Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
1,091 Commits 1 Branch 0 Tags 20 MiB
adc0b6eff5
Commit Graph

218 Commits

Author SHA1 Message Date
Rafal Wojtczuk
2fdf9761c7 qrexec: adjust DispVM code to the new qrexec API 
Note, we have qvm-open-in-vm totally for free.
 2011-07-06 12:32:20 +02:00
Rafal Wojtczuk
b7e8c2708c qrexec: adjust intervm file copy code to the new qrexec API 2011-07-06 10:17:58 +02:00
Rafal Wojtczuk
ecf200dca3 qrexec: last two missing pieces of the new rpc infrastructure 2011-07-05 18:35:03 +02:00
Rafal Wojtczuk
9c7eb81a23 qrexec: add qrexec_client_vm.c 2011-07-05 11:03:31 +02:00
Marek Marczykowski
11a96f70de vm: Load evtchn module by script in /etc/sysconfig/modules 2011-07-02 19:11:15 +02:00
Marek Marczykowski
180d7ed68e dom0: Allow multiple versions of kernel-qubes-vm installed 2011-06-30 01:18:39 +02:00
Marek Marczykowski
f447a458f2 dom0+vm: Update VM kernel mechanism (#242) 
Get kernel from global kernels dir (/var/lib/qubes/vm-kernels), not per-VM. Can
be configured by qvm-prefs (kernel parameter).
New tool: qvm-set-default-kernel

For backward compatibility kernel=None means kernel in VM dir (kernels subdir).
(possibly empty) modules.img should be created in it.
 2011-06-30 01:07:47 +02:00
Marek Marczykowski
42cab54520 dom0: include missing vm-template.conf in rpm package 2011-06-23 23:23:45 +02:00
Marek Marczykowski
21222cc859 dom0: start xenstored service in %post 
This is required by qvm-init-storage and in general to qvm-* works properly.
 2011-06-23 20:04:27 +02:00
Marek Marczykowski
151b15bb8c dom0: Edit xl.conf in %post instead of overriding file (rpm file conflict) 2011-06-23 14:39:17 +02:00
Marek Marczykowski
d9d7a69c27 dom0+vm: Tools for downloading dom0 update by VM (#198) 
Mainly 4 parts:
 - scripts for providing rpmdb and yum repos to VM (choosen by qvm-set-updatevm)
 - VM script for downloading updates (qubes_download_dom0_updates.sh)
 - qfile-dom0-unpacker which receive updates, check signatures and place its in dom0 local yum repo
 - qvm-dom0-upgrade which calls all of above and after all yum gpk-update-viewer

Besides qvm-dom0-upgrade, updates are checked every 6h and user is prompted if
want to download it. At dom0 side gpk-update-icon (disabled yet) should notice
new updates in "local" repo.
 2011-06-22 00:44:48 +02:00
Marek Marczykowski
6d9fdf4729 dom0: Add shortcut qubes-appmenu-select ("Add more shortcuts...") for each VM (#45) 2011-06-12 01:47:15 +02:00
Marek Marczykowski
83d211836a dom0+vm: Trigger appmenus sync after yum transaction (#45), NEW QREXEC COMMAND 
After yum transaction (install/upgrade/remove),
yum-plugin-post-transaction-actions will execute script which trigger
qvm-sync-appmenus in dom0 (through qrexec).
THIS INTRODUCE NEW PREDEFINED COMMAND IN QREXEC
 2011-06-12 01:46:24 +02:00
Marek Marczykowski
a4d1a21b46 dom0: qvm-sync-appmenus - copy *directory.template when needed 2011-06-11 23:09:55 +02:00
Marek Marczykowski
0ffb186681 vm: add -qubes suffix to xenstore-watch to not conflict with xen standard tool 2011-06-07 15:58:55 +02:00
Marek Marczykowski
ae6d2ac70c dom0: include xl.conf in qubes-core-dom0 package 
Disable autoballoon (qmemman will handle it) and specify lock file location
writable by user.
 2011-06-07 15:58:55 +02:00
Marek Marczykowski
62111845ea dom0: set memlock limit to unlimited for qubes users 
Needed to 'xl create' work
 2011-06-07 15:58:54 +02:00
Marek Marczykowski
c789121f84 dom0: migrate from xend to libxl stack - qvm-core 
This is core part of migration. Things not migrated yet:
 - DispVM (qubes_restore needs to be almost rewritten)
 - VM xen config files should be fixed (use "script:" prefix in block device description, perhaps generate this files on VM start)

