Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
1,601 Commits 1 Branch 0 Tags 15 MiB
1dad96b0e9
Commit Graph

847 Commits

Author SHA1 Message Date
Marek Marczykowski
1dad96b0e9 dom0: use RPC service to sync clock via NTP (#603) 2012-06-22 22:23:17 +02:00
Marek Marczykowski
36f6a2c42c dom0: minor init.d script fix 2012-06-22 01:22:06 +02:00
Marek Marczykowski
51f4a60a44 dom0: use new qubes-manager appmenu applet (#548) 2012-06-21 11:57:36 +02:00
Marek Marczykowski
3109deebd5 Revert "dom0/appmenus: do not add "Add more shortcuts" menu (#458)" (#548) 
This reverts commit 8b613a10b4.

Restore this option.
 2012-06-21 11:50:52 +02:00
Marek Marczykowski
a4e10f00c1 dom0/qvm-firewall: eliminate duplicate firewall defaults definition (#599) 
This caused ignore of different firewall defaults for TemplateVM.
 2012-06-18 23:51:44 +02:00
Marek Marczykowski
06d99b77df dom0: minor qvm-sync-clock fix 
Catch any error in vm.run, to not break clock syncing of all VMs because one
VM.
 2012-06-15 17:42:14 +02:00
Marek Marczykowski
92844a161a dom0: qvm-run --nogui support for HVM 
Translate it to "nogui:" command prefix.
 2012-06-15 17:40:03 +02:00
Marek Marczykowski
4dfad5f1ae dom0: qvm-run --nogui switch 
Can be used to not start guid.
 2012-06-15 17:37:19 +02:00
Marek Marczykowski
6bd988bf81 dom0/core: allow to change default user for qvm-run (#577) 
This doesn't make all dom0 code VM-username independent, still 'user' is
hardcoded in many places. This only change behavior of qvm-run, especially for use in HVM.
 2012-06-13 17:16:12 +02:00
Marek Marczykowski
e6a75c732e dom0/core: support for qrexec for Windows HVM 
Because not every HVM will have qrexec agent installed, introduce VM property
'qrexec_installed'. If it is set, spawn qrexec_daemon at VM startup and allow
use of qvm-run.
 2012-06-13 17:14:25 +02:00
Marek Marczykowski
5504142187 dom0/core: fix race in QubesHVm.stubdom_xid 
device-model-domid is written to xenstore after domaid id itself, so do not
assume the former is present when we know VM XID.
 2012-06-13 17:11:21 +02:00
Marek Marczykowski
784f0f5607 dom0/core/hvm: rename is_fully_usable() to is_guid_running() 
This is what this function does.
 2012-06-13 17:09:06 +02:00
Marek Marczykowski
46db1e83f0 dom0/core: introduce is_guid_running() and use it in is_fully_usable() 
To improve code reuse, especially to remove direct checking for
"/var/run/qubes/guid_running.{0}" in many places.
 2012-06-13 17:08:30 +02:00
Marek Marczykowski
6a929190d2 dom0/core: fix order of loading VM attributes 
Parsing kernelopts depends on uses_default_kernelopts, so set 'order' appropriate.
 2012-06-13 17:01:57 +02:00
Marek Marczykowski
dfbf078155 dom0: do not reply all udev events at system boot (#595) 
This can cause some rules to fail and eg remove dm-* devices. Replace it with
what is really needed to hide mounted (and other ignored) devices from
qubes-block-devices.
 2012-06-13 04:08:09 +02:00
Marek Marczykowski
2eb7c5733d dom0/core: set network parameters only when VM have network access 2012-06-12 18:25:04 +02:00
Marek Marczykowski
653c056c99 dom0/core: fix HVM network settings in xen config 2012-06-12 18:24:34 +02:00
Marek Marczykowski
3f3dc4708c dom0: populate unchanged firewall settings with previous values (#589) 
Missed settings in new firewall configuration caused exception. In old qubes-manager (before #582 done) this exception silently broke saving operation, leaving user with progress bar windows infinitely...
 2012-06-05 20:57:40 +02:00
Marek Marczykowski
2c7227066c dom0/qvm-ls: replace 'netmask' column with 'ip back' (#573) 2012-06-05 19:58:58 +02:00
Marek Marczykowski
3255f81a1c dom0/core: fix QubesVM.gateway 
To be consistent with QubesNetVM, where gateway property contain gateway IP for
_other_ VMs, in non-network-provider VM it should be empty.
 2012-06-05 19:57:19 +02:00
Marek Marczykowski
8b366f1148 dom0: default TemplateVM firewall: block all traffic and allow use of yum proxy (#590) 2012-06-05 19:37:39 +02:00
Marek Marczykowski
01e8a2dff9 dom0/core: implement per-VM-type firewall defaults 2012-06-05 19:37:12 +02:00
Marek Marczykowski
