4536 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Wojtek Porczyk	e8a5bc9b36	qubesd: improve exception handling ... QubesOS/qubes-issues#2622	2017-02-10 23:25:45 +01:00
Wojtek Porczyk	249d8c08e2	qubes/tools/qubesd-query: low-level interrogation tool	2017-02-10 23:25:45 +01:00
Wojtek Porczyk	02639b8d02	qubes/mgmt: mgmt.vm.property.List ... QubesOS/qubes-issues#2622	2017-02-10 22:55:53 +01:00
Wojtek Porczyk	c12fc744a2	qubes/mgmt: move mgmt api to separate module ... QubesOS/qubes-issues#2622	2017-02-09 23:29:05 +01:00
Wojtek Porczyk	5d455ac3c4	misc pylint fixes related to qubesd	2017-02-08 15:37:39 +01:00
Wojtek Porczyk	0be3b1fbb1	qubes/tools/qubesd: initial version	2017-02-07 17:07:53 +01:00
Wojtek Porczyk	1be75d9c83	misc python3 fixes	2017-02-07 17:07:52 +01:00
Wojtek Porczyk	9f7ba53eec	fix Makefile, setup.py, spec and travis ... QubesOS/qubes-issues#2074	2017-01-20 18:31:09 +01:00
Wojtek Porczyk	d74567d65f	qubes: port core to python3 ... fixes QubesOS/qubes-issues#2074	2017-01-20 16:42:51 +01:00
Wojtek Porczyk	0f1672dc63	Revert "backup: use 'scrypt' tool for backup encryption and integrity protection" ... This reverts commit 418d749680. Package `scrypt` is currently not installable (not present in any repo). Cc: @marmarek	2016-12-05 18:36:13 +01:00
Wojtek Porczyk	25912f5787	qubes/tools: add qvm-tags ... QubesOS/qubes-issues#865	2016-12-02 14:17:09 +01:00
Wojtek Porczyk	5f436360f7	qubes/app: Fix create_empty_store signature ... QubesOS/qubes-issues#1729	2016-11-30 18:34:11 +01:00
Wojtek Porczyk	68ad60c1b3	Merge remote-tracking branch 'origin/master' into core3-devel ... Conflicts: core/qubes.py doc/Makefile doc/manpages/qvm-prefs.rst doc/qvm-tools/qvm-add-appvm.rst doc/qvm-tools/qvm-backup-restore.rst doc/qvm-tools/qvm-backup.rst doc/qvm-tools/qvm-block.rst doc/qvm-tools/qvm-clone.rst doc/qvm-tools/qvm-firewall.rst doc/qvm-tools/qvm-ls.rst doc/qvm-tools/qvm-pci.rst doc/qvm-tools/qvm-run.rst doc/qvm-tools/qvm-shutdown.rst doc/qvm-tools/qvm-start.rst doc/qvm-tools/qvm-template-commit.rst qvm-tools/qvm-ls qvm-tools/qvm-prefs qvm-tools/qvm-remove tests/__init__.py vm-config/xen-vm-template.xml	2016-11-30 03:07:39 +01:00
Cyril LEVIS	1b12df379c	add --help and -h on qvm-create-default-qvm	2016-11-28 13:53:36 +01:00
Marek Marczykowski-Górecki	534c3a13f7	Merge remote-tracking branch 'qubesos/pr/78' ... * qubesos/pr/78: Add name-raw field for qvm-ls	2016-11-28 12:59:27 +01:00
Marek Marczykowski-Górecki	71243d949e	Merge remote-tracking branch 'qubesos/pr/80' ... * qubesos/pr/80: qvm-check: s/stdout/stderr/	2016-11-28 12:58:28 +01:00
Marek Marczykowski-Górecki	076ef884f3	Merge remote-tracking branch 'qubesos/pr/79' ... * qubesos/pr/79: Implement qvm-ls --list-fields	2016-11-28 12:57:18 +01:00
Jean-Philippe Ouellet	80450dab92	Add name-raw field for qvm-ls ... Useful to avoid needing to `... | tr -d '<>{}[]='` just to get clean VM names in scripts. Fixes https://github.com/QubesOS/qubes-issues/issues/2444	2016-11-28 02:58:18 -05:00
Jean-Philippe Ouellet	7033f6a796	qvm-check: s/stdout/stderr/	2016-11-28 02:54:04 -05:00
Marek Marczykowski-Górecki	97d2b428f1	Merge remote-tracking branch 'qubesos/pr/76' ... * qubesos/pr/76: DRY Qubes[Disp]VmLabels	2016-11-27 19:06:16 +01:00
Jean-Philippe Ouellet	6ddf141376	Implement qvm-ls --list-fields	2016-11-27 01:12:53 -05:00
