997 Commits

Author	SHA1	Message	Date
Marek Marczykowski-Górecki	2705e223bd	Merge branch 'core3-policy' into core3-devel ... * core3-policy: Make pylint happy tests: disable GTK tests on travis qubespolicy: make pylint happy qubespolicy: run GUI code inside user session and expose it as dbus object tests: plug rpc-window tests into main test runner qubespolicy: plug GUI code into qrexec-policy tool rpm: add rpc-window related files to package rpc-window: adjust for qubespolicy API rpc-window: use pkg_resources for glade file rpc-window: use 'edit-find' icon if no other is found rpc-window: adjust for python3 rpc-window: code style adjustments Import new rpc confirmation window code qubesd: add second socket for in-dom0 internal calls policy: qrexec-policy cli tool tests: qubespolicy tests qubespolicy: initial version for core3 vm/appvm: add dispvm_allowed property dispvm: don't load separate Qubes() instance when handling DispVM	2017-04-21 17:01:56 +02:00
Marek Marczykowski-Górecki	fa72679b47	Make pylint happy ... New pylint throw some more warnings.	2017-04-21 16:57:35 +02:00
Bahtiar `kalkin-` Gadimov	8d60f533c3	PCI extension cache PCIDevice objects	2017-04-15 23:50:11 +02:00
Bahtiar `kalkin-` Gadimov	79407a8717	Make pylint ♥	2017-04-15 23:50:11 +02:00
Bahtiar `kalkin-` Gadimov	5bc7a8f9e3	Fix pylint warning no-else-return	2017-04-15 23:49:41 +02:00
Bahtiar `kalkin-` Gadimov	eb217e0d27	Fix pylint warning len-as-conditional	2017-04-15 23:49:41 +02:00
Bahtiar `kalkin-` Gadimov	9da28c9c15	device-list-attached event returns a dev/options tupples list	2017-04-15 23:49:40 +02:00
Bahtiar `kalkin-` Gadimov	1c9636c5af	DeviceAssignment options are now a dict	2017-04-15 23:49:40 +02:00
Bahtiar `kalkin-` Gadimov	5a8cc9bdd3	Remove WrongAssignment exception ... Signed-off-by: Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>	2017-04-15 23:49:39 +02:00
Bahtiar `kalkin-` Gadimov	e446e7a2f4	Rename qubes.devices.BlockDevice to qubes.storage.BlockDevice ... Signed-off-by: Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>	2017-04-15 23:49:36 +02:00
Bahtiar `kalkin-` Gadimov	b1b005964f	Fix tests broken by the new assignment api	2017-04-15 23:48:59 +02:00
Bahtiar `kalkin-` Gadimov	827ca283f3	Fix qubes.tests.devices ... Signed-off-by: Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>	2017-04-15 23:48:59 +02:00
Bahtiar `kalkin-` Gadimov	e84114d3a9	Fix pci device integration tests ... Signed-off-by: Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>	2017-04-15 23:48:59 +02:00
Bahtiar `kalkin-` Gadimov	0f78d257d4	qvm-device add support for assignments ... - Add header field ASSIGNED - Persistent assignments are displayed with an asterisk - Add '-p' to attach command Fix qvm-device Signed-off-by: Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>	2017-04-15 18:05:30 +02:00
Bahtiar `kalkin-` Gadimov	0b3aebac9f	Update ext/pci to new api ... Signed-off-by: Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>	2017-04-15 18:05:29 +02:00
Bahtiar `kalkin-` Gadimov	2a6266887e	BaseVM add DeviceAssignment xml serialization ... Signed-off-by: Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>	2017-04-15 18:05:28 +02:00
Bahtiar `kalkin-` Gadimov	990cfd8ab9	Migrate DeviceCollection to new API ... - Use PersistentCollection as _set() - attach/detach expect DeviceAssignment as parater - attached(persistent=True) is now persistent() - attached() returns all attached devices - assigned() returns all attached device assignments `# modified: templates/libvirt/xen.xml Signed-off-by: Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>	2017-04-15 18:05:28 +02:00
Bahtiar `kalkin-` Gadimov	23c68c5458	Add PersistentCollection helper to qubes.devices	2017-04-15 18:05:27 +02:00
Bahtiar `kalkin-` Gadimov	211e018268	Add DeviceAssignment	2017-04-15 18:05:26 +02:00
