Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
0aae0c189c
core-agent-linux/debian/qubes-core-agent.install

150 lines
5.4 KiB
Plaintext
Raw Normal View History

debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/X11/xorg-preload-apps.conf
etc/apt/apt.conf.d/00notify-hook
debian: disable timer-based apt-get Debian stretch in default configuration calls apt-get update every 24h. And additionally, have automatic unattended security updates enabled. Generally it would be good thing on standalone system, but in AppVM which loose its rootfs changes after restart it is a waste of resources. Especially when it kicks in on multiple VMs simultaneously, while on battery (apt-daily.service have ConditionACPower=true, but VM don't have that information...). It would make some sense on TemplateVM/StandaloneVM, but then it kicks in just at VM startup. Which conflicts with starting the update manually then (by clicking "update VM" button in manager for example, or using salt). So, disable this feature completely. The actual solution is based on pkg-manager-no-autoupdate by @adrelanos. Fixes QubesOS/qubes-issues#2621
2017-10-19 15:03:06 +02:00
etc/apt/apt.conf.d/70no-unattended
Ship Qubes 4.0 repository definition and keys
2017-06-13 11:38:49 +02:00
etc/apt/sources.list.d/qubes-r4.list
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/apt/trusted.gpg.d/qubes-archive-keyring.gpg
Disable automatic scaling in GNOME/GTK applications GNOME automatically set scaling factor to 2 when HiDPI is detected. Unfortunately it does it also on not really HiDPI displays, making the whole UI unusably large. There is no middle ground - scaling factor must be integer, so 1.5 is not supported. Lets opt on a conservative side and fallback to scaling factor 1. Solution by @alyssais, thanks! Fixes QubesOS/qubes-issues#3108
2018-01-12 05:52:52 +01:00
etc/dconf/db/local.d/dpi
Ship grub configuration Qubes VM require few config options in grub. Ship appropriate configuration. Debian have grub.d support, so it can be done cleanly. On Fedora, /etc/default/grub needs to be modified. Still keep the options in separate file, but include it manually from /etc/default/grub. QubesOS/qubes-issues#2577
2017-06-13 01:36:12 +02:00
etc/default/grub.d/30-qubes.cfg
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/fstab
etc/needrestart/conf.d/50_qubes.conf
etc/profile.d/qt_x11_no_mitshm.sh
etc/qubes-rpc/qubes.Backup
etc/qubes-rpc/qubes.DetachPciDevice
etc/qubes-rpc/qubes.Filecopy
etc/qubes-rpc/qubes.GetAppmenus
etc/qubes-rpc/qubes.GetImageRGBA
etc/qubes-rpc/qubes.InstallUpdatesGUI
etc/qubes-rpc/qubes.OpenInVM
etc/qubes-rpc/qubes.OpenURL
Implement qubes.PostInstall service This is meant to notify dom0 about features supported by just-installed template. This service is called by dom0 just after template installation. Fixes QubesOS/qubes-issues#1637 Documentation pending: QubesOS/qubes-issues#2829
2017-05-26 05:19:21 +02:00
etc/qubes-rpc/qubes.PostInstall
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes-rpc/qubes.ResizeDisk
etc/qubes-rpc/qubes.Restore
etc/qubes-rpc/qubes.SelectDirectory
etc/qubes-rpc/qubes.SelectFile
etc/qubes-rpc/qubes.SetDateTime
etc/qubes-rpc/qubes.StartApp
etc/qubes-rpc/qubes.SuspendPost
etc/qubes-rpc/qubes.SuspendPostAll
