Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
1,499 Commits 1 Branch 0 Tags 20 MiB
a680976f1e
Commit Graph

803 Commits

Author SHA1 Message Date
Marek Marczykowski
f2abc5e26d dom0: populate unchanged firewall settings with previous values (#589) 
Missed settings in new firewall configuration caused exception. In old qubes-manager (before #582 done) this exception silently broke saving operation, leaving user with progress bar windows infinitely...
 2012-06-05 21:21:53 +02:00
Marek Marczykowski
3b8272c1b6 dom0/qvm-ls: replace 'netmask' column with 'ip back' (#573) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
aea8d189f0 dom0/core: fix QubesVM.gateway 
To be consistent with QubesNetVM, where gateway property contain gateway IP for
_other_ VMs, in non-network-provider VM it should be empty.
 2012-06-05 21:21:53 +02:00
Marek Marczykowski
a528befbc4 dom0: default TemplateVM firewall: block all traffic and allow use of yum proxy (#590) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
a8b992e647 dom0/core: implement per-VM-type firewall defaults 2012-06-05 21:21:53 +02:00
Marek Marczykowski
e4f64fd600 dom0/core: remove trailing spaces 2012-05-31 03:11:44 +02:00
Marek Marczykowski
65fc62a989 dom0/core: setup yum to use proxy when it have access to it (#568) 
To simplify configuration, automatically enable 'yum-proxy-setup'
pseudo-service when allowing access to the proxy. Also disable this service,
when access is revoked. Thanks to this the user can enable this feature by one
click in firewall settings.
 2012-05-31 03:11:44 +02:00
Marek Marczykowski
ec52d15dfe dom0/qvm-firewall: add support for 'allowYumProxy' setting (#568) 2012-05-31 03:11:44 +02:00
Marek Marczykowski
2ca4b11183 dom0/core-firewall: firewall setting for qubes-yum-proxy (#568) 
New setting for access to qubes-yum-proxy. The difference from other firewall
setting (and reason for new top-level setting): 'deny' is enforced even if
policy is set to 'allow'. This proxy service is mainly used to filter network
traffic, so do not expose it to VMs which can connect to any host directly (eg
'untrusted' VM).
 2012-05-31 03:11:44 +02:00
Marek Marczykowski
a2b222166a dom0/qvm-tools: introduce qvm-service tool 
Allow setting vm services same as in qubes-manager
 2012-05-31 03:09:22 +02:00
Marek Marczykowski
1f8251eefb dom0/qvm-block: hide devices mounted in dom0 (#579) 2012-05-31 03:09:22 +02:00
Marek Marczykowski
39b15033aa dom0/qvm-ls: add 'kernel' and 'kernelopts' columns 2012-05-31 03:09:22 +02:00
Marek Marczykowski
812264cfb0 dom0/core: don't limit netvm/proxyvm vcpu count to 1 (#571) 2012-05-31 03:09:22 +02:00
Marek Marczykowski
3d783f7fa3 dom0: expose debug mode in xenstore (#567) 2012-05-22 15:51:09 +02:00
Marek Marczykowski
987a490179 dom0/core: don't force maxmem=memory for NetVM (#572) 2012-05-20 02:10:50 +02:00
Marek Marczykowski
44cec03c33 dom0/update-notify: ensure correct permissions for update stat file 2012-05-16 07:56:40 +02:00
Marek Marczykowski
8d7811827f dom0/qubes-updates: stat file for qubes-manager 2012-05-14 04:57:57 +02:00
Marek Marczykowski
1e496fbfb7 dom0/qubes-updates: one more qubes-dom0-update typo fix 2012-05-14 04:57:57 +02:00
Marek Marczykowski
783ea78292 dom0: var name fix, and one minor sanity check 2012-05-08 15:55:46 +02:00
Marek Marczykowski
50a58c6331 dom0/dom0-update: clean up metadata caches after downloading updates (#558) 2012-05-07 15:49:38 +02:00
Marek Marczykowski
a5c80d4015 dom0/qvm-pci: add info about required restart after PCI device add/remove 2012-05-07 15:49:37 +02:00
Marek Marczykowski
b771cb9f90 dom0/qvm-backup: chown user dir before backup (#492) 2012-05-02 00:09:00 +02:00
Marek Marczykowski
9edc845184 dom0: create appmenus for NetVMs, using separate whitelist (#538) 2012-05-02 00:09:00 +02:00
Marek Marczykowski
7b81659593 dom0: create appmenus template and icon for all VMs 2012-05-02 00:09:00 +02:00
Marek Marczykowski
370ad33c44 dom0: provide service for VM to notify about updates availability (#475) 2012-05-02 00:09:00 +02:00
Marek Marczykowski
9c7ab91491 dom0: remove unused reset_vm_configs.py 2012-05-02 00:09:00 +02:00
Marek Marczykowski
db6eb497a6 dom0/core: do not relay on any max xid (#445) 
What is really required is the maximum number of domains, not its IDs. Use max
QID as maximum number of domains.
