Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
1,013 Commits 1 Branch 0 Tags 15 MiB
5fc5301cee
Commit Graph

103 Commits

Author SHA1 Message Date
Marek Marczykowski
8d855aa958 dom0+vm/qvm-block: automatically detach device when physical dev removed (#226) 
This will work when device is unmounted. On mounted device backend will be
removed (after 3s timeout), but frontend will left in "closing" state - manual
'xl block-detach' will be needed.
 2011-09-30 10:42:56 +02:00
Marek Marczykowski
960b02e8ed dom0+vm: make sure that block backend module is loaded when needed (#226) 2011-09-30 10:42:50 +02:00
Marek Marczykowski
6b885bd361 dom0+vm: expose block devices info in xenstore (#226) 2011-09-29 13:56:06 +02:00
Marek Marczykowski
801e113c06 vm: minor fixes for Fedora 15 
1. create /var/run/qubes as /var/run is now on tmpfs
2. if system-d is present - use it to disable NetworkManager
 2011-09-27 01:37:09 +02:00
Marek Marczykowski
cf38083126 vm: fc15 yum repo config 2011-09-22 01:16:54 +02:00
Marek Marczykowski
341a5d76ca vm: route through specific host, not directly interface (#355) 
This it to not fill ARP cache with any host that VM connects to.
 2011-09-16 00:06:14 +02:00
Marek Marczykowski
395cf4bc79 vm/qvm-dom0-update: don't check for template updates here 
Also use exit code 100 to notify updates existence (the same way as yum
check-update does).
 2011-09-15 13:34:14 +02:00
Marek Marczykowski
c3456f7615 vm/qvm-dom0-update: output diagnostics to stderr 
To not confuse qubes-watch-updates...
 2011-09-15 00:19:48 +02:00
Marek Marczykowski
855664e6e5 dom0+vm: use qubes_download_dom0_updates.sh instead of qubes_check_for_updates.sh 
Remove code duplication. Implemented required --check-only option to
qubes_download_dom0_updates.sh.
 2011-09-15 00:18:56 +02:00
Marek Marczykowski
a46676a14b vm/qvm-dom0-update: fix typo in --clean option parsing 2011-09-15 00:14:13 +02:00
Joanna Rutkowska
0b89cb1ccc vm: fix package cleaning 2011-09-14 20:19:53 +02:00
Marek Marczykowski
a694afbb48 vm: clean also downloaded packages on qvm-dom0-update --clean 2011-09-14 20:11:23 +02:00
Joanna Rutkowska
2de02b7a6c vm: update symlinks in Nautilus Scripts menu 
This is important for older templates that got upgraded to new core packages,
which renamed some of the tools by removing the '2' suffix.
 2011-09-14 19:32:47 +02:00
Marek Marczykowski
558d1ee582 dom+vm: Copy dom0 yum.conf to UpdateVM 
At least to use dom0 'exclude' options, not VM one. Especially to not exlude
kernel and xorg updates...
 2011-09-14 00:47:13 +02:00
Marek Marczykowski
02ca39458a vm/dom0 updates: Remove useless PKGCOUNT information from message 2011-09-12 15:08:29 +02:00
Marek Marczykowski
d57804b6a0 vm: allow clean yum cache for dom0 updates (#346) 2011-09-12 14:36:53 +02:00
Marek Marczykowski
e8d84ced0a vm: dom0 updates - minor cleanup 2011-09-12 14:34:41 +02:00
Marek Marczykowski
8c6e03588a vm: Parse all options from when downloading updates (#348) 
Collect options and pkg names to separate variables and check if any pkg name
was given, not any argument.
 2011-09-12 14:32:56 +02:00
Marek Marczykowski
a253719254 vm: try to load pvops modules 2011-09-08 01:06:39 +02:00
Marek Marczykowski
a1fc75a58b vm: automatically online added memory 
This is needed to increase memory size above initial value on pvops kernel.
Should not harm xenlinux version.
 2011-09-06 01:12:21 +02:00
Marek Marczykowski
d9cd2467b0 vm: get rid of "2" from qvm-* names (#340) 2011-09-03 17:12:24 +02:00
Joanna Rutkowska
203b55ee0a vm: allow user-define hook for IP change event 
This is especially useful for proxy VMs that e.g. run some transparent proxy service such as tor,
and need to rebind it upon IP change (of course this assumes iptables-based transparent redirection
such as DNAT).
 2011-08-18 15:49:49 +02:00
Joanna Rutkowska
fc5dc8b22d Merge branch 'prebeta2' of git.qubes-os.org:/var/lib/qubes/git/rafal/core 2011-08-02 19:35:19 +02:00
Rafal Wojtczuk
357759147f setup_ip: turn off sg 
Apparently vif frontend has broken sg implementation; we already worked around
it in init.d script via ethtool; now do the same in setup_ip. It is relevant
when attaching firewallvm to a different netvm on the fly.
 2011-08-02 19:27:45 +02:00
Joanna Rutkowska
7309cc2f04 Merge branch 'prebeta2' of git.qubes-os.org:/var/lib/qubes/git/rafal/core 2011-08-01 15:41:56 +02:00
Rafal Wojtczuk
d2301ab125 qvm-prefs: allow on the fly netvm switch (#302) 
When changing netvm of a running vm, detach/attach eth0.
Some functionality of qubes_core_netvm thus is duplicated in setup_ip.
REQUIRES http://git.qubes-os.org/?p=rafal/xen.git;a=commit;h=42c72e6173586a807f8f153391e2e57352d362b1
 2011-08-01 15:06:01 +02:00
Marek Marczykowski
002fad72c4 dom0+vm: Polishing qvm-dom0-upgrade (#287) 
Do not print error message when no package downloaded. Also some more covenient
usage when dowloading new packages (implied --resolve --nogui).
 2011-07-25 13:45:36 +02:00
Marek Marczykowski
49257d488b dom0+vm: download updates as normal user (#198) 2011-07-17 01:20:13 +02:00
Marek Marczykowski
f24897ae56 vm: Split updates check and download into separate scripts (#198) 2011-07-17 01:20:13 +02:00
Marek Marczykowski
977b058395 dom0: implement size/file-count limit of downloaded updates (#198) 
Currently limit is 2GB and 2048 files, but can be adjusted by env variables
(UPDATES_MAX_BYTES, UPDATES_MAX_FILES).
 2011-07-17 01:20:13 +02:00
Marek Marczykowski
4fd6cf98d5 vm: more reliably set IP address of VM 2011-07-14 02:11:43 +02:00
Marek Marczykowski
3c32fc8d21 vm: Do not try to load non-existing xen-evtchn module 2011-07-10 23:54:23 +02:00
Rafal Wojtczuk
6366db0ab6 qrexec: adjust updates fetching to the new qrexec api 2011-07-06 14:44:40 +02:00
Rafal Wojtczuk
b3ce35b5e2 qrexec: change qrexec_client_vm syntax to be nicer to read 
Now the local_program is just before arguments, which is nicer.
 2011-07-06 14:21:35 +02:00
Rafal Wojtczuk
d46150b8d3 qrexec: adjust appmenu syncing to the new qrexec api 2011-07-06 14:09:36 +02:00
Marek Marczykowski
33fa170e75 vm: remove /lib/modules from fstab (#263) 
This is mounted by initramfs
 2011-07-03 20:53:36 +02:00
Marek Marczykowski
fdf636f50e vm: Do not setup IP second time 
It is assigned by udev script
 2011-07-03 20:11:55 +02:00
Marek Marczykowski
11a96f70de vm: Load evtchn module by script in /etc/sysconfig/modules 2011-07-02 19:11:15 +02:00
Marek Marczykowski
af7fb11a4a Revert "vm: Load evtchn module in qubes_core" 
This reverts commit 26a9b77545.
Will be loaded by separate script in /etc/sysconfig/modules

