Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
239 Commits 1 Branch 0 Tags 15 MiB
bba0e6e1ef
Commit Graph

239 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tomasz Sterna
bba0e6e1ef FwVM network changes watcher script 2011-03-11 19:39:52 +01:00
Tomasz Sterna
dc8325f564 Use DNS IPs in firewall rules 2011-03-11 19:39:26 +01:00
Tomasz Sterna
ae2d170a7e Fixed external_ip permissions setting and netvm_domid entry handling. 2011-03-10 13:38:49 +01:00
Tomasz Sterna
a71b846ee2 Added FirewallVM related VM scripts 2011-03-09 20:50:13 +01:00
Tomasz Sterna
afbdfe8ae4 Store netvm domid in FwVM. 2011-03-09 20:38:29 +01:00
Tomasz Sterna
58a4b4c82b Implemented qubes_netvm_external_ip feature. 2011-03-09 20:38:29 +01:00
Tomasz Sterna
87ff30fe26 Fixed xenstore-chmod call syntax 2011-03-09 19:47:08 +01:00
Tomasz Sterna
6ad91617a7 Store the state of FwVM rules 2011-03-09 18:07:22 +01:00
Tomasz Sterna
fd8ecca9bd Create qubes_iptables_error xenstore file in FwVM and set its permissions. 2011-03-09 17:51:05 +01:00
Tomasz Sterna
ca81f0103d Update firewall rules on VM start 2011-03-09 17:51:05 +01:00
Tomasz Sterna
f05c244321 Added AppVM version of xenstore-watch. 2011-03-09 17:51:05 +01:00
Tomasz Sterna
a8cef51b67 Use new, simplified firewall rules data scheme 2011-03-03 22:40:36 +01:00
Tomasz Sterna
0a8249d83f Update firewall iptables file during VM start 2011-03-02 15:04:11 +01:00
Tomasz Sterna
45f84b1713 Implemented iptables rules file generator 2011-03-02 15:03:21 +01:00
Tomasz Sterna
6083384e6d Store firewal rules in Python data structure 2011-03-02 15:02:46 +01:00
Tomasz Sterna
353f04e186 Properly set FwVM xenstore files 2011-03-02 15:01:30 +01:00
Tomasz Sterna
d758eb8258 Removed trailing whitespace 2011-03-02 15:00:19 +01:00
Tomasz Sterna
a450e51126 Implemented firewall_conf storage 2011-02-21 18:13:27 +01:00
Tomasz Sterna
8ca63ba176 Start xend and xenstored during package installation 2011-02-11 00:34:46 +01:00
Tomasz Sterna
a088e14244 Fixed setting netvm of FWVM 2011-02-11 00:34:46 +01:00
Tomasz Sterna
053ca36ca8 Refactored QubesVm.is_*vm() methods 2011-02-11 00:34:46 +01:00
Tomasz Sterna
4297c1284a Show FirewallVMs in qvm-ls 2011-02-09 21:21:41 +01:00
Tomasz Sterna
8c82361f5e Implemented QubesFirewallVm subclass of QubesNetVm 2011-02-09 21:21:14 +01:00
Joanna Rutkowska
80826329a7 version 1.3.16-dom0 2010-11-18 15:30:44 +01:00
Joanna Rutkowska
a5c2d8bbc5 Merge branch 'fixes3' of git://qubes-os.org/rafal/core 2010-11-18 15:29:37 +01:00
Rafal Wojtczuk
b3511c678a Use "conflict" instead of "requires gui" in rpm spec. 2010-11-18 14:33:18 +01:00
Joanna Rutkowska
decee4d7d8 version 1.3.15-dom0 2010-11-04 20:34:41 +01:00
Rafal Wojtczuk
1fccf9c309 Use delayed_transaction_seq from sender, not receiver. 
Apparently, qvm-copy-to-vm when receiver already has an incoming pendrive
worked only by coincidence.
