Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
2,256 Commits 1 Branch 0 Tags 15 MiB
93162df677
Commit Graph

1188 Commits

Author SHA1 Message Date
Marek Marczykowski
fefb6d9cff vm+dom0/filecopy-unpacker: send errors to qfile-agent istead of local message (#239) 
Because unpacker no longer require GUI access, there is no need for separate
process for error reporting. Which greatly simplify the code.
 2012-08-25 02:09:45 +02:00
Marek Marczykowski
c0455ac641 Merge branch 'master' into hvm 
Conflicts:
	dom0/qvm-tools/qvm-create
	version_dom0
 2012-08-23 11:11:59 +02:00
Marek Marczykowski
1cd3ef3456 dom0/qvm-tools: catch exceptions while settting VM name (#656) 2012-08-23 04:02:50 +02:00
Marek Marczykowski
536eb00b9c dom0/core: verify VM name for not-allowed characters (#656) 2012-08-23 04:01:55 +02:00
Marek Marczykowski
b7f5c6ac0b dom0/qvm-tools: catch exceptions while settting VM name (#656) 2012-08-23 03:48:03 +02:00
Marek Marczykowski
85565af560 dom0/core: verify VM name for not-allowed characters (#656) 2012-08-23 03:45:06 +02:00
Marek Marczykowski
cc23d3cb3d dom0/qubes_rpc: mark untrusted variables (#654) 2012-08-16 16:56:55 +02:00
Marek Marczykowski
26fca20d45 dom0/qmemman: fix reporting to qubes-manager 
When VM is shutting down, xenstore entries (especially 'name') can be deleted
before qmemman remove VM from its list. So check if name is defined before
reporting to qubes-manager.
 2012-08-16 16:56:55 +02:00
Marek Marczykowski
9b3a77bc1d dom0: move RPC services to separate directory (#654) 
This makes more clear which code have contact with untrusted data from VM.
 2012-08-16 16:56:16 +02:00
Marek Marczykowski
a67bf1f1c0 Merge branch 'master' into hvm 2012-08-06 15:00:02 +02:00
Marek Marczykowski
4f56cf420a dom0/core: add missing "cleanup_dispvms" file (#648) 2012-08-06 14:57:30 +02:00
Marek Marczykowski
e1404a2d4f dom0/qvm-run: do not break --all when run in one VM failed 2012-08-04 04:15:33 +02:00
Marek Marczykowski
fa17c541af dom0: cleanup dead DispVMs at system startup (#648) 2012-08-04 00:57:34 +02:00
Marek Marczykowski
7677854fd2 dom0/core: make verbose parameter of create_appmenus optional 2012-08-04 00:37:14 +02:00
Marek Marczykowski
847fe81dcd dom0/qvm-run: do not break --all when run in one VM failed 2012-08-01 01:01:37 +02:00
Marek Marczykowski
e6c8bf81fd Merge branch 'master' into hvm 
Conflicts:
	version_dom0
 2012-08-01 00:55:05 +02:00
Marek Marczykowski
a680976f1e dom0/updates: show errors from qubes-receive-updates 
Especially when signature verification failed, show message about it, not
enigmatic "Could not open/read
file:///var/lib/qubes/updates/repodata/repomd.xml"
 2012-07-30 23:16:05 +02:00
Marek Marczykowski
4ffe3e0391 dom0/qvm-block: fix error handler 2012-07-30 23:16:05 +02:00
Marek Marczykowski
c2d4b0de62 dom0/updates: typo fix in qubes-manager statfile handling 2012-07-30 23:16:05 +02:00
Marek Marczykowski
be389bddb9 dom0/core: allow custom kernel for non-updateable VMs 2012-07-28 01:40:24 +02:00
Marek Marczykowski
500baf3a60 dom0/core: allow custom kernel for non-updateable VMs 2012-07-28 01:39:59 +02:00
Marek Marczykowski
18c9af90c7 dom0/core: fix qubes-session wait code 2012-07-28 00:55:12 +02:00
Marek Marczykowski
4b9cc1e405 dom0/core: fix qubes-session wait code 2012-07-28 00:51:19 +02:00
Marek Marczykowski
