Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
1,801 Commits 1 Branch 0 Tags 20 MiB
130873071f
Commit Graph

1801 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Marek Marczykowski
130873071f dom0/core: do not reset firewall on clone_attrs 2012-07-20 22:54:53 +02:00
Marek Marczykowski
7f9d77b27e dom0/backup-restore: fix verification of VMs in backup 2012-07-20 22:54:12 +02:00
Marek Marczykowski
ea02bee444 dom0/core: minor comments improvements 2012-07-20 22:53:14 +02:00
Marek Marczykowski
abefe78197 dom0/core: improve diagnostics of qmemman errors 2012-07-20 16:49:19 +02:00
Marek Marczykowski
59a1fb96db dom0/meminfo-writer: fork into background after first info sent to qmemman (#635) 2012-07-20 16:41:26 +02:00
Marek Marczykowski
c2d20e59d0 dom0/qmemman: fork into background after daemon initialization (#635) 
Parse config and setup socket before fork.
 2012-07-20 16:32:17 +02:00
Marek Marczykowski
273032bfae dom0: add missing file 2012-07-20 13:09:20 +02:00
Marek Marczykowski
d5dbbd41cb dom0/qvm-tools: add missing imports 2012-07-20 13:09:07 +02:00
Marek Marczykowski
f98bf1d570 dom0: fix dirs permissions after xen upgrade 2012-07-20 13:08:18 +02:00
Marek Marczykowski
7071bf62bc dom0/core: use generic run() to wait for qubes-session 
Especially use 'ignore_stderr' feature.
 2012-07-20 13:06:26 +02:00
Marek Marczykowski
406d233b6b dom0/core: disable dynamic memory when VM have PCI devices assigned 2012-07-19 14:43:24 +02:00
Marek Marczykowski
d8908c29d2 Merge remote-tracking branch 'alex/hvm' into hvm 2012-07-17 16:29:23 +02:00
Marek Marczykowski
5637793fae dom0/qvm-core: ignore stderr from VM commands when not needed for sure (#626) 
pam_systemd.so has a bug, which cause spurious '...killed' output on stderr.
 2012-07-16 13:31:43 +02:00
Marek Marczykowski
eeabd3b371 Revert "vm/spec: disable pam_systemd globally (#607)" (#626) 
This reverts commit 8ec4b6963b71b95bc0cda6dd80d99bf60aa9caec.
This caused regression (#626).

Conflicts:

