Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
9f14be6eed
core-admin/dom0/init.d/qubes_core

90 lines
2.1 KiB
Plaintext
Raw Normal View History

Initial public commit. (c) 2010 Invisible Things Lab Authors: ========= Joanna Rutkowska <joanna@invisiblethingslab.com> Rafal Wojtczuk <rafal@invisiblethingslab.com>
2010-04-05 20:58:57 +02:00
#!/bin/sh
#
Use priority 8x for qubes services, allowing for more flexibility
2011-04-05 14:31:19 +02:00
# chkconfig: 2345 80 00
Initial public commit. (c) 2010 Invisible Things Lab Authors: ========= Joanna Rutkowska <joanna@invisiblethingslab.com> Rafal Wojtczuk <rafal@invisiblethingslab.com>
2010-04-05 20:58:57 +02:00
# description: Executes Qubes core scripts at Dom0 boot
#
### BEGIN INIT INFO
# Provides: qubes-core
# Required-Start: xend
# Default-Start: 3 4 5
# Default-Stop: 0 1 2 6
# Default-Enabled: yes
# Short-Description: Start/stop qubes-core services
# Description: Starts and stops the qubes-core serives
### END INIT INFO
# Source function library.
. /etc/rc.d/init.d/functions
start()
{
echo -n $"Executing Qubes Core scripts:"
dom0: migrate from xend to libxl stack - qvm-core This is core part of migration. Things not migrated yet: - DispVM (qubes_restore needs to be almost rewritten) - VM xen config files should be fixed (use "script:" prefix in block device description, perhaps generate this files on VM start) Huge, slow xend not needed any more, now it conflicts with libxl
2011-06-01 23:44:06 +02:00
modprobe evtchn
Initial public commit. (c) 2010 Invisible Things Lab Authors: ========= Joanna Rutkowska <joanna@invisiblethingslab.com> Rafal Wojtczuk <rafal@invisiblethingslab.com>
2010-04-05 20:58:57 +02:00
chgrp qubes /etc/xen
chmod 710 /etc/xen
chgrp qubes /var/run/xenstored/*
chmod 660 /var/run/xenstored/*
dom0: migrate from xend to libxl stack - qvm-core This is core part of migration. Things not migrated yet: - DispVM (qubes_restore needs to be almost rewritten) - VM xen config files should be fixed (use "script:" prefix in block device description, perhaps generate this files on VM start) Huge, slow xend not needed any more, now it conflicts with libxl
2011-06-01 23:44:06 +02:00
chgrp qubes /var/lib/xen
chmod 770 /var/lib/xen
chgrp qubes /var/log/xen
chmod 770 /var/log/xen
chgrp qubes /proc/xen/privcmd
chmod 660 /proc/xen/privcmd
chgrp qubes /dev/xen/evtchn
chmod 660 /dev/xen/evtchn
dom0: create lockfile for libxl and set dom0 name in xenstore Create lockfile to set it proper permissions. Without it the first use (qvm-start netvm) will create it with root:root and 600. Without xend, no one sets dom0 name...
2011-06-10 12:02:32 +02:00
touch /var/run/qubes/xl-lock
chgrp qubes /var/run/qubes/xl-lock
chmod 660 /var/run/qubes/xl-lock
dom0: create xen-hotplug state dir
2011-07-15 22:15:29 +02:00
mkdir -p /var/run/xen-hotplug
dom0: create lockfile for libxl and set dom0 name in xenstore Create lockfile to set it proper permissions. Without it the first use (qvm-start netvm) will create it with root:root and 600. Without xend, no one sets dom0 name...
2011-06-10 12:02:32 +02:00
xenstore-write /local/domain/0/name Domain-0
dom0: set static-max for dom0 To make 'xl mem-set 0 <size>' happy.