Conflicts:

	common/qubes_core
 2011-07-02 19:09:28 +02:00
Joanna Rutkowska
88098ae69b vm: qubes_core ident fixes 2011-07-02 13:14:57 +02:00
Joanna Rutkowska
26a9b77545 vm: Load evtchn module in qubes_core 2011-07-02 13:12:53 +02:00
Joanna Rutkowska
3428d95015 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-07-02 00:29:32 +02:00
Marek Marczykowski
01a5046e54 vm: Load u2mfn module 2011-07-02 00:24:20 +02:00
Joanna Rutkowska
bfa03d5fb9 Update VM yum repos confs for Beta2 2011-07-01 22:56:11 +02:00
Marek Marczykowski
f447a458f2 dom0+vm: Update VM kernel mechanism (#242) 
Get kernel from global kernels dir (/var/lib/qubes/vm-kernels), not per-VM. Can
be configured by qvm-prefs (kernel parameter).
New tool: qvm-set-default-kernel

For backward compatibility kernel=None means kernel in VM dir (kernels subdir).
(possibly empty) modules.img should be created in it.
 2011-06-30 01:07:47 +02:00
Marek Marczykowski
71cfeba203 vm: Check for TemplateVM updates (#198) 
Just before dom0 updates check for TemplateVM updates and notify the user when
there are some.
 2011-06-27 21:14:34 +02:00
Marek Marczykowski
2784d0ccd4 vm: Run ntpd in FirewallVM as clock source for dom0 (#198) 2011-06-27 21:14:34 +02:00
Marek Marczykowski
d9d7a69c27 dom0+vm: Tools for downloading dom0 update by VM (#198) 
Mainly 4 parts:
 - scripts for providing rpmdb and yum repos to VM (choosen by qvm-set-updatevm)
 - VM script for downloading updates (qubes_download_dom0_updates.sh)
 - qfile-dom0-unpacker which receive updates, check signatures and place its in dom0 local yum repo
 - qvm-dom0-upgrade which calls all of above and after all yum gpk-update-viewer

Besides qvm-dom0-upgrade, updates are checked every 6h and user is prompted if
want to download it. At dom0 side gpk-update-icon (disabled yet) should notice
new updates in "local" repo.
 2011-06-22 00:44:48 +02:00
Marek Marczykowski
83d211836a dom0+vm: Trigger appmenus sync after yum transaction (#45), NEW QREXEC COMMAND 
After yum transaction (install/upgrade/remove),
yum-plugin-post-transaction-actions will execute script which trigger
qvm-sync-appmenus in dom0 (through qrexec).
THIS INTRODUCE NEW PREDEFINED COMMAND IN QREXEC
 2011-06-12 01:46:24 +02:00
Marek Marczykowski
4ab4783ee2 dom0: block-snapshot: add prepare and cleanup actions 
"prepare" and "cleanup" actions can be used to setup device manually - not from
udev. This is used by qvm-revert-template-changes.
 2011-06-10 18:34:17 +02:00