d1b827e1bd Merge branch 'master' into hvm 
Conflicts:
	dom0/init.d/qubes_core
	rpm_spec/core-dom0.spec
	version_dom0
 2012-07-25 02:52:00 +02:00
Marek Marczykowski
ad7da49e74 dom0/core: remove ugly hack in network-reconnect code (#637) 2012-07-22 01:33:08 +02:00
Marek Marczykowski
6da61af323 dom0/backup-restore: fix netvm field in summary 2012-07-21 00:12:18 +02:00
Marek Marczykowski
a97458ad08 dom0/core: do not reset firewall on clone_attrs 2012-07-20 22:55:28 +02:00
Marek Marczykowski
dc95349145 dom0/backup-restore: fix verification of VMs in backup 2012-07-20 22:55:28 +02:00
Marek Marczykowski
e7477cfaf2 dom0/core: minor comments improvements 2012-07-20 22:55:28 +02:00
Marek Marczykowski
dbbb168b66 dom0/core: improve diagnostics of qmemman errors 2012-07-20 22:55:17 +02:00
Marek Marczykowski
130873071f dom0/core: do not reset firewall on clone_attrs 2012-07-20 22:54:53 +02:00
Marek Marczykowski
7f9d77b27e dom0/backup-restore: fix verification of VMs in backup 2012-07-20 22:54:12 +02:00
Marek Marczykowski
ea02bee444 dom0/core: minor comments improvements 2012-07-20 22:53:14 +02:00
Marek Marczykowski
abefe78197 dom0/core: improve diagnostics of qmemman errors 2012-07-20 16:49:19 +02:00
Marek Marczykowski
5ea32bd11b dom0/meminfo-writer: fork into background after first info sent to qmemman (#635) 2012-07-20 16:42:12 +02:00
Marek Marczykowski
148e5e55f7 dom0/qmemman: fork into background after daemon initialization (#635) 
Parse config and setup socket before fork.
 2012-07-20 16:42:11 +02:00
Marek Marczykowski
59a1fb96db dom0/meminfo-writer: fork into background after first info sent to qmemman (#635) 2012-07-20 16:41:26 +02:00
Marek Marczykowski
c2d20e59d0 dom0/qmemman: fork into background after daemon initialization (#635) 
Parse config and setup socket before fork.
 2012-07-20 16:32:17 +02:00
Marek Marczykowski
ba568ed3e9 dom0/core: use generic run() to wait for qubes-session 
Especially use 'ignore_stderr' feature.
 2012-07-20 13:17:37 +02:00
Marek Marczykowski
273032bfae dom0: add missing file 2012-07-20 13:09:20 +02:00
Marek Marczykowski
d5dbbd41cb dom0/qvm-tools: add missing imports 2012-07-20 13:09:07 +02:00
Marek Marczykowski
f98bf1d570 dom0: fix dirs permissions after xen upgrade 2012-07-20 13:08:18 +02:00
Marek Marczykowski
7071bf62bc dom0/core: use generic run() to wait for qubes-session 
Especially use 'ignore_stderr' feature.
 2012-07-20 13:06:26 +02:00
Marek Marczykowski
2ddd48f8e4 dom0/core: disable dynamic memory when VM have PCI devices assigned 2012-07-19 14:44:09 +02:00
Marek Marczykowski
406d233b6b dom0/core: disable dynamic memory when VM have PCI devices assigned 2012-07-19 14:43:24 +02:00
Marek Marczykowski
cfd95575dd dom0: add missing file 2012-07-18 22:22:52 +02:00
Marek Marczykowski
b321d16336 dom0/qvm-tools: add missing imports 2012-07-18 18:10:08 +02:00
Marek Marczykowski
38e8b85b06 dom0: fix dirs permissions after xen upgrade 2012-07-18 12:46:36 +02:00
Marek Marczykowski
4b92f6390a dom0/qvm-core: ignore stderr from VM commands when not needed for sure (#626) 
pam_systemd.so has a bug, which cause spurious '...killed' output on stderr.
 2012-07-16 13:36:08 +02:00
Marek Marczykowski
5637793fae dom0/qvm-core: ignore stderr from VM commands when not needed for sure (#626) 
pam_systemd.so has a bug, which cause spurious '...killed' output on stderr.
