/pm-utils/sleep.d/01qubes-sync-vms-clock
|
2010-07-08 12:41:29 +02:00
|
|
|
/usr/lib64/pm-utils/sleep.d/02qubes-pause-vms
|
2010-06-02 15:50:22 +02:00
|
|
|
/usr/bin/xenstore-watch
|
2010-07-16 11:19:03 +02:00
|
|
|
/usr/bin/qvm-create-default-dvm
|
2010-07-16 10:26:55 +02:00
|
|
|
/usr/lib/qubes/qubes_restore
|
|
|
|
/usr/lib/qubes/qubes_prepare_saved_domain.sh
|
2010-06-02 15:50:22 +02:00
|
|
|
/etc/xen/scripts/block.qubes
|
2010-09-06 17:07:42 +02:00
|
|
|
/etc/xen/scripts/vif-route-qubes
|
2010-07-22 14:54:34 +02:00
|
|
|
%attr(4750,root,qubes) /usr/lib/qubes/xenfreepages
|