Bahtiar `kalkin-` Gadimov	e52898972d	qvm-device validates device parameters	2017-04-15 18:05:25 +02:00
Bahtiar `kalkin-` Gadimov	6caaa6f66d	qvm-device fix handling of non block devices	2017-04-15 18:05:24 +02:00
Bahtiar `kalkin-` Gadimov	9d08e4b792	Fix bug in PCIDeviceExtension: decode buffer to string	2017-04-15 18:05:12 +02:00
Marek Marczykowski-Górecki	96db9a46d1	Fix start-related asyncio integration ... cherry-picked commit 05fc3a4	2017-04-07 17:46:54 +02:00
Marek Marczykowski-Górecki	0ada6d0b64	tests: disable GTK tests on travis ... The environment there is way too old. QubesOS/qubes-issues#910	2017-04-07 17:07:31 +02:00
Marek Marczykowski-Górecki	e76ede3ad0	tests: plug rpc-window tests into main test runner ... QubesOS/qubes-issues#910	2017-04-07 17:07:30 +02:00
Marek Marczykowski-Górecki	83526a28d3	qubesd: add second socket for in-dom0 internal calls ... This socket (and commands) are not exposed to untrusted input, so no need to extensive sanitization. Also, there is no need to provide a stable API here, as those methods are used internally only. QubesOS/qubes-issues#853	2017-04-07 17:07:28 +02:00
Marek Marczykowski-Górecki	564408eb3f	tests: qubespolicy tests ... Fixes QubesOS/qubes-issues#2460	2017-04-06 15:43:17 +02:00
Marek Marczykowski-Górecki	1c836531c7	vm/appvm: add dispvm_allowed property ... Speciffy whether DispVM can be created from this AppVM Fixes QubesOS/qubes-issues#2075	2017-04-06 15:43:01 +02:00
Marek Marczykowski-Górecki	e4e92b06af	dispvm: don't load separate Qubes() instance when handling DispVM ... This will not work in qubesd, where there is one and only Qubes() instance.	2017-04-06 15:43:01 +02:00
Wojtek Porczyk	3bc4ec1e98	add mock libvirtaio module + pylint fixes	2017-04-05 17:06:45 +02:00
Wojtek Porczyk	64d358562b	qubes: revert async def, use @asyncio.coroutine ... Current pylint (any released version) stumbles on async def'ined functions. Let's use @asyncio.coroutines for now. Seems like python-3.5 is not that mature yet. QubesOS/qubes-issues#2622 QubesOS/qubes-issues#2738 PyCQA/pylint#1126	2017-04-05 17:05:52 +02:00
Wojtek Porczyk	78693c265c	qubes/vm/qubesvm: rework QubesVM.run*() methods ... 0) All those methods are now awaitable rather than synchronous. 1) The base method is run_service(). The method run() was rewritten using run_service('qubes.VMShell', input=...). There is no provision for running plain commands. 2) Get rid of passio*= arguments. If you'd like to get another return value, use another method. It's as simple as that. See: - run_service_for_stdio() - run_for_stdio() Also gone are wait= and localcmd= arguments. They are of no use inside qubesd. 3) The qvm-run tool and tests are left behind for now and will be fixed later. This is because they also need event loop, which is not implemented yet. fixes QubesOS/qubes-issues#1900 QubesOS/qubes-issues#2622	2017-04-05 17:05:22 +02:00
Wojtek Porczyk	a520e8d768	qubes/mgmt: add missing events for permission for lifecycle ... Thanks @marmarek for spotting this. QubesOS/qubes-issues#2622	2017-04-05 16:36:54 +02:00
Wojtek Porczyk	c437f40284	qubes/mgmt: lifecycle and class listing ... - mgmt.vmclass.List - mgmt.vm.Start - mgmt.vm.Shutdown - mgmt.vm.Pause - mgmt.vm.Unpause - mgmt.vm.Kill QubesOS/qubes-issues#2622	2017-04-03 21:55:01 +02:00
Wojtek Porczyk	c4ef02c377	qubes/mgmt: explicit method decorator and misc improvements ... - Get rid of @not_in_api, exchange for explicit @api() decorator. - Old @no_payload decorator becomes an argument (keyword-only). - Factor out AbstractQubesMgmt class to be a base class for other mgmt backends. - Use async def instead of @asyncio.coroutine. QubesOS/qubes-issues#2622	2017-04-03 21:55:01 +02:00
Wojtek Porczyk	1b9479837a	Merge remote-tracking branch 'marmarek/core3-mgmt-methods1' into core3-devel ... Conflicts: qubes/mgmt.py	2017-04-01 18:33:54 +02:00