 2012-04-28 03:26:20 +02:00
Marek Marczykowski
c0f1d3c53b dom0/qvm-ls: show 'n/a' in disk usage for dom0 2012-04-28 03:26:20 +02:00
Marek Marczykowski
0c43635806 dom0: add missing 2> /dev/null to unbind_pci_device.sh (#550) 2012-04-28 03:26:20 +02:00
Marek Marczykowski
daa82bb62c dom0: fix check-updates cron job 2012-04-25 23:43:50 +02:00
Marek Marczykowski
a96f6a1e81 Revert "dom0/qvm-prefs: remove duplicated set_include_in_backups" 
This reverts commit aa99c411db.
This wasn't duplicated...

Conflicts:

	dom0/qvm-tools/qvm-prefs
 2012-04-24 14:02:00 +02:00
Marek Marczykowski
804dc973ed dom0/qvm-firewall: clarify message (#24 pro) 2012-04-24 02:14:17 +02:00
Marek Marczykowski
9927244670 dom0/qvm-tools: add GUI (tray balloon) error reporing to qvm-start and extend it in qvm-run (#534) 2012-04-24 02:14:17 +02:00
Marek Marczykowski
c5cc6620d3 dom0/core: include VM name in "insufficient memory" message (#534) 2012-04-24 02:14:17 +02:00
Marek Marczykowski
d2ef0be450 dom0/core: setup xen logs permissions (#539) 2012-04-24 02:14:17 +02:00
Marek Marczykowski
c35e655d66 dom0/qvm-prefs: relax memory check 
Allow memory > maxmem, anyway it will be enforced at VM boot. This allows to
set memory and maxmem in any order. Also required to increase memory for HVM.
 2012-04-24 02:14:17 +02:00
Marek Marczykowski
865ea14473 dom0/qvm-start: allow temporally enable debug mode (#537) 2012-04-23 12:43:24 +02:00
Marek Marczykowski
e73b13c68d dom0/core: add 'debug' VM property (#537) 2012-04-23 12:43:24 +02:00
Marek Marczykowski
073cce723f dom0/qvm-start: remove obsolete --console switch 2012-04-23 12:43:11 +02:00
Marek Marczykowski
aa99c411db dom0/qvm-prefs: remove duplicated set_include_in_backups 2012-04-23 12:42:18 +02:00
Marek Marczykowski
bb30184452 dom0/qvm-prefs: typo fix 2012-04-23 12:42:18 +02:00
Marek Marczykowski
1076e09dc0 dom0/core: rename "Starting" start to "Transient" 
This state can also appear at VM shutdown.
 2012-04-23 12:42:18 +02:00
Marek Marczykowski
9d3c008ecb dom0/core: fix memory parse fix 2012-04-20 15:39:39 +02:00
Marek Marczykowski
d7b80fe3d4 dom0/core: parse memory and maxmem as int 2012-04-20 14:48:43 +02:00
Marek Marczykowski
28666c47f5 dom0/core: check if object has attr before using it 2012-04-20 13:33:41 +02:00
Marek Marczykowski
0633e35fa6 dom0/core: include pcidevs and include_in_backups in cloned attrs 
Preserve it in qvm-clone and backup-restore
 2012-04-20 03:14:09 +02:00
Marek Marczykowski
798e3d8c96 dom0/backup-restore: set network dependencies when all VMs are restored 
To avoid complex restore order resolution.