 2012-07-16 13:31:43 +02:00
Marek Marczykowski
712d122894 dom0: fix block-cleaner daemon 2012-07-15 19:48:36 +02:00
Marek Marczykowski
d9291ab2b4 dom0/appmenus: Rename dir entry for ServiceVMs (#627) 2012-07-15 02:41:23 +02:00
Marek Marczykowski
6c74db3aac dom0/qvm-sync-appmenus: use qubes.GetAppmenus service 2012-07-15 02:41:23 +02:00
Marek Marczykowski
1083fad626 dom0/core: remove duplicated remove_from_disk definition 2012-07-15 02:41:23 +02:00
Marek Marczykowski
c0ffdd6fa5 dom0/dom0-updates: remove updates-pending flag after update installation 2012-07-15 02:41:23 +02:00
Marek Marczykowski
0218ab0b2a dom0/core: remove appmenus when removing NetVM (#627) 2012-07-15 02:41:23 +02:00
Marek Marczykowski
b6b50b6fea dom0/appmenus: Rename dir entry for ServiceVMs (#627) 2012-07-15 02:26:17 +02:00
Marek Marczykowski
1009b1a46d dom0/qvm-sync-appmenus: use qubes.GetAppmenus service 2012-07-15 02:26:17 +02:00
Marek Marczykowski
08888fcf7a dom0/core: remove duplicated remove_from_disk definition 2012-07-14 16:07:35 +02:00
Marek Marczykowski
d156a815d2 dom0/dom0-updates: remove updates-pending flag after update installation 2012-07-14 15:55:46 +02:00
Marek Marczykowski
7fbeacc81b dom0/core: remove appmenus when removing NetVM (#627) 2012-07-14 15:12:41 +02:00
Marek Marczykowski
2c1201b4a9 dom0: call qrexec service while preparing NetVM for sleep (#617) 
Instead of hardcoded commands.
 2012-07-13 14:44:11 +02:00
Marek Marczykowski
32fbd5aefd dom0: call qrexec service while preparing NetVM for sleep (#617) 
Instead of hardcoded commands.
 2012-07-13 14:42:54 +02:00
Marek Marczykowski
8d8ce2de31 dom0/dispvm: by default use prerun script from inside of VM (#620) 2012-07-12 14:22:44 +02:00
Marek Marczykowski
4aab477f38 dom0/dispvm: by default use prerun script from inside of VM (#620) 2012-07-12 14:21:59 +02:00
Marek Marczykowski
b42e09e4ba dom0/qvm-tools: Warn the user when running qvm-tool as root is not recommended (#612) 2012-07-12 03:57:22 +02:00
Marek Marczykowski
342a190302 dom0/dispvm: notify when starting new DispVM (#616) 2012-07-12 03:56:09 +02:00
Marek Marczykowski
2c0d0dff8b dom0/qvm-sync-clock: string '\n' from date output 2012-07-12 03:56:09 +02:00
Marek Marczykowski
64a942eee8 dom0/dispvm: notify when starting new DispVM (#616) 2012-07-12 03:44:41 +02:00
Marek Marczykowski
ac76b7203f dom0/qvm-sync-clock: string '\n' from date output 2012-07-12 03:43:57 +02:00
Marek Marczykowski
ba81866b2f dom0/qvm-tools: Warn the user when running qvm-tool as root is not recommended (#612) 2012-07-11 23:53:23 +02:00
Marek Marczykowski
ee3cf6b583 dom0/qvm-block: fix error handling (#614) 2012-07-05 01:49:41 +02:00
Marek Marczykowski
64369bf02a dom0/qvm-run: Notify qubes-manager about failed VM start (#615) 2012-07-05 01:43:32 +02:00
Marek Marczykowski
e70b690150 dom0/qmemman: notify qubes-manager about misbehaving VMs (#615) 2012-07-05 01:43:32 +02:00
Marek Marczykowski
b4070a99a3 dom0/qmemman: check if donors have returned memory before distributing it to other VMs (#563) 
When some VM did't returned memory to Xen, mark this VM as suspicious and abort
balance to always have some xen free_memory margin.
VMs marked as suspicius will be evaluated before next balance and still didn't
returned memory, will be skipped in balance process.
 2012-07-05 01:43:32 +02:00
Marek Marczykowski
892a6bbc13 dom0/guihelpers: interface to notifying qubes-manager (#615) 2012-07-05 01:43:32 +02:00
Marek Marczykowski
421b13b6c4 dom0/qmemman: minor fix in mem_set() 
Set target/maxmem in more logical order (balloon driver can fail to balloon the
first time, but will retry anyway). Force sizes to be integers.
 2012-07-05 01:43:32 +02:00
Marek Marczykowski
897f981c8c dom0/qvm-run: Notify qubes-manager about failed VM start (#615) 2012-07-05 01:30:00 +02:00
Marek Marczykowski
27b6aa4378 dom0/qmemman: notify qubes-manager about misbehaving VMs (#615) 2012-07-05 01:29:45 +02:00
Marek Marczykowski
3ce68def8c dom0/qmemman: check if donors have returned memory before distributing it to other VMs (#563) 
When some VM did't returned memory to Xen, mark this VM as suspicious and abort
balance to always have some xen free_memory margin.
VMs marked as suspicius will be evaluated before next balance and still didn't
returned memory, will be skipped in balance process.