Marek Marczykowski-Górecki	3388054eae	mgmt: move property value sanitization to property definition ... This also means we don't check if a VM with given name (in case of VMProperty) exists in the system, at this stage. But this is ok, lets not duplicate work of property setter. QubesOS/qubes-issues#2622	2017-03-31 11:55:24 +02:00
Wojtek Porczyk	cce809c2cb	qubes/vm/qubesvm: async def start ... QubesOS/qubes-issues#2622	2017-03-30 23:04:55 +02:00
Marek Marczykowski-Górecki	ce3bedbf2c	vm: move validate_name to qubes/vm ... This will be needed by VMProperty class in the next commit. QubesOS/qubes-issues#2622	2017-03-28 21:04:05 +02:00
Marek Marczykowski-Górecki	ad456a3387	mgmt: minor adjustments ... per @woju review QubesOS/qubes-issues#2622	2017-03-28 20:59:55 +02:00
Wojtek Porczyk	8e3621c4e5	Move libviraio to core-libvirt, may be upstreamed ... QubesOS/qubes-issues#2622	2017-03-22 15:30:55 +01:00
Marek Marczykowski-Górecki	2c115bb648	mgmt: allow functions to return None if no data is to be returned ... Don't force `return ''` everywhere. QubesOS/qubes-issues#2622	2017-03-17 12:49:28 +01:00
Marek Marczykowski-Górecki	f93674de1a	mgmt: drop ProtocolRepr ... Since we've added type= argument to property.Get format, it isn't useful anymore. QubesOS/qubes-issues#2622	2017-03-16 21:10:06 +01:00
Marek Marczykowski-Górecki	d21f54887d	mgmt: add decorator for method calls not accepting payload ... Fixes QubesOS/qubes-issues#2687	2017-03-16 20:21:11 +01:00
Marek Marczykowski-Górecki	8371ffcd0f	tests: storage and labels ... QubesOS/qubes-issues#2622	2017-03-16 20:04:07 +01:00
Marek Marczykowski-Górecki	2a223811a5	tests: add missing import	2017-03-16 20:04:06 +01:00
Marek Marczykowski-Górecki	f1c8f3220d	tests: deal with events containing dict in kwargs ... If kwargs contains dict as one of values, it isn't hashable and can't be used as value in frozenset/tuple. Convert such values into frozenset(dict.items()). Only one (more) level is supported, but it should be enough. Solution from http://stackoverflow.com/a/13264725	2017-03-16 20:04:06 +01:00
Marek Marczykowski-Górecki	beaa0e9348	tests/mgmt: check if argument/payload is rejected when should be ... Instead of creating such tests for each method separately, use unittest subTest functionality to handle all of them at once.	2017-03-16 20:04:06 +01:00
Marek Marczykowski-Górecki	944bb26369	tests/mgmt: VM property related functions	2017-03-16 20:04:05 +01:00
Marek Marczykowski-Górecki	35d1167893	qubes/vm/net: fix name of argument for property-del event handler ... Since enforcing keyword arguments for event handlers, it's important now.	2017-03-16 20:04:05 +01:00
Marek Marczykowski-Górecki	32f6bc2cd9	qubes/app: fix notifying about default_netvm change ... Notify every VM that is affected, not only those providing network itself.	2017-03-16 20:04:05 +01:00
Marek Marczykowski-Górecki	2c4303efc4	Prefer qubes.exc.QubesValueError over ValueError ... This provide clearer information for UI.	2017-03-16 20:04:05 +01:00
Marek Marczykowski-Górecki	010d40dc1e	mgmt: add label-related calls ... QubesOS/qubes-issues#2622	2017-03-16 20:04:04 +01:00
Marek Marczykowski-Górecki	33f3fedca1	mgmt: save qubes.xml after config-modifying calls ... In theory any call could modify config (through events), but lets keep writes to qubes.xml low. In any case, qubes.xml will be eventually written (either at next config-modifying call, or daemon exit).	2017-03-16 20:04:04 +01:00
Marek Marczykowski-Górecki	868dbeac3e	mgmt: implement mgmt.vm.property.Set ... Sanitization of input value is tricky here, and also very important at the same time. If property define value type (and it's something more specific than 'str'), use that. Otherwise allow only printable ASCII characters, and let appropriate event and setter handle value. At this point I've reviewed all QubesVM properties in this category and added appropriate setters where needed. QubesOS/qubes-issues#2622	2017-03-16 20:04:03 +01:00