 2010-10-28 12:39:03 +02:00
Joanna Rutkowska
93cc4d928b version 1.3.14-dom0 2010-10-06 14:16:51 +02:00
Joanna Rutkowska
1e7c66337c Require gui-dom0 >= 1.1.13 that knows it doesn't own /var/{log,run}/qubes dirs 2010-10-06 14:16:27 +02:00
Rafal Wojtczuk
28880cae52 Merged triggers. 2010-10-06 13:08:17 +02:00
Rafal Wojtczuk
1f5300da85 Move /var/log/qubes and /var/run/qubes to qubes-core rpm from qubes-gui 
Because /var/log/qubes is used in qubes-core %post. While at it, do the same with
/var/run/qubes.
 2010-10-06 11:00:52 +02:00
Rafal Wojtczuk
7c1babe8aa Do not error when qvm-get-default-netvm returns empty string. 
It happens when installing qubes-core-dom0 for the first time.
 2010-10-06 10:55:32 +02:00
Joanna Rutkowska
17f6bb8ede version 1.3.13 2010-10-04 19:38:18 +02:00
Joanna Rutkowska
8ec8567727 Fixed the logic for /home and /usr/local linking/copying for AppVMs 
We assume that the template's root fs already has the following symlinks:
/home -> /rw/home
/usr/local -> /rw/usrlocal
 2010-10-04 19:36:54 +02:00
Joanna Rutkowska
28e1f962e5 core dom0 rpm: restart qubes_netvm only when using netvm in Dom0 
If we use a separate netvm, then core update in Dom0 doesn't really change the networking,
worse, if we restarted netvm it would get another XID, which would break our DispVM savefile.

One day we should fix it!
 2010-10-04 17:51:01 +02:00
Joanna Rutkowska
0ae51cfa73 version 1.3.12-dom0 2010-10-04 15:26:24 +02:00
Joanna Rutkowska
bbe085711d Restart qubes_core after Xen update 
This is needed to re-set qubes permissions on some Xen sockets
 2010-10-04 15:25:58 +02:00
Joanna Rutkowska
18dc0b67c7 dom0: do not do mem-set for dom0 in init.d/qubes_core 2010-10-04 15:20:41 +02:00
Joanna Rutkowska
e91ee0acb3 dom0 init.d/qubes_core: kill some processes on stop() 2010-10-04 15:20:09 +02:00
Joanna Rutkowska
e1c0aa6eef dom0 rpm: start/stop qubes services for install/update 2010-10-04 14:21:14 +02:00
Joanna Rutkowska
2cc989f947 version 1.3.8 2010-09-30 19:28:31 +02:00
Rafal Wojtczuk
862bd1f11c DVM: do not mem-set 400 
qmemman will do the job automagically.
 2010-09-30 18:26:35 +02:00
Rafal Wojtczuk
28fbb48845 Attach/detach pci devices from netvm upon resume/suspend 2010-09-30 18:22:26 +02:00
Rafal Wojtczuk
a4585f1369 Allow numbers in vmname in qubes_penctl. 2010-09-27 17:52:10 +02:00
Rafal Wojtczuk
ece96ba3fb Make qfilexchgd listen for change in /vm to detect vm start/stop 
... instead of watching /local/domain, which changes whenever meminfo-wwriter
pushes data.
 2010-09-27 17:42:34 +02:00
Rafal Wojtczuk
acac39ec41 rpmbuild wants pyo files in %files 2010-09-27 17:41:03 +02:00
Rafal Wojtczuk
90e3f4ffd8 Add reset_vm_configs.py script 2010-09-27 16:58:02 +02:00
Rafal Wojtczuk
2244ea95bf Separate create_config_file() function in qubes.py 2010-09-27 16:53:17 +02:00
Joanna Rutkowska
9fcaff1aea v1.3.7-dom0 2010-09-23 12:42:59 +02:00