 2012-07-05 01:29:45 +02:00
Marek Marczykowski
eb3da24aa4 dom0/guihelpers: interface to notifying qubes-manager (#615) 2012-07-05 01:29:45 +02:00
Marek Marczykowski
30ff420b52 dom0/qmemman: minor fix in mem_set() 
Set target/maxmem in more logical order (balloon driver can fail to balloon the
first time, but will retry anyway). Force sizes to be integers.
 2012-07-05 01:29:45 +02:00
Marek Marczykowski
2b452c9970 dom0/qmemman: remove trainling spaces 2012-07-05 01:29:45 +02:00
Marek Marczykowski
11ab37b9ff dom0/qvm-block: fix error handling (#614) 2012-06-30 00:58:06 +02:00
Marek Marczykowski
2854f08bca dom0/core: fix the last merge... 
Remove duplicated lines by faulty conflict resolution.
 2012-06-28 12:28:14 +02:00
Marek Marczykowski
41efe076b2 dom0/core: typo fix in clone_disk_files (#608) 2012-06-28 11:37:18 +02:00
Marek Marczykowski
50dc086682 dom0/core: typo fix in clone_disk_files (#608) 2012-06-26 11:05:03 +02:00
Marek Marczykowski
44767bea7f Merge branch 'master' into hvm 
Conflicts:
	dom0/init.d/qubes_core
	dom0/qvm-core/qubes.py
	dom0/qvm-tools/qvm-prefs
	version_dom0
	version_vm
 2012-06-26 03:49:10 +02:00
Marek Marczykowski
bf9b63e06f dom0/qmemman: allow balance when xen have low free memory (#563) 2012-06-26 03:43:36 +02:00
Marek Marczykowski
2e7d5cc178 dom0: appmenu to start Firefox in new DispVM (#594) 2012-06-26 03:43:36 +02:00
Marek Marczykowski
29e3593a02 dom0/qmemman: allow balance when xen have low free memory (#563) 2012-06-26 00:26:53 +02:00
Marek Marczykowski
0008e71784 dom0: appmenu to start Firefox in new DispVM (#594) 2012-06-24 14:09:43 +02:00
Marek Marczykowski
ad7d6957b1 dom0/updates: clean yum cache as root (#540) 
Actually looks like this solve problem, don't know why (cleaning as user
didn't returned any error).
 2012-06-23 00:37:47 +02:00
Marek Marczykowski
89aaa60753 dom0: use RPC service to sync clock via NTP (#603) 2012-06-23 00:37:47 +02:00
Marek Marczykowski
24352c3dce dom0: minor init.d script fix 2012-06-23 00:37:47 +02:00
Marek Marczykowski
be7c079705 dom0/updates: clean yum cache as root (#540) 
Actually looks like this solve problem, don't know why (cleaning as user
didn't returned any error).
 2012-06-22 23:44:05 +02:00
Marek Marczykowski
1dad96b0e9 dom0: use RPC service to sync clock via NTP (#603) 2012-06-22 22:23:17 +02:00
Marek Marczykowski
36f6a2c42c dom0: minor init.d script fix 2012-06-22 01:22:06 +02:00
Marek Marczykowski
ffa3d8732c dom0: use new qubes-manager appmenu applet (#548) 2012-06-22 01:15:54 +02:00
Marek Marczykowski
96f7d4da81 Revert "dom0/appmenus: do not add "Add more shortcuts" menu (#458)" (#548) 
This reverts commit 8b613a10b4.

Restore this option.
 2012-06-22 01:15:54 +02:00
Marek Marczykowski
51f4a60a44 dom0: use new qubes-manager appmenu applet (#548) 2012-06-21 11:57:36 +02:00
Marek Marczykowski
3109deebd5 Revert "dom0/appmenus: do not add "Add more shortcuts" menu (#458)" (#548) 
This reverts commit 8b613a10b4.

Restore this option.
 2012-06-21 11:50:52 +02:00
Marek Marczykowski
c978ce3a48 dom0/qvm-firewall: eliminate duplicate firewall defaults definition (#599) 
This caused ignore of different firewall defaults for TemplateVM.
 2012-06-19 00:59:27 +02:00
Marek Marczykowski
0e2aba228f dom0: minor qvm-sync-clock fix 
Catch any error in vm.run, to not break clock syncing of all VMs because one
VM.
 2012-06-19 00:59:27 +02:00
Marek Marczykowski
ab9c2e503a dom0: qvm-run --nogui switch 
Can be used to not start guid.