Marek Marczykowski-Górecki	da51e6f032	vm/qubesvm: add validator for default_user property ... Don't allow characters potentially interfering with qrexec. To be on the safe side, allow only alphanumeric characters + very few selected punctuations.	2017-03-16 20:04:03 +01:00
Marek Marczykowski-Górecki	0f8fab088e	vm/qubesvm: remove pool_name property ... It isn't used anywhere - in core3 each storage volume have pool assigned - which may be different for each volume.	2017-03-16 20:04:03 +01:00
Marek Marczykowski-Górecki	2d2672ec58	vm/qubesvm: convert firewall_conf into dumb, read-only property ... Don't allow anything else than firewall.xml.	2017-03-16 20:04:03 +01:00
Marek Marczykowski-Górecki	123feced36	vm/qubesvm: forbid '/' in kernel property ... It would give VM access to some files outside of /var/lib/qubes/vm-kernels.	2017-03-16 20:04:02 +01:00
Marek Marczykowski-Górecki	a036e2a8a0	vm/qubesvm: improve name property setter ... Split it into two functions: validate_name - context-less verification, and actual _setter_name which perform additional verification in context of actual VM. Switch to qubes.exc.* exceptions where appropriate.	2017-03-16 20:04:02 +01:00
Marek Marczykowski-Górecki	dbf2066dfd	mgmt: encode property type in property.Get ... This also require having property.type public. QubesOS/qubes-issues#2622	2017-03-16 20:04:02 +01:00
Marek Marczykowski-Górecki	3b36e92b6d	vm/qubesvm: fix few more keyword arguments for events	2017-03-16 20:04:02 +01:00
Marek Marczykowski-Górecki	772293d0b5	vm/qubesvm: define 'updateable' as qubes.property ... This will allow property being accessed through management API	2017-03-16 20:04:01 +01:00
Marek Marczykowski-Górecki	f7eabf8eb0	tools/qubesd: do not close connection before sending response ... eof_received callback should return True, if connection should not be automatically closed just after returning from it.	2017-03-16 20:04:01 +01:00
Marek Marczykowski-Górecki	c41585e2f5	Initialize dom0 label ... It is required property. Additionally, define icon_path to None, otherwise it tries to access dom0.dir_path, which isn't set.	2017-03-16 20:04:01 +01:00
Marek Marczykowski-Górecki	10a07c8726	mgmt: allow vm.List call to a particular VM ... This allow getting info about a single VM. QubesOS/qubes-issues#853	2017-03-16 20:04:01 +01:00
Marek Marczykowski-Górecki	fb7bd6823a	mgmt: implement storage-related methods ... QubesOS/qubes-issues#2622	2017-03-16 20:04:01 +01:00
Wojtek Porczyk	80807fb872	qubes/libvirtaio: document and prepare for upstream ... QubesOS/qubes-issues#2622	2017-03-16 15:21:16 +01:00
Wojtek Porczyk	a5c59a5075	qubes/mgmt: Drop custom repr ... QubesOS/qubes-issues#2622	2017-03-13 22:00:15 +01:00
Wojtek Porczyk	93153da893	Add documentation for mgmt ... QubesOS/qubes-issues#2622	2017-03-13 21:51:52 +01:00
Wojtek Porczyk	417cb6e912	qubes/vm/mix/net: fix event arguments ... Arguments to events are now keyword-only and require exact names.	2017-03-06 17:20:57 +01:00
Wojtek Porczyk	4a247b1b1b	Merge remote-tracking branch 'origin/pull/90/head' into core3-devel	2017-03-02 13:19:57 +01:00
Marek Marczykowski-Górecki	f7d73893d7	qubes/storage: py3k related fixes	2017-03-01 21:50:06 +01:00
Wojtek Porczyk	c2a0d34ade	pylint: do not interpret asyncio.ensure_future compat hack	2017-03-01 18:30:49 +01:00
Wojtek Porczyk	865ab10a0c	qubesd+mgmt: convert mgmt functions to coroutines ... QubesOS/qubes-issues#2622	2017-03-01 17:31:37 +01:00