	rpm_spec/core-vm.spec
 2012-07-16 12:49:41 +02:00
Marek Marczykowski
712d122894 dom0: fix block-cleaner daemon 2012-07-15 19:48:36 +02:00
Marek Marczykowski
b6b50b6fea dom0/appmenus: Rename dir entry for ServiceVMs (#627) 2012-07-15 02:26:17 +02:00
Marek Marczykowski
1009b1a46d dom0/qvm-sync-appmenus: use qubes.GetAppmenus service 2012-07-15 02:26:17 +02:00
Marek Marczykowski
1c096ec65c vm: implement qubes.GetAppmenus to reduce code duplication 
As one-liner services are now real one-line, just do it.
 2012-07-15 02:26:09 +02:00
Marek Marczykowski
15d5a1205d vm: simplify qubes.VMShell service 
Now additional wrapper not required to skip cmdline argument
 2012-07-15 02:04:17 +02:00
Marek Marczykowski
7e3ffabd78 dom0+vm: execute qrexec service as shell script 
This will allow to pass quoted arguments and some variable expansion. Basically
one-line shell command service can be embeded in the configuration.
In previus version use of "command path with spaces" whould result in try to
execute '"command' with arguments 'path', 'with' and 'spaces"'.
 2012-07-14 23:03:43 +02:00
Marek Marczykowski
2b5ce31eeb dom0+vm/qrexec-services: pass remote domain via env variable not argument 
Most qrexec services doesn't use remote domain name, as policy is enforced
earlier. So pass it in way that will allow use of generic command as qrexec
service.
 2012-07-14 22:54:23 +02:00
Marek Marczykowski
08888fcf7a dom0/core: remove duplicated remove_from_disk definition 2012-07-14 16:07:35 +02:00
Marek Marczykowski
d156a815d2 dom0/dom0-updates: remove updates-pending flag after update installation 2012-07-14 15:55:46 +02:00
Marek Marczykowski
7fbeacc81b dom0/core: remove appmenus when removing NetVM (#627) 2012-07-14 15:12:41 +02:00
Marek Marczykowski
45ecf318ca Merge remote-tracking branch 'alex/hvm' into hvm 2012-07-13 14:49:51 +02:00
Marek Marczykowski
32fbd5aefd dom0: call qrexec service while preparing NetVM for sleep (#617) 
Instead of hardcoded commands.
 2012-07-13 14:42:54 +02:00
Marek Marczykowski
6d6f43fb4e vm: export SuspendPre and SuspendPost qrexec services (#617) 
1. Try to use NetworkManager sleep command instead of shutting it down
2. Move sleep action details (which is VM-specific) to VM
3. Export it as qrexec service(s)
 2012-07-13 14:40:52 +02:00
Marek Marczykowski
4aab477f38 dom0/dispvm: by default use prerun script from inside of VM (#620) 2012-07-12 14:21:59 +02:00
Marek Marczykowski
b92bb698be vm: provide dispvm-dotfiles and dispvm-prerun.sh in rpm package (#620) 2012-07-12 14:21:44 +02:00
Marek Marczykowski
4f08a57db6 vm/system: ensure that DispVM savefile have pagecache populated (#620) 
This is done by readahead, so just let it done its work before suspend.
 2012-07-12 03:54:41 +02:00
Marek Marczykowski
6aeaa7b036 vm/systemd: disable additional useless services (#620) 
Most of them relay on direct network acces, which isn't true on Qubes.
 2012-07-12 03:54:41 +02:00
Marek Marczykowski
212d4227c8 vm/spec: remove dupplicated commnds, suppress error message 2012-07-12 03:54:41 +02:00
Marek Marczykowski
f0d55138d3 dom0/spec: suppress unnecessary messages during package upgrade 2012-07-12 03:54:34 +02:00
Marek Marczykowski
2a9a6c761f vm/file-editor: load session environment (#620) 
Especially set DBUS socket to allow interprocess communication instead of
spawning new instances or timeouts.
 2012-07-12 03:45:20 +02:00
Marek Marczykowski
64a942eee8 dom0/dispvm: notify when starting new DispVM (#616) 2012-07-12 03:44:41 +02:00
Marek Marczykowski
ac76b7203f dom0/qvm-sync-clock: string '\n' from date output 2012-07-12 03:43:57 +02:00
Marek Marczykowski
ba81866b2f dom0/qvm-tools: Warn the user when running qvm-tool as root is not recommended (#612) 2012-07-11 23:53:23 +02:00
Marek Marczykowski
6686159750 Merge branch 'hvm' of ssh://gitpro.qubes-os.org/var/lib/qubes/git/joanna/core into hvm 2012-07-09 15:55:29 +02:00
Marek Marczykowski
c1f5377b1d vm/spec: disable pam_systemd only in trigger 
The %post part is unnecessary.
 2012-07-09 15:52:42 +02:00
Marek Marczykowski
9df909277f makefile: fix clean target 2012-07-07 02:45:32 +02:00
Joanna Rutkowska
da7a4800c9 version 2.0.32 2012-07-06 11:19:16 +02:00
Joanna Rutkowska
872abbed82 Merge branch 'hvm' of 10.141.1.101:/var/lib/qubes/git/marmarek/core into hvm 2012-07-06 11:15:18 +02:00
Marek Marczykowski
3ccc43ede2 dom0/spec: remove some udev rules from system (#605) 2012-07-05 01:40:38 +02:00
Marek Marczykowski
725e724044 vm: disable D-Bus activation of NetworkManager (#610) 2012-07-05 01:33:22 +02:00
Marek Marczykowski
f20099f05b vm/spec: disable pam_systemd globally (#607) 
Actually all /etc/pam.d/ files containing pam_systemd.so are autogenerated by
authconfig, so "removing" pam_systemd.so file as not elegant solution, seems to
be much more realiable.
 2012-07-05 01:31:32 +02:00
Marek Marczykowski
ee59cb33ce vm/qubes-update-proxy: update URL whitelist 2012-07-05 01:30:47 +02:00
Marek Marczykowski
897f981c8c dom0/qvm-run: Notify qubes-manager about failed VM start (#615) 2012-07-05 01:30:00 +02:00
Marek Marczykowski
27b6aa4378 dom0/qmemman: notify qubes-manager about misbehaving VMs (#615) 2012-07-05 01:29:45 +02:00
Marek Marczykowski
3ce68def8c dom0/qmemman: check if donors have returned memory before distributing it to other VMs (#563) 
When some VM did't returned memory to Xen, mark this VM as suspicious and abort
balance to always have some xen free_memory margin.
VMs marked as suspicius will be evaluated before next balance and still didn't
returned memory, will be skipped in balance process.
 2012-07-05 01:29:45 +02:00
Marek Marczykowski
eb3da24aa4 dom0/guihelpers: interface to notifying qubes-manager (#615) 2012-07-05 01:29:45 +02:00