Huge, slow xend not needed any more, now it conflicts with libxl
 2011-06-01 23:59:53 +02:00
Marek Marczykowski
986f4a888c Merge branch 'r1-beta1-fixes' 
Conflicts:
	dom0/qvm-core/qubes.py
	version_dom0
	version_vm
 2011-05-24 00:20:39 +02:00
Marek Marczykowski
bb073c3cdb vm: Remove root password to allow easy escalation from UI application (#202) 
Ex. gpk-application needs this to work properly while running from user. When
root password is set - polkit-daemon asks for it (according to polkit setting).
 2011-05-12 19:15:24 +02:00
Joanna Rutkowska
8c218c38a7 core-dom0-vaio-fixes is now a separate package 
Also fixes to postun scripts to properly handle updates
 2011-05-10 11:14:41 +02:00
Marek Marczykowski
1891954f71 Revert "Run nm-applet as normal user" 
This reverts commit 2f5b6e6582.

Dbus policy hacking not needed any more. ConsoleKit session is correctly started.
 2011-04-29 02:32:55 +02:00
Marek Marczykowski
655f13e2ec Configure VM network iface on attach (not only on boot) (#190) 2011-04-23 02:31:54 +02:00
Marek Marczykowski
0b66804a7b Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/smoku/core 2011-04-21 23:56:41 +02:00
Tomasz Sterna
47fea4258c We do not want to have StandaloneVM and UtilityVM types. 2011-04-20 00:56:58 +02:00
Marek Marczykowski
1e923e3cb5 Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2011-04-19 09:32:45 +02:00
Marek Marczykowski
d3c96d12bf Rename try 2... 2011-04-19 01:42:42 +02:00
Marek Marczykowski
860bab5662 Rename xenstore-watch to xenstore-watch-qubes 
Xen 4.1.0 provides own xenstore-watch with diffrent args. We can't use it by
default, because we still support xen 3.4.
 2011-04-19 01:38:07 +02:00
Tomasz Sterna
4a0d6b03c6 Disable unnecessary Upstart, Init and XDG Autostart serices. #209 
Move unneded /etc/init/*.conf services to /etc/init/*.conf.disabled.
Start CUPS only in AppVM and UtilityVM.
Start XDG Autostart applications only in domains that makes sense for them.
 2011-04-19 00:11:45 +02:00
Joanna Rutkowska
95488dc59e Pass --level 5 for chkconfigs in core-dom0 post 2011-04-11 14:47:02 +02:00
Joanna Rutkowska
ce7fa7474f vaio_fixes: pass special option to snd-hda-intel module (required to get sound on Vaio Z) 2011-04-11 11:35:25 +02:00
Marek Marczykowski
ba07c11237 Create ~/.local/share dir, as gnote requires it. 2011-04-10 22:12:04 +02:00
Joanna Rutkowska
35bd7db647 Do not restart qubes core in Xen triggers 
This is an attempt to figure out why qubes-core-dom0 update still
causes VM restart...?
 2011-04-08 23:33:52 +02:00
Joanna Rutkowska
ddd8dabe12 vaio-fixes: automaitcally add i8042.nopnp kernel arg to grub 
This is needed to get Sony Vaio Z touchpad working
 2011-04-08 23:18:28 +02:00
Joanna Rutkowska
4062683ef4 Revert "Removed qubes_setupdvm script from package" 
This reverts commit 8ddb8593cb.