etc/qubes-rpc/qubes.SuspendPre
etc/qubes-rpc/qubes.SuspendPreAll
etc/qubes-rpc/qubes.VMShell
Add qubes.VMRootShell service It is the same as qubes.VMShell - the actual difference is in qrexec policy, which contains 'user=root' option. QubesOS/qubes-issues#2572
2017-06-09 23:01:46 +02:00
etc/qubes-rpc/qubes.VMRootShell
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes-rpc/qubes.WaitForSession
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
etc/qubes-rpc/qubes.GetDate
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes-suspend-module-blacklist
etc/qubes/autostart/*
Implement qubes.PostInstall service This is meant to notify dom0 about features supported by just-installed template. This service is called by dom0 just after template installation. Fixes QubesOS/qubes-issues#1637 Documentation pending: QubesOS/qubes-issues#2829
2017-05-26 05:19:21 +02:00
etc/qubes/post-install.d/README
etc/qubes/post-install.d/*.sh
qubes-rpc: add 'wait-for-session=1' option for some services Configure selected services to wait until GUI session is available. QubesOS/qubes-issues#2974
2017-08-05 21:39:42 +02:00
etc/qubes/rpc-config/qubes.OpenInVM
etc/qubes/rpc-config/qubes.OpenURL
etc/qubes/rpc-config/qubes.SelectFile
etc/qubes/rpc-config/qubes.SelectDirectory
etc/qubes/rpc-config/qubes.StartApp
etc/qubes/rpc-config/qubes.InstallUpdatesGUI
Set 'wait-for-session=1' for 'qubes.VMShell+WaitForSession' This is intended to be used for DispVMs for which only a single RPC call can be made before they are destroyed. Fixes QubesOS/qubes-issues#3012
2018-01-14 20:20:58 +01:00
etc/qubes/rpc-config/qubes.VMShell+WaitForSession
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes/suspend-post.d/README
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
etc/qubes/suspend-post.d/*.sh
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes/suspend-pre.d/README
etc/sudoers.d/qt_x11_no_mitshm
etc/sudoers.d/umask
etc/sysctl.d/20_tcp_timestamps.conf
etc/sysctl.d/80-qubes.conf
debian: make haveged.service patch less intrusive... ...but installed on all Debian versions. This is mostly required by vebose file list in debian/qubes-core-agent.install. But also make it use new options when upstream will set them. QubesOS/qubes-issues#2161
2017-05-22 17:30:06 +02:00
etc/systemd/system/haveged.service
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/udev/rules.d/50-qubes-misc.rules
lib/modules-load.d/qubes-core.conf
lib/systemd/system-preset/75-qubes-vm.preset
lib/systemd/system/ModemManager.service.d/30_qubes.conf
lib/systemd/system/NetworkManager-wait-online.service.d/30_qubes.conf
lib/systemd/system/NetworkManager.service.d/30_qubes.conf
lib/systemd/system/anacron-resume.service.d/30_qubes.conf
lib/systemd/system/anacron.service.d/30_qubes.conf
lib/systemd/system/avahi-daemon.service.d/30_qubes.conf
lib/systemd/system/chronyd.service.d/30_qubes.conf
lib/systemd/system/cron.service.d/30_qubes.conf
lib/systemd/system/cups.path.d/30_qubes.conf
lib/systemd/system/cups.service.d/30_qubes.conf
lib/systemd/system/cups.socket.d/30_qubes.conf
Disable cups-browsed service together with cups It tries to connect to cups every second and doesn't do anything else when cups is disabled. So disable (or enable) both of them at the same time.