 2012-04-20 03:14:09 +02:00
Marek Marczykowski
aaa07f4559 dom0/backup-restore: display netvm of proxyvm 2012-04-20 03:14:09 +02:00
Marek Marczykowski
665363fa33 dom0/backup-restore: restore all attributes 2012-04-20 03:14:09 +02:00
Marek Marczykowski
a6d38480c6 dom0/core: do not write netvm_domid for halted VMs 2012-04-20 03:14:09 +02:00
Marek Marczykowski
3d316ca2f9 dom0/core: introduce "Starting" state (#520) 
Represent VM which is running, but gui daemon hasn't connected yet.
 2012-04-19 01:16:00 +02:00
Marek Marczykowski
ceeed3bd8b dom0/qvm-start: fix --no-guid switch (#528) 2012-04-18 17:38:38 +02:00
Marek Marczykowski
47b70235e3 dom0/core: force memory <= maxmem at VM startup (#497) 2012-04-18 16:53:50 +02:00
Marek Marczykowski
adec43af85 dom0/qvm-prefs: validate memory parameters (#497) 2012-04-18 16:53:50 +02:00
Marek Marczykowski
abaea52da0 dom0/core: detect if PCI device not already attached to some other VM (#522) 2012-04-18 16:53:50 +02:00
Marek Marczykowski
c22296fe38 dom0/appmenus: remove menu file left by xdg-desktop-menu (#529) 2012-04-18 16:53:50 +02:00
Marek Marczykowski
27771444a9 dom0/core: If dynamic memory management disabled, set maxmem=mem (#525) 2012-04-18 16:53:50 +02:00
Marek Marczykowski
997c0ed86b dom0/core: pass all start() parameters to the base class 2012-04-18 16:53:50 +02:00
Marek Marczykowski
ce0c20e021 dom0/qvm-block: qvm-block -d <vmname> detaches all devices (#517) 
Exception: if frontend specified, detaches only this one device.
 2012-04-13 00:30:13 +02:00
Marek Marczykowski
1a07bc241d dom0/qvm-block: handle block-attach errors (#515) 2012-04-12 18:04:20 +02:00
Marek Marczykowski
5ae9f98c8c dom0/core: do not fail on VM shutdown in QubesWatch 2012-04-12 15:52:07 +02:00
Marek Marczykowski
37c7dcc270 dom0/core: section headers in qubesutils 2012-04-11 01:37:01 +02:00
Marek Marczykowski
9a2feeb214 dom0/core: watch interface 2012-04-11 01:36:57 +02:00
Marek Marczykowski
158076d0a2 dom0/core: minor netvm switching 
Do not fail when setting netvm to none of running VM.
 2012-04-11 01:36:51 +02:00
Marek Marczykowski
ff52cbe378 dom0/qvm-block: use xenstore transactions (#507) 2012-04-03 02:09:02 +02:00
Marek Marczykowski
d8b979d844 dom0/qvm-block: ignore devices with some field missing 2012-03-31 19:49:46 +02:00
Marek Marczykowski
749b84ec43 dom0/qvm-block: hide system disks by default (#5 pro) 2012-03-31 19:49:41 +02:00
Marek Marczykowski
f42c39ba21 dom0/qvm-block: one more file-attach fix 2012-03-31 19:22:26 +02:00
Marek Marczykowski
b10615f7bd dom0/qvm-tools: fix auto-detach 2012-03-31 19:12:03 +02:00
Marek Marczykowski
e5a2209cab dom0/qvm-block: change order of parameters (#514) 2012-03-31 19:05:12 +02:00
Marek Marczykowski
8105fad646 dom0+vm: qvm-block --attach-file 
Allow to attach disk image from different VM as block device. File attached
with qvm-block -A will be visible as loopX device and as such can be detached.
File path will be in device description.