Marek Marczykowski-Górecki	3e0f225938	qubes: allow 'property' object comparing with str ... This will allow checking if a given name is valid property name, using simple `name in vm.property_list()`. QubesOS/qubes-issues#853	2017-02-27 21:57:56 +01:00
Marek Marczykowski-Górecki	2169075807	qubesd: fix response message header ... Type is not 16 bit big-endian. Encode it as 8bit code and \x00 as delimiter explicitly. QubesOS/qubes-issues#853	2017-02-27 21:43:14 +01:00
Marek Marczykowski-Górecki	6ab7032b11	qubes/mgmt: encode VM name without quotes ... That's how it is in the specification. QubesOS/qubes-issues#853	2017-02-27 21:42:30 +01:00
Marek Marczykowski-Górecki	f4616fc366	qubesd: make qubesd socket qubes-group owned ... QubesOS/qubes-issues#853	2017-02-27 21:42:06 +01:00
Marek Marczykowski-Górecki	c454973596	qubes/mgmt: use keyword arguments in events ... QubesOS/qubes-issues#853	2017-02-27 20:56:16 +01:00
Marek Marczykowski-Górecki	751415434c	backup: make hmac verification more defensive ... Check HMAC file size, read it as binary or with 'ascii' encoding only.	2017-02-27 02:37:52 +01:00
Marek Marczykowski-Górecki	a6c7da6061	tests: be even more defensive on cleaning up VMs ... Don't fail even if qubes-test.xml do not load at all because of syntax error - for example empty file.	2017-02-27 02:37:52 +01:00
Marek Marczykowski-Górecki	45709b510a	backup: minor fixes after bringing back scrypt support	2017-02-27 02:37:51 +01:00
Marek Marczykowski-Górecki	1363251438	Revert "Revert "backup: use 'scrypt' tool for backup encryption and integrity protection"" ... This reverts commit 0f1672dc63. Bring it back. Lets not revert the whole feature just because required package exists only in qubes-builder, not in some online repository. Also, this revert didn't go as planned - there was a reference to a 'passphrase' local variable, but it wasn't assigned any value. Cc: @woju	2017-02-27 02:37:50 +01:00
Marek Marczykowski-Górecki	13fc810363	tests: some more fixes for core3 API	2017-02-27 02:37:50 +01:00
Marek Marczykowski-Górecki	3ecc0a9bcb	tests: improve devices API unit test ... Check fired events - inspired by qvm-device test.	2017-02-27 02:37:50 +01:00
Marek Marczykowski-Górecki	7f2ca33774	tests: fix importing template in non-default pool	2017-02-27 02:37:50 +01:00
Marek Marczykowski-Górecki	3726c7d9c3	python: decode xrandr output earlier, don't use regexp on bytes	2017-02-27 02:37:49 +01:00
Marek Marczykowski-Górecki	5e43d26abd	qubes: unify property ordering ... We already have property ordering defined in property_list(), lets move it to proper place: property.__lt__.	2017-02-27 02:37:49 +01:00
Marek Marczykowski-Górecki	9ace4e66f1	tests: more py3k related fixes	2017-02-27 02:37:49 +01:00
Marek Marczykowski-Górecki	33416f2549	qmemman: update for py3k ... This just make the code compatible with py3k, but nothing more. Converting to asyncio is probably the next step.	2017-02-27 02:37:49 +01:00
Marek Marczykowski-Górecki	2c3e112951	backup: one more py3k related fix	2017-02-27 02:37:48 +01:00
Marek Marczykowski-Górecki	e52d8fb051	qubes: allow passing name of class to app.add_new_vm ... This will allow more flexible API usage, especially when using mgmt API - we need to use VM type as string there. We don't lose any flexibility here - VM class names needs to be uniquely identified by a string (used in qubes.xml) anyway.	2017-02-27 02:37:48 +01:00
Marek Marczykowski-Górecki	cae68f64ca	tests: just one more test in vm_qrexec_gui to core3 API	2017-02-27 02:37:48 +01:00
Marek Marczykowski-Górecki	3f29345d32	tests/storage: read-only volume should not have save_on_stop=True	2017-02-27 02:37:48 +01:00
Marek Marczykowski-Górecki	5ee05e06e5	qubes/core2migration: update locking API ... Sync with 0141e1a "qubes/app: Allow keeping lock after load"	2017-02-27 02:37:47 +01:00
Marek Marczykowski-Górecki	570cbe5225	qubes: py3k related fixes	2017-02-27 02:37:45 +01:00