Marek Marczykowski-Górecki	8f443547fb	qubes/vm: disconnect from old QubesDB when going to start new instance ... QubesDB daemon no longer remove socket created by new instance, so one part of VM restart race condition is solved. The only remaining part is to ensure that we really connect to the new instance, instead of talking to the old one (soon to be terminated). Fixes QubesOS/qubes-issues#1694	2016-11-26 04:09:00 +01:00
Marek Marczykowski-Górecki	3b209515c2	qubes/vm/dispvm: don't crash when DispVM is already killed ... This is regression of QubesOS/qubes-issues#1660 Fixes QubesOS/qubes-issues#1660	2016-11-26 04:09:00 +01:00
Marek Marczykowski-Górecki	6ff836dfa4	qubes/log: add FD_CLOEXEC to log files ... Don't leak log file descriptors. At least 'lvm' complains. QubesOS/qubes-issues#2412	2016-11-26 04:08:59 +01:00
Marek Marczykowski-Górecki	194fb9b99b	rpm: disable prelink only when present ... It isn't installed by default. QubesOS/qubes-issues#2412	2016-11-26 04:08:59 +01:00
Marek Marczykowski-Górecki	210cb65d1c	qubes/tools: drop requirement of qubes-prefs --force-root ... None of properties set there do any "dangerous thing" for filesystem permissions (at least for now), so do not require it. This is mostly to keep compatibility with %post rpm scripts (kernel-qubes-vm at least). QubesOS/qubes-issues#2412	2016-11-26 04:08:59 +01:00
Marek Marczykowski-Górecki	a318d5cea9	Don't fail on DBus connection error or opening log ... Especially in offline mode - like during installation, tests etc. QubesOS/qubes-issues#2412	2016-11-26 04:08:59 +01:00
Marek Marczykowski-Górecki	02a0713665	qubes/tools: better handle qvm-template-postprocess called as root ... This tool by design is called as root, so try to: - switch to normal user if possible - fix file permissions afterwards - if not QubesOS/qubes-issues#2412	2016-11-26 04:08:58 +01:00
Marek Marczykowski-Górecki	28475f7214	systemd: adjust qubes-prefs options ... As the service is called as root, it needs --force-root. QubesOS/qubes-issues#2412	2016-11-26 04:08:58 +01:00
Marek Marczykowski-Górecki	28d4feb0d0	qubes: fix network-related functions ... - cleanup_vifs crash when non-networked VM is running - type error in get_vms_connected_to (store VM objects, not qid)	2016-11-26 04:08:58 +01:00
Marek Marczykowski-Górecki	e85b0663f6	tools: fire 'template-postinstall' event for extensions ... Allow extensions to finish template setup. This include retrieving appmenus, settings defaults etc. QubesOS/qubes-issues#2412	2016-11-26 04:08:58 +01:00
Marek Marczykowski-Górecki	0041063b8e	qubes/config: set default labels ... There was a comment '# Set later', but actually values were never set. This break adding just installed template (qvm-template-postprocess). QubesOS/qubes-issues#2412	2016-11-26 04:08:57 +01:00
Marek Marczykowski-Górecki	c4e85a81fb	qubes/app: automatically enable offline mode when running in chroot ... Do not spray --offline-mode over every installer-related script. QubesOS/qubes-issues#2412	2016-11-26 04:08:50 +01:00
Marek Marczykowski-Górecki	d8a1216daf	Fix qubes-create in offline mode ... QubesOS/qubes-issues#2412	2016-11-26 04:08:09 +01:00
Marek Marczykowski-Górecki	5e15db4176	qubes/tools: accept qvm-start --no-guid ... Lets keep compatibility with older scripts. QubesOS/qubes-issues#2412	2016-11-26 04:08:08 +01:00
Marek Marczykowski-Górecki	964955758c	qubes/app: create 'default' storage pool as LVM when present ... When system is installed with LVM thin pool, it should be used by default. But lets keep file-based on for /var/lib/qubes for some corner cases, migration etc. QubesOS/qubes-issues#2412	2016-11-26 04:08:08 +01:00