 2012-06-19 00:59:27 +02:00
Marek Marczykowski
a4e10f00c1 dom0/qvm-firewall: eliminate duplicate firewall defaults definition (#599) 
This caused ignore of different firewall defaults for TemplateVM.
 2012-06-18 23:51:44 +02:00
Marek Marczykowski
06d99b77df dom0: minor qvm-sync-clock fix 
Catch any error in vm.run, to not break clock syncing of all VMs because one
VM.
 2012-06-15 17:42:14 +02:00
Marek Marczykowski
92844a161a dom0: qvm-run --nogui support for HVM 
Translate it to "nogui:" command prefix.
 2012-06-15 17:40:03 +02:00
Marek Marczykowski
4dfad5f1ae dom0: qvm-run --nogui switch 
Can be used to not start guid.
 2012-06-15 17:37:19 +02:00
Marek Marczykowski
8bdc5706f7 dom0/core: allow to change default user for qvm-run (#577) 
This doesn't make all dom0 code VM-username independent, still 'user' is
hardcoded in many places. This only change behavior of qvm-run, especially for use in HVM.
 2012-06-13 19:01:32 +02:00
Marek Marczykowski
844d43b0ef dom0/core: introduce is_guid_running() and use it in is_fully_usable() 
To improve code reuse, especially to remove direct checking for
"/var/run/qubes/guid_running.{0}" in many places.
 2012-06-13 18:59:56 +02:00
Marek Marczykowski
c534d5871b dom0/core: fix order of loading VM attributes 
Parsing kernelopts depends on uses_default_kernelopts, so set 'order' appropriate.
 2012-06-13 18:59:56 +02:00
Marek Marczykowski
6bd988bf81 dom0/core: allow to change default user for qvm-run (#577) 
This doesn't make all dom0 code VM-username independent, still 'user' is
hardcoded in many places. This only change behavior of qvm-run, especially for use in HVM.
 2012-06-13 17:16:12 +02:00
Marek Marczykowski
e6a75c732e dom0/core: support for qrexec for Windows HVM 
Because not every HVM will have qrexec agent installed, introduce VM property
'qrexec_installed'. If it is set, spawn qrexec_daemon at VM startup and allow
use of qvm-run.
 2012-06-13 17:14:25 +02:00
Marek Marczykowski
5504142187 dom0/core: fix race in QubesHVm.stubdom_xid 
device-model-domid is written to xenstore after domaid id itself, so do not
assume the former is present when we know VM XID.
 2012-06-13 17:11:21 +02:00
Marek Marczykowski
784f0f5607 dom0/core/hvm: rename is_fully_usable() to is_guid_running() 
This is what this function does.
 2012-06-13 17:09:06 +02:00
Marek Marczykowski
46db1e83f0 dom0/core: introduce is_guid_running() and use it in is_fully_usable() 
To improve code reuse, especially to remove direct checking for
"/var/run/qubes/guid_running.{0}" in many places.
 2012-06-13 17:08:30 +02:00
Marek Marczykowski
6a929190d2 dom0/core: fix order of loading VM attributes 
Parsing kernelopts depends on uses_default_kernelopts, so set 'order' appropriate.
 2012-06-13 17:01:57 +02:00
Marek Marczykowski
3a8427cee5 dom0: do not reply all udev events at system boot (#595) 
This can cause some rules to fail and eg remove dm-* devices. Replace it with
what is really needed to hide mounted (and other ignored) devices from
qubes-block-devices.
 2012-06-13 04:57:38 +02:00
Marek Marczykowski
dfbf078155 dom0: do not reply all udev events at system boot (#595) 
This can cause some rules to fail and eg remove dm-* devices. Replace it with
what is really needed to hide mounted (and other ignored) devices from
qubes-block-devices.
 2012-06-13 04:08:09 +02:00
Marek Marczykowski
2eb7c5733d dom0/core: set network parameters only when VM have network access 2012-06-12 18:25:04 +02:00
Marek Marczykowski
653c056c99 dom0/core: fix HVM network settings in xen config 2012-06-12 18:24:34 +02:00
Marek Marczykowski
f2abc5e26d dom0: populate unchanged firewall settings with previous values (#589) 
Missed settings in new firewall configuration caused exception. In old qubes-manager (before #582 done) this exception silently broke saving operation, leaving user with progress bar windows infinitely...
 2012-06-05 21:21:53 +02:00
Marek Marczykowski
3b8272c1b6 dom0/qvm-ls: replace 'netmask' column with 'ip back' (#573) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
aea8d189f0 dom0/core: fix QubesVM.gateway 
To be consistent with QubesNetVM, where gateway property contain gateway IP for
_other_ VMs, in non-network-provider VM it should be empty.
