Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
1,595 Commits 1 Branch 0 Tags 15 MiB
a4e10f00c1
Commit Graph

1595 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Marek Marczykowski
a4e10f00c1 dom0/qvm-firewall: eliminate duplicate firewall defaults definition (#599) 
This caused ignore of different firewall defaults for TemplateVM.
 2012-06-18 23:51:44 +02:00
Marek Marczykowski
9b8f970ec8 Merge branch 'hvm' of git://gitpro.qubes-os.org/alex/core into hvm 2012-06-15 17:48:37 +02:00
Marek Marczykowski
06d99b77df dom0: minor qvm-sync-clock fix 
Catch any error in vm.run, to not break clock syncing of all VMs because one
VM.
 2012-06-15 17:42:14 +02:00
Marek Marczykowski
92844a161a dom0: qvm-run --nogui support for HVM 
Translate it to "nogui:" command prefix.
 2012-06-15 17:40:03 +02:00
Marek Marczykowski
4dfad5f1ae dom0: qvm-run --nogui switch 
Can be used to not start guid.
 2012-06-15 17:37:19 +02:00
Marek Marczykowski
6bd988bf81 dom0/core: allow to change default user for qvm-run (#577) 
This doesn't make all dom0 code VM-username independent, still 'user' is
hardcoded in many places. This only change behavior of qvm-run, especially for use in HVM.
 2012-06-13 17:16:12 +02:00
Marek Marczykowski
e6a75c732e dom0/core: support for qrexec for Windows HVM 
Because not every HVM will have qrexec agent installed, introduce VM property
'qrexec_installed'. If it is set, spawn qrexec_daemon at VM startup and allow
use of qvm-run.
 2012-06-13 17:14:25 +02:00
Marek Marczykowski
5504142187 dom0/core: fix race in QubesHVm.stubdom_xid 
device-model-domid is written to xenstore after domaid id itself, so do not
assume the former is present when we know VM XID.
 2012-06-13 17:11:21 +02:00
Marek Marczykowski
784f0f5607 dom0/core/hvm: rename is_fully_usable() to is_guid_running() 
This is what this function does.
 2012-06-13 17:09:06 +02:00
Marek Marczykowski
46db1e83f0 dom0/core: introduce is_guid_running() and use it in is_fully_usable() 
To improve code reuse, especially to remove direct checking for
"/var/run/qubes/guid_running.{0}" in many places.
 2012-06-13 17:08:30 +02:00
Marek Marczykowski
6a929190d2 dom0/core: fix order of loading VM attributes 
Parsing kernelopts depends on uses_default_kernelopts, so set 'order' appropriate.
 2012-06-13 17:01:57 +02:00
Marek Marczykowski
dfbf078155 dom0: do not reply all udev events at system boot (#595) 
This can cause some rules to fail and eg remove dm-* devices. Replace it with
what is really needed to hide mounted (and other ignored) devices from
qubes-block-devices.
 2012-06-13 04:08:09 +02:00
Marek Marczykowski
f39404cc8a vm/qubes-dom0-update: rebuild dom0 rpmdb before touching it with yum 
Dom0 can have different (older) rpmdb version than VM. Starting from FC17 yum
refuses to work without rebuild.
 2012-06-13 01:59:25 +02:00
Marek Marczykowski
2eb7c5733d dom0/core: set network parameters only when VM have network access 2012-06-12 18:25:04 +02:00
Marek Marczykowski
653c056c99 dom0/core: fix HVM network settings in xen config 2012-06-12 18:24:34 +02:00
Marek Marczykowski
c5212ee438 vm: chown /home/user to user if user UID have changed 
FC16 and FC17 starts normal users at UID 1000, not 500 as in <=FC15.
 2012-06-11 22:33:57 +02:00
Marek Marczykowski
1b92b75ce8 Merge branch 'hvm' of git://gitpro.qubes-os.org/alex/core into hvm 2012-06-09 12:12:36 +02:00
Marek Marczykowski
ab269f9eba vm: fix yum-qubes-hooks 
Program must be given as full path to qrexec_client_vm - it is passed directly
to execv.
 2012-06-08 04:36:33 +02:00
Marek Marczykowski
5354249102 vm: enable yum-qubes-hooks plugin (#592) 2012-06-08 00:34:11 +02:00
Marek Marczykowski
730b10a704 vm: disable gnome update plugin, not only unattended installation 2012-06-08 00:24:46 +02:00
Marek Marczykowski
01ca42b5c4 vm/spec: create firmware symlink only when needed 
On new systems, like FC16+, firmware is provided by separate package (like
linux-firmware), so no longer need to get it from kernel package.
 2012-06-06 03:02:58 +02:00
Marek Marczykowski
4463701bf3 vm/spec: depend on ethtool _package_ 2012-06-06 03:02:58 +02:00
Marek Marczykowski
1aebb12f30 dom0+vm/qvm-block: speed up udev block handler (#560) 
xenstore is very slow, so don't bother it when unneeded. Namely do not try to
remove entries, which haven't even created.
 2012-06-06 02:12:10 +02:00
Marek Marczykowski
3f3dc4708c dom0: populate unchanged firewall settings with previous values (#589) 
Missed settings in new firewall configuration caused exception. In old qubes-manager (before #582 done) this exception silently broke saving operation, leaving user with progress bar windows infinitely...