2011-09-08 01:19:59 +02:00
DOM0_MAXMEM=`/usr/sbin/xl info | grep total_memory | awk '{ print $3 }'`
xenstore-write /local/domain/0/memory/static-max $[ $DOM0_MAXMEM * 1024 ]
dom0: migrate from xend to libxl stack - qvm-core This is core part of migration. Things not migrated yet: - DispVM (qubes_restore needs to be almost rewritten) - VM xen config files should be fixed (use "script:" prefix in block device description, perhaps generate this files on VM start) Huge, slow xend not needed any more, now it conflicts with libxl
2011-06-01 23:44:06 +02:00
xl sched-credit -d 0 -w 512
Initial public commit. (c) 2010 Invisible Things Lab Authors: ========= Joanna Rutkowska <joanna@invisiblethingslab.com> Rafal Wojtczuk <rafal@invisiblethingslab.com>
2010-04-05 20:58:57 +02:00
cp /var/lib/qubes/qubes.xml /var/lib/qubes/backup/qubes-$(date +%F-%T).xml
qmemman: offload some processing to meminfo-writer Make meminfo-writer compute used memory, and report to qmemman only if it has changed significantly enough. As it is written in C, its code is much faster that qmemman-server; also in the idle case, it saves on xenstore communication overhead. Allows to send updates up to 10 times per second, with CPU load on the VM below 0.1%.
2010-09-09 17:51:53 +02:00
qubes_dvm init.d script We want to set up a default dvm if needed at boot time; for this, the default netvm must have been already started. Therefore, we need a qubes_dvm script, that executes after qubes_netvm.
2010-09-21 21:46:11 +02:00
/usr/lib/qubes/qmemman_daemon.py >/var/log/qubes/qmemman.log 2>/var/log/qubes/qmemman.errs &
qmemman: offload some processing to meminfo-writer Make meminfo-writer compute used memory, and report to qmemman only if it has changed significantly enough. As it is written in C, its code is much faster that qmemman-server; also in the idle case, it saves on xenstore communication overhead. Allows to send updates up to 10 times per second, with CPU load on the VM below 0.1%.
2010-09-09 17:51:53 +02:00
MEM_CHANGE_THRESHOLD_KB=30000
MEMINFO_DELAY_USEC=100000
/usr/lib/qubes/meminfo-writer $MEM_CHANGE_THRESHOLD_KB $MEMINFO_DELAY_USEC &
dom0: sync dom0 clock more frequent; start it from init.d script
2011-09-15 14:43:02 +02:00
/usr/lib/qubes/keep-dom0-clock-synced > /var/log/qubes/dom0-clock-sync.log 2>&1 &
Initial public commit. (c) 2010 Invisible Things Lab Authors: ========= Joanna Rutkowska <joanna@invisiblethingslab.com> Rafal Wojtczuk <rafal@invisiblethingslab.com>
2010-04-05 20:58:57 +02:00
touch /var/lock/subsys/qubes_core
success
echo
}
stop()
{
echo -n $"Shutting down all Qubes VMs:"
NETVM=$(qvm-get-default-netvm)
Do not error when qvm-get-default-netvm returns empty string. It happens when installing qubes-core-dom0 for the first time.
2010-10-06 10:55:32 +02:00
if [ "X"$NETVM = "X" ] ; then
NETVM="dom0"
fi
Initial public commit. (c) 2010 Invisible Things Lab Authors: ========= Joanna Rutkowska <joanna@invisiblethingslab.com> Rafal Wojtczuk <rafal@invisiblethingslab.com>
2010-04-05 20:58:57 +02:00
qvm-run -q --shutdown --all --wait --exclude $NETVM
rm -f /var/lock/subsys/qubes_core
dom0 init.d/qubes_core: kill some processes on stop()
2010-10-04 15:20:09 +02:00
killall meminfo-writer
killall qmemman_daemon.py
Initial public commit. (c) 2010 Invisible Things Lab Authors: ========= Joanna Rutkowska <joanna@invisiblethingslab.com> Rafal Wojtczuk <rafal@invisiblethingslab.com>
2010-04-05 20:58:57 +02:00
success
echo
}
case "$1" in
start)
start
;;
stop)
stop
;;
*)
echo $"Usage: $0 {start|stop}"
exit 3
;;
esac
exit $RETVAL
Reference in New Issue Copy Permalink