 2012-06-05 21:21:53 +02:00
Marek Marczykowski
a528befbc4 dom0: default TemplateVM firewall: block all traffic and allow use of yum proxy (#590) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
a8b992e647 dom0/core: implement per-VM-type firewall defaults 2012-06-05 21:21:53 +02:00
Marek Marczykowski
3f3dc4708c dom0: populate unchanged firewall settings with previous values (#589) 
Missed settings in new firewall configuration caused exception. In old qubes-manager (before #582 done) this exception silently broke saving operation, leaving user with progress bar windows infinitely...
 2012-06-05 20:57:40 +02:00
Marek Marczykowski
2c7227066c dom0/qvm-ls: replace 'netmask' column with 'ip back' (#573) 2012-06-05 19:58:58 +02:00
Marek Marczykowski
3255f81a1c dom0/core: fix QubesVM.gateway 
To be consistent with QubesNetVM, where gateway property contain gateway IP for
_other_ VMs, in non-network-provider VM it should be empty.
 2012-06-05 19:57:19 +02:00
Marek Marczykowski
8b366f1148 dom0: default TemplateVM firewall: block all traffic and allow use of yum proxy (#590) 2012-06-05 19:37:39 +02:00
Marek Marczykowski
01e8a2dff9 dom0/core: implement per-VM-type firewall defaults 2012-06-05 19:37:12 +02:00
Marek Marczykowski
1f194cbe08 dom0: block_cleaner: removes ejected devices from xenstore 
When device is ejected by some VM (state=6, effectively inactive), it should be
removed from xenstore to free slot for some another device. This should be done
by libxl toolstack, but not implemented in xen 4.1 - AFAIR done in xen 4.2.
 2012-06-01 20:59:45 +02:00
Marek Marczykowski
e4f64fd600 dom0/core: remove trailing spaces 2012-05-31 03:11:44 +02:00
Marek Marczykowski
65fc62a989 dom0/core: setup yum to use proxy when it have access to it (#568) 
To simplify configuration, automatically enable 'yum-proxy-setup'
pseudo-service when allowing access to the proxy. Also disable this service,
when access is revoked. Thanks to this the user can enable this feature by one
click in firewall settings.
 2012-05-31 03:11:44 +02:00
Marek Marczykowski
ec52d15dfe dom0/qvm-firewall: add support for 'allowYumProxy' setting (#568) 2012-05-31 03:11:44 +02:00
Marek Marczykowski
2ca4b11183 dom0/core-firewall: firewall setting for qubes-yum-proxy (#568) 
New setting for access to qubes-yum-proxy. The difference from other firewall
setting (and reason for new top-level setting): 'deny' is enforced even if
policy is set to 'allow'. This proxy service is mainly used to filter network
traffic, so do not expose it to VMs which can connect to any host directly (eg
'untrusted' VM).
 2012-05-31 03:11:44 +02:00
Marek Marczykowski
a2b222166a dom0/qvm-tools: introduce qvm-service tool 
Allow setting vm services same as in qubes-manager
 2012-05-31 03:09:22 +02:00
Marek Marczykowski
1f8251eefb dom0/qvm-block: hide devices mounted in dom0 (#579) 2012-05-31 03:09:22 +02:00
Marek Marczykowski
39b15033aa dom0/qvm-ls: add 'kernel' and 'kernelopts' columns 2012-05-31 03:09:22 +02:00
Marek Marczykowski
812264cfb0 dom0/core: don't limit netvm/proxyvm vcpu count to 1 (#571) 2012-05-31 03:09:22 +02:00
Marek Marczykowski
c49ad3438b dom0/core: remove trailing spaces 2012-05-31 03:05:14 +02:00
Marek Marczykowski
d89733b517 dom0/core: setup yum to use proxy when it have access to it (#568) 
To simplify configuration, automatically enable 'yum-proxy-setup'
pseudo-service when allowing access to the proxy. Also disable this service,
when access is revoked. Thanks to this the user can enable this feature by one
click in firewall settings.
 2012-05-31 03:05:13 +02:00
Marek Marczykowski
c81cc32da2 dom0/qvm-firewall: add support for 'allowYumProxy' setting (#568) 2012-05-31 03:05:13 +02:00
Marek Marczykowski
030584f026 dom0/core-firewall: firewall setting for qubes-yum-proxy (#568) 
New setting for access to qubes-yum-proxy. The difference from other firewall
setting (and reason for new top-level setting): 'deny' is enforced even if
policy is set to 'allow'. This proxy service is mainly used to filter network
traffic, so do not expose it to VMs which can connect to any host directly (eg
'untrusted' VM).