Marek Marczykowski-Górecki	badc58837a	Add qvm-template-postprocess tool ... This is intended to call to finish template installation/removal. Template RPM package is basically container for root.img, nothing more. Other parts needs to be generated after root.img extraction. Previously it was open coded in rpm post-install script, but lets keep it as qvm tool to ease supporting multiple version in template builder QubesOS/qubes-issues#2412	2016-11-26 04:08:08 +01:00
Marek Marczykowski-Górecki	408606e0f0	rpm: adjust post-installation script for new tools ... QubesOS/qubes-issues#2412	2016-11-26 04:08:08 +01:00
Marek Marczykowski-Górecki	1418555346	qubes/vm: don't fail on removing VM without files ... VM files may be already removed. Don't fail on this while removing a VM, it's probably the reason why domain is being removed. qvm-remove tool have its own guard for this, but it isn't enough - if rmtree(dir_path) fails, storage.remove() would not be called, so non-file storages would not be cleaned up. This is also needed to correctly handle template reinstallation - where VM directory is moved away to call create_on_disk again. QubesOS/qubes-issues#2412	2016-11-26 04:08:07 +01:00
Marek Marczykowski-Górecki	cc440c62f6	qubes/tools: accept properties with '-' ... '-' is invalid character in python identifier, so all the properties have '_'. But in previous versions qvm-* tools accepted names with '-', so lets not break this. QubesOS/qubes-issues#2412	2016-11-26 04:08:07 +01:00
Marek Marczykowski-Górecki	880566a387	qubes/tools: do not reject --set/--get in *-prefs tools ... Those options are no longer needed, but lets not reject them to preserve compatibility with older scripts QubesOS/qubes-issues#2412	2016-11-26 04:08:07 +01:00
Marek Marczykowski-Górecki	91727389c4	qubes/log: ensure logs are group writable ... /var/log/qubes directory have setgid set, so all the files will be owned by qubes group (that's ok), but there is no enforcement of creating it group writable, which undermine group ownership (logs created by root would not be writable by normal user) QubesOS/qubes-issues#2412	2016-11-26 04:08:07 +01:00
Marek Marczykowski-Górecki	80c0093c77	qubes/tools/qubes-create: reject overriding existing qubes.xml ... If someone really want do to this, need to manually remove the file first. QubesOS/qubes-issues#2412	2016-11-26 04:08:06 +01:00
Marek Marczykowski-Górecki	c08766e157	qubes/features: rename 'services/ntpd' to 'service/ntpd' ... It makes much more sense to use singular form here - ntpd is a single service.	2016-11-26 04:08:06 +01:00
Jean-Philippe Ouellet	5c08d0e2e3	DRY Qubes[Disp]VmLabels	2016-11-25 00:03:05 -05:00
unman	5ea129c1e0	Fix handling attributes in qvm-prefs	2016-11-25 02:19:09 +00:00
Marek Marczykowski-Górecki	02d8f273f2	Merge remote-tracking branch 'qubesos/pr/73' ... * qubesos/pr/73: Fixed regexp for MAC address in qvm-prefs Fixes QubesOS/qubes-issues#1270	2016-11-25 03:02:04 +01:00
Marek Marczykowski-Górecki	fe470dade9	Merge remote-tracking branch 'qubesos/pr/72' ... * qubesos/pr/72: Don't allow VM name ending in -dm	2016-11-25 03:01:15 +01:00
unman	4f2318fcc3	Fixed regexp for MAC address in qvm-prefs	2016-11-25 01:02:32 +00:00
Marek Marczykowski-Górecki	01b67a0af1	Handle both old and new shm.id path ... This ease transition (installing new package will not break system).	2016-11-23 04:13:02 +01:00