2017-12-05 17:53:44 +01:00
lib/systemd/system/cups-browsed.service.d/30_qubes.conf
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
lib/systemd/system/exim4.service.d/30_qubes.conf
lib/systemd/system/getty@tty.service.d/30_qubes.conf
lib/systemd/system/netfilter-persistent.service.d/30_qubes.conf
lib/systemd/system/org.cups.cupsd.path.d/30_qubes.conf
lib/systemd/system/org.cups.cupsd.service.d/30_qubes.conf
lib/systemd/system/org.cups.cupsd.socket.d/30_qubes.conf
lib/systemd/system/qubes-early-vm-config.service
lib/systemd/system/qubes-misc-post.service
lib/systemd/system/qubes-mount-dirs.service
Resize root filesystem at VM startup if needed Check if root device was enlarged while domain was powered off and resize the filesystem in such a case. QubesOS/qubes-issues#3173 QubesOS/qubes-issues#3143
2017-10-18 16:57:39 +02:00
lib/systemd/system/qubes-rootfs-resize.service
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
lib/systemd/system/qubes-sysinit.service
lib/systemd/system/qubes-update-check.service
lib/systemd/system/qubes-update-check.timer
Implement qrexec-based connection to updates proxy Configure package manager to use 127.0.0.1:8082 as proxy instead of "magic" IP intercepted later. The listen on this port and whenever new connection arrives, spawn qubes.UpdatesProxy service call (to default target domain - subject to configuration in dom0) and connect its stdin/out to the local TCP connection. This part use systemd.socket unit in case of systemd, and ncat --exec otherwise. On the other end - in target domain - simply pass stdin/out to updates proxy (tinyproxy) running locally. It's important to _not_ configure the same VM to both be updates proxy and use it. In practice such configuration makes little sense - if VM can access network (which is required to run updates proxy), package manager can use it directly. Even if this network access is through some VPN/Tor. If a single VM would be configured as both proxy provider and proxy user, connection would loop back to itself. Because of this, proxy connection redirection (to qrexec service) is disabled when the same VM also run updates proxy. Fixes QubesOS/qubes-issues#1854
2017-05-26 03:07:47 +02:00
lib/systemd/system/qubes-updates-proxy-forwarder@.service
lib/systemd/system/qubes-updates-proxy-forwarder.socket
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
lib/systemd/system/qubes-sync-time.service
lib/systemd/system/qubes-sync-time.timer
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
lib/systemd/system/systemd-random-seed.service.d/30_qubes.conf
lib/systemd/system/tinyproxy.service.d/30_not_needed_in_qubes_by_default.conf
lib/systemd/system/tmp.mount.d/30_qubes.conf
lib/systemd/system/tor.service.d/30_qubes.conf
lib/systemd/system/tor@default.service.d/30_qubes.conf
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
lib/systemd/system/systemd-timesyncd.service.d/30_qubes.conf
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/bin/qubes-desktop-run
usr/bin/qubes-open
usr/bin/qubes-session-autostart
Add misc/qubes-run-terminal to launch any available terminal emulator
2018-03-27 22:19:00 +02:00
usr/bin/qubes-run-terminal
Add convenient wrappers for qvm-copy-to-vm and qvm-move-to-vm Default `ask` policy ignore target domain specified by the caller, so it doesn't make sense to specify one. Provide convenient wrappers not needing one. Do not change behaviour of existing tools for compatibility reasons. Fixes QubesOS/qubes-issues#3141
2017-10-02 03:19:30 +02:00
usr/bin/qvm-copy
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/bin/qvm-copy-to-vm
usr/bin/qvm-features-request
Add convenient wrappers for qvm-copy-to-vm and qvm-move-to-vm Default `ask` policy ignore target domain specified by the caller, so it doesn't make sense to specify one. Provide convenient wrappers not needing one. Do not change behaviour of existing tools for compatibility reasons. Fixes QubesOS/qubes-issues#3141
2017-10-02 03:19:30 +02:00
usr/bin/qvm-move
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/bin/qvm-move-to-vm
usr/bin/qvm-open-in-dvm
usr/bin/qvm-open-in-vm
Rename qvm-run to qvm-run-vm Avoid conflict with qvm-run from qubes-core-admin-client package.
2017-05-23 02:55:31 +02:00
usr/bin/qvm-run-vm
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
usr/bin/qvm-sync-clock
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/bin/xenstore-watch-qubes
Revert "firewall: switch to python 3" This reverts commit 5dfcf06ef4b5ae9889dddb26b30849146fa0557c. python3-daemon isn't widespread enough yet - for Debian jessie available only in packports. In addition to the revert itself, adjust packaging for this change (mostly for Debian).