 2012-05-31 03:05:13 +02:00
Marek Marczykowski
6bc609fbc3 dom0/qvm-tools: introduce qvm-service tool 
Allow setting vm services same as in qubes-manager
 2012-05-30 13:47:25 +02:00
Marek Marczykowski
b55da785f7 dom0/qvm-block: hide devices mounted in dom0 (#579) 2012-05-30 00:54:24 +02:00
Marek Marczykowski
2e8765e1e1 dom0/qvm-ls: add 'kernel' and 'kernelopts' columns 2012-05-26 12:21:42 +02:00
Marek Marczykowski
44c14d409c dom0/core: don't limit netvm/proxyvm vcpu count to 1 (#571) 2012-05-25 15:06:00 +02:00
Marek Marczykowski
b87806db17 dom0: expose debug mode in xenstore (#567) 2012-05-22 15:51:40 +02:00
Marek Marczykowski
3d783f7fa3 dom0: expose debug mode in xenstore (#567) 2012-05-22 15:51:09 +02:00
Marek Marczykowski
987a490179 dom0/core: don't force maxmem=memory for NetVM (#572) 2012-05-20 02:10:50 +02:00
Marek Marczykowski
659dec044f dom0/core: don't force maxmem=memory for NetVM (#572) 2012-05-20 02:08:56 +02:00
Marek Marczykowski
44cec03c33 dom0/update-notify: ensure correct permissions for update stat file 2012-05-16 07:56:40 +02:00
Marek Marczykowski
2b439aedfe dom0/update-notify: ensure correct permissions for update stat file 2012-05-16 07:55:48 +02:00
Marek Marczykowski
8d7811827f dom0/qubes-updates: stat file for qubes-manager 2012-05-14 04:57:57 +02:00
Marek Marczykowski
1e496fbfb7 dom0/qubes-updates: one more qubes-dom0-update typo fix 2012-05-14 04:57:57 +02:00
Marek Marczykowski
be1e72cad7 dom0/qubes-updates: stat file for qubes-manager 2012-05-14 04:56:30 +02:00
Marek Marczykowski
ba3d07d300 dom0/qubes-updates: one more qubes-dom0-update typo fix 2012-05-14 04:56:03 +02:00
Marek Marczykowski
783ea78292 dom0: var name fix, and one minor sanity check 2012-05-08 15:55:46 +02:00
Marek Marczykowski
81138182f6 dom0: var name fix, and one minor sanity check 2012-05-08 15:54:29 +02:00
Marek Marczykowski
50a58c6331 dom0/dom0-update: clean up metadata caches after downloading updates (#558) 2012-05-07 15:49:38 +02:00
Marek Marczykowski
a5c80d4015 dom0/qvm-pci: add info about required restart after PCI device add/remove 2012-05-07 15:49:37 +02:00
Marek Marczykowski
c78d38fb0d dom0/core: disable private.img for HVM (#26 pro) 2012-05-04 13:20:10 +02:00
Marek Marczykowski
fdaee4bf92 dom0/dom0-update: clean up metadata caches after downloading updates (#558) 2012-05-04 02:42:21 +02:00
Marek Marczykowski
7f6a3c665b dom0/qvm-pci: add info about required restart after PCI device add/remove 2012-05-03 03:54:05 +02:00
Marek Marczykowski
b771cb9f90 dom0/qvm-backup: chown user dir before backup (#492) 2012-05-02 00:09:00 +02:00
Marek Marczykowski
9edc845184 dom0: create appmenus for NetVMs, using separate whitelist (#538) 2012-05-02 00:09:00 +02:00
Marek Marczykowski
7b81659593 dom0: create appmenus template and icon for all VMs 2012-05-02 00:09:00 +02:00
Marek Marczykowski
370ad33c44 dom0: provide service for VM to notify about updates availability (#475) 2012-05-02 00:09:00 +02:00
Marek Marczykowski
9c7ab91491 dom0: remove unused reset_vm_configs.py 2012-05-02 00:09:00 +02:00
Marek Marczykowski
99e784bfc0 dom0/qvm-backup: chown user dir before backup (#492) 2012-05-01 02:22:36 +02:00
Marek Marczykowski
929d6b52c9 dom0: create appmenus for NetVMs, using separate whitelist (#538) 2012-05-01 02:05:07 +02:00
Marek Marczykowski
478b57f3a9 dom0: create appmenus template and icon for all VMs 2012-05-01 02:04:16 +02:00
Marek Marczykowski
fa41bf840c dom0: provide service for VM to notify about updates availability (#475) 2012-05-01 01:12:19 +02:00
Marek Marczykowski
366e405df0 dom0: remove unused reset_vm_configs.py 2012-04-30 13:29:01 +02:00
Marek Marczykowski
db6eb497a6 dom0/core: do not relay on any max xid (#445) 
What is really required is the maximum number of domains, not its IDs. Use max
QID as maximum number of domains.