Marek Marczykowski-Górecki	9c5c70fe25	qubes/backup: py3k related fixes ... - str/bytes usage - functools.reduce - dict.items instead of dict.iteritems etc	2017-02-27 02:35:50 +01:00
Marek Marczykowski-Górecki	f2a1687879	typos in comments	2017-02-27 02:35:49 +01:00
Marek Marczykowski-Górecki	9cad353939	tests: py3k related fixes - bytes/str ... Adjust usage of bytes vs str type.	2017-02-27 02:35:49 +01:00
Marek Marczykowski-Górecki	d68499f17f	qubes: add property ordering	2017-02-27 02:35:49 +01:00
Wojtek Porczyk	be53db4db9	qubes/events: they accept only keyword arguments ... Positional arguments are hereby deprecated, with immediate effect. QubesOS/qubes-issues#2622	2017-02-21 14:46:42 +01:00
Wojtek Porczyk	48f10a79c9	qubes/tools/qubesd: add response header ... QubesOS/qubes-issues#2622	2017-02-21 14:46:42 +01:00
Wojtek Porczyk	25d81b8ab6	Merge remote-tracking branch 'origin/pull/88/head' into core3-devel	2017-02-15 12:17:41 +01:00
Marek Marczykowski-Górecki	e50b17a6b3	tools/qvm-features: make pylint happy ... reduce number of return statements.	2017-02-15 00:01:33 +01:00
Marek Marczykowski-Górecki	a317e81d7e	qubes/ext/gui: adjust shm.id path ... It's moved to /var/run/qubes and now is built based on $DISPLAY.	2017-02-15 00:01:33 +01:00
Marek Marczykowski-Górecki	bd9300b38e	tests: copy pool configuration into qubes-test.xml ... If template choosen for the tests is installed in non-default storage pool, this pool also needs to be imported into qubes-test.xml.	2017-02-15 00:01:33 +01:00
Marek Marczykowski-Górecki	0c43329188	tools/qvm-features: fix handling empty list of features	2017-02-15 00:01:33 +01:00
Marek Marczykowski-Górecki	98edc9779c	tools/qvm-features: fix domain argument handling ... It's args.domains[0], not args.vm.	2017-02-15 00:01:33 +01:00
Marek Marczykowski-Górecki	c3fc4062d8	tests: add basic test for qvm-features	2017-02-15 00:01:33 +01:00
Marek Marczykowski-Górecki	bcab92ee64	qubes/vm: make sure to close qmemman socket after failed startup ... If qmemman socket isn't closed, it will block other VM startups.	2017-02-14 23:59:07 +01:00
Marek Marczykowski-Górecki	01aedb7f18	storage: fix handling snap_on_start=True file volumes ... Use the right cow image and apply the second layer to provide read-write access. The correct setup is: - base image + base cow -> read-only snapshot (base changes "cached" until committed) - read-only snapshot + VM cow -> read-write snapshot (changes discarded after VM shutdown) This way, even VM without Qubes-specific startup scripts will can benefit from Template VMs, while VMs with Qubes-specific startup scripts may still see original root.img content (for possible signature verification, when storage domain got implemented). QubesOS/qubes-issues#2256	2017-02-14 23:59:07 +01:00
Marek Marczykowski-Górecki	48f78dfbc8	tests: check if snap_on_start=True volumes are not persistent ... Content should be reset back to base volume at each VM startup. Disposable VMs depend on this behaviour. QubesOS/qubes-issues#2256	2017-02-14 23:59:07 +01:00
Wojtek Porczyk	8e678c0172	qubes/mgmt: mgmt.vm.property.Reset ... QubesOS/qubes-issues#2622	2017-02-14 11:37:17 +01:00
Wojtek Porczyk	ada0437f52	qubes/mgmt: mgmt.vm.property.Help ... QubesOS/qubes-issues#2622	2017-02-13 21:28:27 +01:00
Wojtek Porczyk	e8a5bc9b36	qubesd: improve exception handling ... QubesOS/qubes-issues#2622	2017-02-10 23:25:45 +01:00
Wojtek Porczyk	249d8c08e2	qubes/tools/qubesd-query: low-level interrogation tool	2017-02-10 23:25:45 +01:00
Wojtek Porczyk	02639b8d02	qubes/mgmt: mgmt.vm.property.List ... QubesOS/qubes-issues#2622	2017-02-10 22:55:53 +01:00
Wojtek Porczyk	c12fc744a2	qubes/mgmt: move mgmt api to separate module ... QubesOS/qubes-issues#2622	2017-02-09 23:29:05 +01:00