2017-05-21 01:55:00 +02:00
usr/lib/python2.7/dist-packages/qubesagent-*.egg-info/*
usr/lib/python2.7/dist-packages/qubesagent/*
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/lib/qubes-bind-dirs.d/30_cron.conf
usr/lib/qubes/close-window
usr/lib/qubes/init/bind-dirs.sh
usr/lib/qubes/init/control-printer-icon.sh
usr/lib/qubes/init/functions
usr/lib/qubes/init/misc-post-stop.sh
usr/lib/qubes/init/misc-post.sh
usr/lib/qubes/init/mount-dirs.sh
usr/lib/qubes/init/qubes-early-vm-config.sh
usr/lib/qubes/init/qubes-random-seed.sh
usr/lib/qubes/init/qubes-sysinit.sh
Resize root filesystem at VM startup if needed Check if root device was enlarged while domain was powered off and resize the filesystem in such a case. QubesOS/qubes-issues#3173 QubesOS/qubes-issues#3143
2017-10-18 16:57:39 +02:00
usr/lib/qubes/init/resize-rootfs-if-needed.sh
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/lib/qubes/init/setup-rw.sh
usr/lib/qubes/init/setup-rwdev.sh
usr/lib/qubes/prepare-suspend
usr/lib/qubes/qfile-agent
usr/lib/qubes/qfile-unpacker
usr/lib/qubes/qopen-in-vm
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
usr/lib/qubes/qubes-sync-clock
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/lib/qubes/qrun-in-vm
usr/lib/qubes/qubes-trigger-sync-appmenus.sh
usr/lib/qubes/qvm-copy-to-vm.gnome
usr/lib/qubes/qvm-copy-to-vm.kde
usr/lib/qubes/qvm-move-to-vm.gnome
usr/lib/qubes/qvm-move-to-vm.kde
Add support for new root volume partition layout to qubes.ResizeDisk If root filesystem is the last partition (new layout), resize it in-place. Use 'parted' tool because it can resize just one partition, without need to specify the whole new partition table. Since the partition is mounted, parted is unhappy to modify it. Force it by answering to its interactive prompts, and add (apparently not documented) ---pretend-input-tty to use those answers even though stdin is not a tty. Split the operation into multiple parted calls, for more reliable interactive prompts handling. Qubes 3.x disk layout (no partition table) is also supported, but the one that was used in Qubes 4.0 rc1 (root filesystem as the first partition) is not. Fixes QubesOS/qubes-issues#3173 QubesOS/qubes-issues#3143
2017-10-17 20:51:12 +02:00
usr/lib/qubes/resize-rootfs
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/lib/qubes/tar2qfile
usr/lib/qubes/update-proxy-configs
usr/lib/qubes/upgrades-installed-check
usr/lib/qubes/upgrades-status-notify
usr/lib/qubes/vm-file-editor
usr/lib/qubes/xdg-icon
Handle tinyproxy path changed in upstream Related commit https://github.com/tinyproxy/tinyproxy/commit/8d0ea71486688323fff65bc3730bae209a70db7b Fixes QubesOS/qubes-issues#4973 and QubesOS/qubes-issues#4929
2019-04-16 11:39:44 +02:00
usr/lib/qubes/tinyproxy-wrapper
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/lib/systemd/user/pulseaudio.service.d/30_qubes.conf
usr/lib/systemd/user/pulseaudio.socket.d/30_qubes.conf
usr/share/glib-2.0/schemas/*
usr/share/kde4/services/*.desktop
Install KDE actions for KDE5 Fixes QubesOS/qubes-issues#3449
2018-01-09 17:42:21 +01:00
usr/share/kservices5/ServiceMenus/*.desktop
Add misc/qubes-run-terminal to launch any available terminal emulator
2018-03-27 22:19:00 +02:00
usr/share/applications/*.desktop
debian: install man pages Man pages were installed only in RPM package...
2017-06-20 23:34:04 +02:00
usr/share/man/man1/qvm-*
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/share/qubes/mime-override/globs
usr/share/qubes/qubes-master-key.asc
Introduce /usr/share/qubes/marker-vm Make it easy for packages to detect Qubes VM. Fixes QubesOS/qubes-issues#1963
2019-01-18 23:20:39 +01:00
usr/share/qubes/marker-vm
Reference in New Issue Copy Permalink