 2012-03-31 19:04:50 +02:00
Marek Marczykowski
3650ac837e dom0/core: do not inherit kernel version from template (#488) 2012-03-28 00:49:02 +02:00
Marek Marczykowski
71b98f9d95 dom0/qmemman: add support for config file 2012-03-28 00:47:26 +02:00
Marek Marczykowski
d969d2b863 dom0/utils: minor for for parse_size 2012-03-28 00:47:26 +02:00
Marek Marczykowski
191967fd41 dom0/core: ensure that vm.services['meminfo-writer'] is present 2012-03-28 00:47:26 +02:00
Marek Marczykowski
d0407c06af dom0/dispvm: new progress window for DispVM generation (#422) 2012-03-23 19:19:58 +01:00
Marek Marczykowski
049a74d5af dom0/qvm-start: support for custom Xen config 2012-03-15 20:59:49 +01:00
Marek Marczykowski
0c9781648a dom0/core: one more "nonupdatable template" cleanup 2012-03-15 20:25:44 +01:00
Marek Marczykowski
2eec6aaa7c dom0/qvm-block: add support for d0p1 style names, especially mmcblk* (#489) 2012-03-15 10:59:40 +01:00
Marek Marczykowski
1ebe503af8 dom0/qvm-backup: do not backup volatile.img 
It is always cleaned before VM start anyway.
 2012-03-12 13:26:49 +01:00
Marek Marczykowski
cc8975d9f2 dom0/core: verify files before starting VM 2012-03-11 00:33:39 +01:00
Marek Marczykowski
dd89fab841 dom0/core: disable automatic starting NetVM when trying attach to 2012-03-11 00:28:21 +01:00
Marek Marczykowski
24d521c1b3 dom0/qvm-backup: do not fail on VMs without private.img 2012-03-11 00:28:14 +01:00
Marek Marczykowski
578ef780c7 dom0/qvm-tools: introduce cmdline firewall editor: qvm-firewall 2012-03-10 03:16:15 +01:00
Marek Marczykowski
ac246d3d6a dom0/qvm-ls: improve performance 
Do not evaluate each field twice - some of them (eg. disk usage) are expensive.
 2012-03-09 17:23:41 +01:00
Marek Marczykowski
c7f3b1a685 dom0/qvm-ls: don't crash when multiple options given 2012-03-09 17:06:50 +01:00
Marek Marczykowski
cdd73f3d14 dom0/core: drop support for non-updateable templates 
Implement 'updateable' property as 'template is None'
 2012-03-09 11:28:06 +01:00
Marek Marczykowski
f143b6c1f2 dom0/core: minor error handling fix 2012-03-09 11:02:38 +01:00
Marek Marczykowski
d7aed8b233 dom0/core: API CHANGE: change 'template_vm' to 'template' 
Just to match property displayed everywhere, also simplifying tools like
qvm-prefs.
 2012-03-09 11:01:20 +01:00
Marek Marczykowski
ceed4507eb dom0/qvm-network: implement dynamic switching in property setter (#478) 
Also add to it missing parts: firewall reload and netid attr set (+perms for it)
 2012-03-09 01:52:28 +01:00
Marek Marczykowski
d91bbdb3dd dom0/qvm-block: add support for md devices (#476) 2012-03-09 00:04:36 +01:00
Marek Marczykowski
c174d0c184 dom0/qvm-block: ignore unsupported devices istead of throw exception (#476) 2012-03-09 00:00:20 +01:00
Marek Marczykowski
cae2672171 dom0/qvm-firewall: make firewall IP-based, not IF-based 
Some VMs (especially HVM) can have more than one vif, so to not dupplicate
rules, make it IP based.
 2012-03-08 14:40:00 +01:00
Marek Marczykowski
fc283e22c8 dom0/core: use QubesVm.pause/unpause instead of xl directly 2012-03-08 12:03:49 +01:00
Marek Marczykowski
63e19e1afa dom0/core: follow new __init__ api in subclasses 2012-03-08 11:56:26 +01:00
Marek Marczykowski
de9f952a2e dom0/core: more generic way to specify xen config template 2012-03-08 11:54:27 +01:00
Marek Marczykowski
8433931822 dom0/core: major rework of QubesVm.__init__ and serialization 
No more manually set attributes, each in different way. Now there is one dict
with attrs, defaults, used also for object serialization to XML.
 2012-03-08 11:27:56 +01:00
Marek Marczykowski
9360a18b0c dom0/QubesVm: add include_in_backups property 2012-03-07 19:16:25 +01:00
Marek Marczykowski
b3d0afc360 dom0/dispvm: clone QubesVmLabel object for DispVM 2012-03-07 18:50:56 +01:00
Marek Marczykowski
8b29a09986 dom0/dispvm: icons for DispVM 
Beautiful icons thanks to Agnieszka Kostrzewa!
 2012-03-07 17:04:25 +01:00