Wojtek Porczyk	5d455ac3c4	misc pylint fixes related to qubesd	2017-02-08 15:37:39 +01:00
Wojtek Porczyk	0be3b1fbb1	qubes/tools/qubesd: initial version	2017-02-07 17:07:53 +01:00
Wojtek Porczyk	1be75d9c83	misc python3 fixes	2017-02-07 17:07:52 +01:00
Wojtek Porczyk	d74567d65f	qubes: port core to python3 ... fixes QubesOS/qubes-issues#2074	2017-01-20 16:42:51 +01:00
Wojtek Porczyk	0f1672dc63	Revert "backup: use 'scrypt' tool for backup encryption and integrity protection" ... This reverts commit 418d749680. Package `scrypt` is currently not installable (not present in any repo). Cc: @marmarek	2016-12-05 18:36:13 +01:00
Wojtek Porczyk	25912f5787	qubes/tools: add qvm-tags ... QubesOS/qubes-issues#865	2016-12-02 14:17:09 +01:00
Wojtek Porczyk	5f436360f7	qubes/app: Fix create_empty_store signature ... QubesOS/qubes-issues#1729	2016-11-30 18:34:11 +01:00
Wojtek Porczyk	68ad60c1b3	Merge remote-tracking branch 'origin/master' into core3-devel ... Conflicts: core/qubes.py doc/Makefile doc/manpages/qvm-prefs.rst doc/qvm-tools/qvm-add-appvm.rst doc/qvm-tools/qvm-backup-restore.rst doc/qvm-tools/qvm-backup.rst doc/qvm-tools/qvm-block.rst doc/qvm-tools/qvm-clone.rst doc/qvm-tools/qvm-firewall.rst doc/qvm-tools/qvm-ls.rst doc/qvm-tools/qvm-pci.rst doc/qvm-tools/qvm-run.rst doc/qvm-tools/qvm-shutdown.rst doc/qvm-tools/qvm-start.rst doc/qvm-tools/qvm-template-commit.rst qvm-tools/qvm-ls qvm-tools/qvm-prefs qvm-tools/qvm-remove tests/__init__.py vm-config/xen-vm-template.xml	2016-11-30 03:07:39 +01:00
Marek Marczykowski-Górecki	8f443547fb	qubes/vm: disconnect from old QubesDB when going to start new instance ... QubesDB daemon no longer remove socket created by new instance, so one part of VM restart race condition is solved. The only remaining part is to ensure that we really connect to the new instance, instead of talking to the old one (soon to be terminated). Fixes QubesOS/qubes-issues#1694	2016-11-26 04:09:00 +01:00
Marek Marczykowski-Górecki	3b209515c2	qubes/vm/dispvm: don't crash when DispVM is already killed ... This is regression of QubesOS/qubes-issues#1660 Fixes QubesOS/qubes-issues#1660	2016-11-26 04:09:00 +01:00
Marek Marczykowski-Górecki	6ff836dfa4	qubes/log: add FD_CLOEXEC to log files ... Don't leak log file descriptors. At least 'lvm' complains. QubesOS/qubes-issues#2412	2016-11-26 04:08:59 +01:00
Marek Marczykowski-Górecki	210cb65d1c	qubes/tools: drop requirement of qubes-prefs --force-root ... None of properties set there do any "dangerous thing" for filesystem permissions (at least for now), so do not require it. This is mostly to keep compatibility with %post rpm scripts (kernel-qubes-vm at least). QubesOS/qubes-issues#2412	2016-11-26 04:08:59 +01:00
Marek Marczykowski-Górecki	a318d5cea9	Don't fail on DBus connection error or opening log ... Especially in offline mode - like during installation, tests etc. QubesOS/qubes-issues#2412	2016-11-26 04:08:59 +01:00
Marek Marczykowski-Górecki	02a0713665	qubes/tools: better handle qvm-template-postprocess called as root ... This tool by design is called as root, so try to: - switch to normal user if possible - fix file permissions afterwards - if not QubesOS/qubes-issues#2412	2016-11-26 04:08:58 +01:00
Marek Marczykowski-Górecki	28d4feb0d0	qubes: fix network-related functions ... - cleanup_vifs crash when non-networked VM is running - type error in get_vms_connected_to (store VM objects, not qid)	2016-11-26 04:08:58 +01:00
Marek Marczykowski-Górecki	e85b0663f6	tools: fire 'template-postinstall' event for extensions ... Allow extensions to finish template setup. This include retrieving appmenus, settings defaults etc. QubesOS/qubes-issues#2412	2016-11-26 04:08:58 +01:00
Marek Marczykowski-Górecki	0041063b8e	qubes/config: set default labels ... There was a comment '# Set later', but actually values were never set. This break adding just installed template (qvm-template-postprocess). QubesOS/qubes-issues#2412	2016-11-26 04:08:57 +01:00