 2012-06-05 20:57:40 +02:00
Marek Marczykowski
2c7227066c dom0/qvm-ls: replace 'netmask' column with 'ip back' (#573) 2012-06-05 19:58:58 +02:00
Marek Marczykowski
3255f81a1c dom0/core: fix QubesVM.gateway 
To be consistent with QubesNetVM, where gateway property contain gateway IP for
_other_ VMs, in non-network-provider VM it should be empty.
 2012-06-05 19:57:19 +02:00
Marek Marczykowski
c3a403f395 vm: use yum proxy in TemplateVM by default (#590) 2012-06-05 19:42:11 +02:00
Marek Marczykowski
8b366f1148 dom0: default TemplateVM firewall: block all traffic and allow use of yum proxy (#590) 2012-06-05 19:37:39 +02:00
Marek Marczykowski
01e8a2dff9 dom0/core: implement per-VM-type firewall defaults 2012-06-05 19:37:12 +02:00
Marek Marczykowski
8023c66020 vm: yum plugin to notify dom0 about installed updates (#592) 2012-06-05 19:28:59 +02:00
Marek Marczykowski
038380984f vm/systemd: fix ProxyVM related services deps (#578) 2012-06-04 15:29:26 +02:00
Alexander Tereshkin
c19a63b175 Merge branch 'hvm' of 10.141.1.101:/var/lib/qubes/git/marmarek/core into hvm 2012-06-04 17:11:03 +04:00
Marek Marczykowski
01c9fdfe59 vchan: fix ASYNC_INIT macro 2012-06-04 14:59:11 +02:00
Alexander Tereshkin
732b3bf78b Merge branch 'hvm' of git://10.141.1.101/joanna/core into hvm 2012-06-04 16:42:30 +04:00
Marek Marczykowski
22207ddf75 vchan: introduce features macros 
Use features macros (QREXEC_RING_V2 and ASYNC_INIT) instead of directly
depending on building environment. The macros are turned on (when required) in
libvchan.h based on target system.
 2012-06-03 17:23:07 +02:00
Marek Marczykowski
f01b1b40ac vchan: fix xc_gnttab_open call 2012-06-03 17:23:07 +02:00
Marek Marczykowski
edf1ecfcfd vchan: remove unused variables 2012-06-03 17:23:07 +02:00
Marek Marczykowski
a2a21c0467 vchan: unify calls to xc_evtchn_close 
Calls to this function can be the same on all systems and xen versions, so
simplify code.
 2012-06-03 17:23:06 +02:00
Marek Marczykowski
87115716ba vchan/stubdom: remove temp hack (unneded now) 
This was needed when stubdom have no write access to device/vchan.
 2012-06-03 17:22:59 +02:00
Joanna Rutkowska
e4dab493da version 2.0.25 2012-06-02 15:31:18 +02:00
Marek Marczykowski
1462e36454 win: convert vchan/sources to windows EOL-style 2012-06-02 12:34:35 +02:00
Marek Marczykowski
dd60d3da95 makefile: rename vchan Makefile to not conflict with windows build 2012-06-02 12:32:49 +02:00
Marek Marczykowski
2e9fcbbc1f Merge branch 'hvm' of git://gitpro.qubes-os.org/alex/core into hvm 2012-06-02 00:46:41 +02:00
Marek Marczykowski
1f194cbe08 dom0: block_cleaner: removes ejected devices from xenstore 
When device is ejected by some VM (state=6, effectively inactive), it should be
removed from xenstore to free slot for some another device. This should be done
by libxl toolstack, but not implemented in xen 4.1 - AFAIR done in xen 4.2.
 2012-06-01 20:59:45 +02:00
Marek Marczykowski
65a94681b2 vm/qrexec: removed obsolete "directly:" command prefix support 
This was used for launching DispVM editor in pre-qrexec-RPC times.
 2012-06-01 20:46:23 +02:00
Marek Marczykowski
c49ad3438b dom0/core: remove trailing spaces 2012-05-31 03:05:14 +02:00
Marek Marczykowski
d89733b517 dom0/core: setup yum to use proxy when it have access to it (#568) 
To simplify configuration, automatically enable 'yum-proxy-setup'
pseudo-service when allowing access to the proxy. Also disable this service,
when access is revoked. Thanks to this the user can enable this feature by one
click in firewall settings.
 2012-05-31 03:05:13 +02:00
Marek Marczykowski
c81cc32da2 dom0/qvm-firewall: add support for 'allowYumProxy' setting (#568) 2012-05-31 03:05:13 +02:00
Marek Marczykowski
030584f026 dom0/core-firewall: firewall setting for qubes-yum-proxy (#568) 
New setting for access to qubes-yum-proxy. The difference from other firewall
setting (and reason for new top-level setting): 'deny' is enforced even if
policy is set to 'allow'. This proxy service is mainly used to filter network
traffic, so do not expose it to VMs which can connect to any host directly (eg
'untrusted' VM).
 2012-05-31 03:05:13 +02:00
Marek Marczykowski
edc3518ec9 vm/qubes-yum-proxy: setup yum to use qubes-yum-proxy (#568) 
The simplest way is just add proxy=... entry to /etc/yum.conf, but sometimes it
is reasonable to bypass the proxy. Some examples:
 - usage of non-standard repos with some exotic file layout, which will be
   blocked by the proxy
 - usage of repos not-accessible via proxy (eg only via VPN stared in VpnVM)

This commit introduces 'yum-proxy-setup' pseudo-service, which can be
controlled via standard qvm-service or qubes-manager. When enabled - yum will
be configured at VM startup to use qubes proxy, otherwise - to connect directly
(proxy setting will be cleared).
 2012-05-31 03:05:13 +02:00