1f194cbe08 dom0: block_cleaner: removes ejected devices from xenstore 
When device is ejected by some VM (state=6, effectively inactive), it should be
removed from xenstore to free slot for some another device. This should be done
by libxl toolstack, but not implemented in xen 4.1 - AFAIR done in xen 4.2.
 2012-06-01 20:59:45 +02:00
Marek Marczykowski
c49ad3438b dom0/core: remove trailing spaces 2012-05-31 03:05:14 +02:00
Marek Marczykowski
d89733b517 dom0/core: setup yum to use proxy when it have access to it (#568) 
To simplify configuration, automatically enable 'yum-proxy-setup'
pseudo-service when allowing access to the proxy. Also disable this service,
when access is revoked. Thanks to this the user can enable this feature by one
click in firewall settings.
 2012-05-31 03:05:13 +02:00
Marek Marczykowski
c81cc32da2 dom0/qvm-firewall: add support for 'allowYumProxy' setting (#568) 2012-05-31 03:05:13 +02:00
Marek Marczykowski
030584f026 dom0/core-firewall: firewall setting for qubes-yum-proxy (#568) 
New setting for access to qubes-yum-proxy. The difference from other firewall
setting (and reason for new top-level setting): 'deny' is enforced even if
policy is set to 'allow'. This proxy service is mainly used to filter network
traffic, so do not expose it to VMs which can connect to any host directly (eg
'untrusted' VM).
 2012-05-31 03:05:13 +02:00
Marek Marczykowski
6bc609fbc3 dom0/qvm-tools: introduce qvm-service tool 
Allow setting vm services same as in qubes-manager
 2012-05-30 13:47:25 +02:00
Marek Marczykowski
b55da785f7 dom0/qvm-block: hide devices mounted in dom0 (#579) 2012-05-30 00:54:24 +02:00
Marek Marczykowski
2e8765e1e1 dom0/qvm-ls: add 'kernel' and 'kernelopts' columns 2012-05-26 12:21:42 +02:00
Marek Marczykowski
44c14d409c dom0/core: don't limit netvm/proxyvm vcpu count to 1 (#571) 2012-05-25 15:06:00 +02:00
Marek Marczykowski
b87806db17 dom0: expose debug mode in xenstore (#567) 2012-05-22 15:51:40 +02:00
Marek Marczykowski
659dec044f dom0/core: don't force maxmem=memory for NetVM (#572) 2012-05-20 02:08:56 +02:00
Marek Marczykowski
2b439aedfe dom0/update-notify: ensure correct permissions for update stat file 2012-05-16 07:55:48 +02:00
Marek Marczykowski
be1e72cad7 dom0/qubes-updates: stat file for qubes-manager 2012-05-14 04:56:30 +02:00
Marek Marczykowski
ba3d07d300 dom0/qubes-updates: one more qubes-dom0-update typo fix 2012-05-14 04:56:03 +02:00
Marek Marczykowski
81138182f6 dom0: var name fix, and one minor sanity check 2012-05-08 15:54:29 +02:00
Marek Marczykowski
c78d38fb0d dom0/core: disable private.img for HVM (#26 pro) 2012-05-04 13:20:10 +02:00
Marek Marczykowski
fdaee4bf92 dom0/dom0-update: clean up metadata caches after downloading updates (#558) 2012-05-04 02:42:21 +02:00
Marek Marczykowski
7f6a3c665b dom0/qvm-pci: add info about required restart after PCI device add/remove 2012-05-03 03:54:05 +02:00
Marek Marczykowski
99e784bfc0 dom0/qvm-backup: chown user dir before backup (#492) 2012-05-01 02:22:36 +02:00
Marek Marczykowski
929d6b52c9 dom0: create appmenus for NetVMs, using separate whitelist (#538) 2012-05-01 02:05:07 +02:00
Marek Marczykowski
478b57f3a9 dom0: create appmenus template and icon for all VMs 2012-05-01 02:04:16 +02:00
Marek Marczykowski
fa41bf840c dom0: provide service for VM to notify about updates availability (#475) 2012-05-01 01:12:19 +02:00
Marek Marczykowski
366e405df0 dom0: remove unused reset_vm_configs.py 2012-04-30 13:29:01 +02:00
Marek Marczykowski
2ec08734dd dom0/core: guid for HVM is connected to stubdom - respect it when checking its state (#25 pro) 2012-04-28 02:51:43 +02:00
Marek Marczykowski
1b9e780861 dom0/core: do not relay on any max xid (#445) 
What is really required is the maximum number of domains, not its IDs. Use max
QID as maximum number of domains.
 2012-04-28 02:17:04 +02:00
Marek Marczykowski
f41f0e965b dom0/qvm-ls: show 'n/a' in disk usage for dom0 2012-04-28 02:03:43 +02:00
Marek Marczykowski
187bc242e5 dom0: add missing 2> /dev/null to unbind_pci_device.sh (#550) 2012-04-26 14:29:19 +02:00
Marek Marczykowski
6a489c0faf dom0: fix check-updates cron job 2012-04-25 23:37:03 +02:00