Marek Marczykowski-Górecki	c4e85a81fb	qubes/app: automatically enable offline mode when running in chroot ... Do not spray --offline-mode over every installer-related script. QubesOS/qubes-issues#2412	2016-11-26 04:08:50 +01:00
Marek Marczykowski-Górecki	d8a1216daf	Fix qubes-create in offline mode ... QubesOS/qubes-issues#2412	2016-11-26 04:08:09 +01:00
Marek Marczykowski-Górecki	5e15db4176	qubes/tools: accept qvm-start --no-guid ... Lets keep compatibility with older scripts. QubesOS/qubes-issues#2412	2016-11-26 04:08:08 +01:00
Marek Marczykowski-Górecki	964955758c	qubes/app: create 'default' storage pool as LVM when present ... When system is installed with LVM thin pool, it should be used by default. But lets keep file-based on for /var/lib/qubes for some corner cases, migration etc. QubesOS/qubes-issues#2412	2016-11-26 04:08:08 +01:00
Marek Marczykowski-Górecki	badc58837a	Add qvm-template-postprocess tool ... This is intended to call to finish template installation/removal. Template RPM package is basically container for root.img, nothing more. Other parts needs to be generated after root.img extraction. Previously it was open coded in rpm post-install script, but lets keep it as qvm tool to ease supporting multiple version in template builder QubesOS/qubes-issues#2412	2016-11-26 04:08:08 +01:00
Marek Marczykowski-Górecki	1418555346	qubes/vm: don't fail on removing VM without files ... VM files may be already removed. Don't fail on this while removing a VM, it's probably the reason why domain is being removed. qvm-remove tool have its own guard for this, but it isn't enough - if rmtree(dir_path) fails, storage.remove() would not be called, so non-file storages would not be cleaned up. This is also needed to correctly handle template reinstallation - where VM directory is moved away to call create_on_disk again. QubesOS/qubes-issues#2412	2016-11-26 04:08:07 +01:00
Marek Marczykowski-Górecki	cc440c62f6	qubes/tools: accept properties with '-' ... '-' is invalid character in python identifier, so all the properties have '_'. But in previous versions qvm-* tools accepted names with '-', so lets not break this. QubesOS/qubes-issues#2412	2016-11-26 04:08:07 +01:00
Marek Marczykowski-Górecki	880566a387	qubes/tools: do not reject --set/--get in *-prefs tools ... Those options are no longer needed, but lets not reject them to preserve compatibility with older scripts QubesOS/qubes-issues#2412	2016-11-26 04:08:07 +01:00
Marek Marczykowski-Górecki	91727389c4	qubes/log: ensure logs are group writable ... /var/log/qubes directory have setgid set, so all the files will be owned by qubes group (that's ok), but there is no enforcement of creating it group writable, which undermine group ownership (logs created by root would not be writable by normal user) QubesOS/qubes-issues#2412	2016-11-26 04:08:07 +01:00
Marek Marczykowski-Górecki	80c0093c77	qubes/tools/qubes-create: reject overriding existing qubes.xml ... If someone really want do to this, need to manually remove the file first. QubesOS/qubes-issues#2412	2016-11-26 04:08:06 +01:00
Marek Marczykowski-Górecki	c08766e157	qubes/features: rename 'services/ntpd' to 'service/ntpd' ... It makes much more sense to use singular form here - ntpd is a single service.	2016-11-26 04:08:06 +01:00
Wojtek Porczyk	2b0ad51b18	Merge remote-tracking branch 'origin/pull/68/head' into core3-devel	2016-11-15 17:41:47 +01:00
Wojtek Porczyk	37bfd0d2a3	Merge remote-tracking branch 'marmarek/core3-fake-ip' into core3-devel	2016-11-15 17:40:30 +01:00
Wojtek Porczyk	a4d50409df	Merge remote-tracking branch 'marmarek/core3-storage-fixes' into core3-devel	2016-11-15 17:36:53 +01:00