Actually we need this script...
 2011-04-08 22:57:11 +02:00
Joanna Rutkowska
9f1c226e17 vaio-fixes rpm requires alsa-utils 2011-04-08 22:52:49 +02:00
Joanna Rutkowska
f6d4f86edc Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 
Conflicts:
	rpm_spec/core-dom0.spec
 2011-04-07 19:39:42 +02:00
Marek Marczykowski
a610ec51d0 Automaticaly start qubes_guid for all VMs when user logon 
This is needed ex for NetVM, which is started without qubes_guid
 2011-04-07 19:23:23 +02:00
Joanna Rutkowska
ae9288dd5c Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-04-07 14:21:06 +02:00
Marek Marczykowski
2f5b6e6582 Run nm-applet as normal user 
Configuration for D-Bus policy and PolicyKit to allow this.
 2011-04-07 14:11:00 +02:00
Joanna Rutkowska
2230e67a39 Optional package with suspend fixes for Vaio Z laptops 2011-04-07 13:34:17 +02:00
Marek Marczykowski
4d3b9b0654 Disable gpk-update-icon autostart 2011-04-07 12:40:19 +02:00
Marek Marczykowski
83c877189d Revert password removal for root and user 
It will require some additional work with ConsoleKit...
 2011-04-07 12:39:10 +02:00
Marek Marczykowski
8047ec780a Remove passwords prompts for user and root (#202) 2011-04-06 23:04:42 +02:00
Joanna Rutkowska
3da9b107d6 Corrected syntax error in core-dom0 spec 2011-04-06 15:15:20 +02:00
Joanna Rutkowska
126fca97c3 Use different repo files depending on %{dist} tag (#197) 2011-04-06 13:59:43 +02:00
Joanna Rutkowska
e01b29dd76 Do not restart VMs during core-dom0 upgrade (#191) 2011-04-06 13:27:01 +02:00
Joanna Rutkowska
c80a1c18ac Add qubes group to suders that can do everything 
(The file in /etc/sudoers.d/ cannot have '.' in its name!)
 2011-04-05 18:01:03 +02:00
Joanna Rutkowska
6aff6d3e2d Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/smoku/core 2011-04-05 14:28:35 +02:00
Tomasz Sterna
8ddb8593cb Removed qubes_setupdvm script from package 2011-04-04 22:20:41 +02:00
Joanna Rutkowska
a83e8c2d2d commonvm: Update repo info, use local RPM keys 2011-04-04 11:27:48 +02:00
Joanna Rutkowska
2f278b8647 Do not try to disable 3rd party services in qubes-core-dom0 %post 
Leavit to the installer (firstboot).
 2011-04-04 00:53:16 +02:00
Joanna Rutkowska
0e61bead87 Do not restart netvms when upgrading qubes-core-dom0 (#175) 2011-04-04 00:52:00 +02:00
Joanna Rutkowska
0104e0eac0 core-dom0 should not add qubes.repo -- this is a task of qubes-release package and installer 2011-04-03 17:05:59 +02:00
Joanna Rutkowska
57d33eea3c Add qvm-copy-to-vm2.gnome to core-appvm rpm 2011-03-31 13:35:36 +02:00
Joanna Rutkowska
d157fe950a Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-03-31 13:30:05 +02:00
Marek Marczykowski
212fd13957 Stop only NM on suspend. (#146) 
Also remove ip_forward setting from sysctl, so NM will not reset it on restart
 2011-03-31 00:19:41 +02:00
Joanna Rutkowska
4eaa03d80f Merge branch 'spring-merge' of git.qubes-os.org:/var/lib/qubes/git/rafal/core 2011-03-30 17:37:49 +02:00
Rafal Wojtczuk
6104af2b2c Implemented console qvm-copy-to-vm 
It waits for the copy to finish, and is capable of killer
progress indicator.
 2011-03-30 17:25:57 +02:00
Rafal Wojtczuk
8e2aa6c825 Renamed qvm-copy-to-vm2 to qvm-trigger-copy-to-vm 
The new name describes the task of the script better.
 2011-03-30 16:48:48 +02:00
Rafal Wojtczuk
9e9fd4c9ba core-appvm.spec: create /home/user/.gnome2/nautilus-scripts 
And symlinks in it that will be visible in "scripts" context
menu of nautilus.
 2011-03-30 12:37:47 +02:00
Joanna Rutkowska
23f4806c7d Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-03-29 13:25:07 +02:00
Marek Marczykowski
c2e0a84c22 Add 01qubes-suspend-netvm to rpm (#146) 2011-03-29 12:39:01 +02:00
Joanna Rutkowska
b1394a1b6a Add BuildRequires: xen-devel 2011-03-29 11:02:29 +02:00
Rafal Wojtczuk
df9549a7db Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/smoku/core into spring-merge 2011-03-28 17:28:24 +02:00
Tomasz Sterna
01b7d9aafc Create needed NetworkManager.conf in netvm. #94 
Also fixed qubes_fix_nm_conf.sh script.
 2011-03-26 11:33:04 +01:00