 2012-04-28 03:26:20 +02:00
Marek Marczykowski
c0f1d3c53b dom0/qvm-ls: show 'n/a' in disk usage for dom0 2012-04-28 03:26:20 +02:00
Marek Marczykowski
0c43635806 dom0: add missing 2> /dev/null to unbind_pci_device.sh (#550) 2012-04-28 03:26:20 +02:00
Marek Marczykowski
2ec08734dd dom0/core: guid for HVM is connected to stubdom - respect it when checking its state (#25 pro) 2012-04-28 02:51:43 +02:00
Marek Marczykowski
1b9e780861 dom0/core: do not relay on any max xid (#445) 
What is really required is the maximum number of domains, not its IDs. Use max
QID as maximum number of domains.
 2012-04-28 02:17:04 +02:00
Marek Marczykowski
f41f0e965b dom0/qvm-ls: show 'n/a' in disk usage for dom0 2012-04-28 02:03:43 +02:00
Marek Marczykowski
187bc242e5 dom0: add missing 2> /dev/null to unbind_pci_device.sh (#550) 2012-04-26 14:29:19 +02:00
Marek Marczykowski
daa82bb62c dom0: fix check-updates cron job 2012-04-25 23:43:50 +02:00
Marek Marczykowski
6a489c0faf dom0: fix check-updates cron job 2012-04-25 23:37:03 +02:00
Marek Marczykowski
a96f6a1e81 Revert "dom0/qvm-prefs: remove duplicated set_include_in_backups" 
This reverts commit aa99c411db.
This wasn't duplicated...

Conflicts:

	dom0/qvm-tools/qvm-prefs
 2012-04-24 14:02:00 +02:00
Marek Marczykowski
3aedb8f363 dom0/qvm-prefs: fix 'drive' setting 
Allow clear the property.
 2012-04-24 13:10:25 +02:00
Marek Marczykowski
a43fa8f06b dom0/qvm-prefs: support for setting timezone (#1 pro) 2012-04-24 13:10:01 +02:00
Marek Marczykowski
a8ec5a6506 dom0/core: add 'timezone' property support (#1 pro) 2012-04-24 13:09:27 +02:00
Marek Marczykowski
4ce7824fa0 dom0/core: remove unnecessary assignment 
This is already done by 'eval' entry in _get_attrs_config.
 2012-04-24 13:07:21 +02:00
Marek Marczykowski
016837a19c dom0/core: fix 'drive' saving logic 
There is no longer need to override get_xml_attrs. Also include 'drive' in
properties retrieved from qubes.xml.
 2012-04-24 13:05:41 +02:00
Marek Marczykowski
804dc973ed dom0/qvm-firewall: clarify message (#24 pro) 2012-04-24 02:14:17 +02:00
Marek Marczykowski
9927244670 dom0/qvm-tools: add GUI (tray balloon) error reporing to qvm-start and extend it in qvm-run (#534) 2012-04-24 02:14:17 +02:00
Marek Marczykowski
c5cc6620d3 dom0/core: include VM name in "insufficient memory" message (#534) 2012-04-24 02:14:17 +02:00
Marek Marczykowski
d2ef0be450 dom0/core: setup xen logs permissions (#539) 2012-04-24 02:14:17 +02:00
Marek Marczykowski
c35e655d66 dom0/qvm-prefs: relax memory check 
Allow memory > maxmem, anyway it will be enforced at VM boot. This allows to
set memory and maxmem in any order. Also required to increase memory for HVM.
 2012-04-24 02:14:17 +02:00
Marek Marczykowski
2e7eb69c1a dom0/qvm-firewall: clarify message (#24 pro) 2012-04-24 02:08:49 +02:00
Marek Marczykowski
b0eb5d5f14 dom0/appmenus: run qvm-start with --tray (#534) 2012-04-24 01:41:22 +02:00
Marek Marczykowski
7d799e1d12 dom0/qvm-tools: add GUI (tray balloon) error reporing to qvm-start and extend it in qvm-run (#534) 2012-04-24 01:40:56 +02:00
Marek Marczykowski
705699baf2 dom0/core: include VM name in "insufficient memory" message (#534) 2012-04-24 01:38:02 +02:00