Marek Marczykowski
d87265851c Merge branch 'spring-merge' of ssh://git.qubes-os.org/var/lib/qubes/git/rafal/core 2011-03-24 16:43:13 -04:00
Marek Marczykowski
f1a8887d11 Merge branch 'master' of git://git.qubes-os.org/joanna/core 2011-03-24 16:41:49 -04:00
Rafal Wojtczuk
57fd6c49bb Removed obsolete code, dom0 side 
Just like the previous commit, it is related to switch to
qrexec-based file copy.
 2011-03-24 17:18:10 +01:00
Rafal Wojtczuk
769213e019 Removed obsolete code, in appvm. 2011-03-24 17:13:21 +01:00
Joanna Rutkowska
e2efae5286 Merge branch 'spring-merge' of git.qubes-os.org:/var/lib/qubes/git/rafal/core 2011-03-24 11:51:43 +01:00
Rafal Wojtczuk
2d37b3e508 Create a separate package with libraries. 2011-03-24 11:39:44 +01:00
Joanna Rutkowska
2c7478dab8 Merge branch 'spring-merge' of git.qubes-os.org:/var/lib/qubes/git/rafal/core 2011-03-24 10:17:15 +01:00
Rafal Wojtczuk
fac1b78ec0 One more build order fix. 2011-03-24 10:03:39 +01:00
Marek Marczykowski
5f4fcedf55 Merge branch 'master' of git://git.qubes-os.org/joanna/core 2011-03-23 20:12:13 -04:00
Marek Marczykowski
b95dd0fcaa Enable build on appvm. 2011-03-23 19:55:35 -04:00
Rafal Wojtczuk
01b75b5987 Enable build on non-appvm. 2011-03-23 17:47:35 +01:00
Joanna Rutkowska
30df10cf18 Merge branch 'spring-merge' of git.qubes-os.org:/var/lib/qubes/git/rafal/core 2011-03-23 17:15:15 +01:00
Rafal Wojtczuk
0b208e8664 Move libs and /var/run/qubes out of qubes-netvm 
They are already in core-appvm package.
 2011-03-23 11:48:06 +01:00
Rafal Wojtczuk
5350e5cc5b move qrexec_agent out of core-netvm.spec 
It is already in core-appvm.
 2011-03-23 11:46:53 +01:00
Rafal Wojtczuk
488eda21d9 Merge branch 'blockless' into spring-merge 
Conflicts:
	appvm/Makefile
	appvm/qubes_core
	netvm/qubes_core
	rpm_spec/core-appvm.spec
	rpm_spec/core-netvm.spec
 2011-03-21 13:54:35 +01:00
Joanna Rutkowska
4c5d9f56c7 Tag RPMs with dist info 2011-03-16 19:14:42 +01:00
Rafal Wojtczuk
4087b1d052 Package qvm-copy-to-vm2*, too. 2011-03-16 16:47:32 +01:00
Marek Marczykowski
1892bef66f Require xen 3.4.3-6 with fixed /etc/xen/scripts/block 2011-03-16 11:32:51 -04:00
Marek Marczykowski
1c505589c1 Move xenstore-watch for VM from AppVM to common. Add to core-common.spec 2011-03-16 11:41:18 +01:00
Marek Marczykowski
01a1aeb403 Do not try to disable 'reboot' service 2011-03-16 11:41:18 +01:00
Marek Marczykowski
33ed1ecad8 Drop forced fedora version from requires 2011-03-16 11:41:18 +01:00
Marek Marczykowski
2818f6dfe1 Move xenstore-watch for VM from AppVM to common. Add to core-common.spec 2011-03-15 19:47:26 +01:00
Rafal Wojtczuk
84b1a186ff Added qfile-unpacker and qfile-daemon 2011-03-15 16:43:43 +01:00
Rafal Wojtczuk
f0a7620449 Package qfile-agent-dvm, too. 2011-03-15 16:19:42 +01:00
Rafal Wojtczuk
b8d983cfa9 Added qfile-agent 2011-03-15 16:07:00 +01:00
Rafal Wojtczuk
6b6e6b7520 Added new qvm-open-in-dvm, aka qvm-open-in-dvm2 
Small, childless bash script.
 2011-03-14 11:25:18 +01:00
Rafal Wojtczuk
5d3c43e4fa created qfile-daemon-dvm 
Mostly code from qfilexchgd; it will be removed soon.
 2011-03-14 10:43:09 +01:00
Marek Marczykowski
b04b36af2c Register VM services also on update 2011-03-11 23:42:49 +01:00
Marek Marczykowski
3d845e4f61 Add qubes_netwatcher to proxyvm spec 2011-03-11 23:33:15 +01:00
Marek Marczykowski
de5e06e462 Remove duplicated entry in core-dom0.spec 2011-03-11 02:02:13 +01:00
Marek Marczykowski
08b4490b91 NetVM, AppVM, ProxyVM from single template - VM side (missing files...) 2011-03-11 01:42:42 +01:00
Marek Marczykowski
c7a832a279 NetVM, AppVM, ProxyVM from single template - VM side 
Modify VM packages to:
- do not conflicts
- starts services if its VM type need it

Added core-proxyvm (firewall) and core-commonvm (common parts) packages.
 2011-03-11 01:38:04 +01:00
Rafal Wojtczuk
c2214e854c Added dvm_file_editor. 
It works with qrexec - reads/writes data from stdin/stdout.
 2011-03-10 16:50:40 +01:00
Marek Marczykowski
7e29c397aa Add 30-qubes_external_ip to netvm.spec 2011-03-10 16:09:37 +01:00