Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
128af0d191
core-agent-linux/debian/qubes-core-agent.install

140 lines
5.1 KiB
Plaintext
Raw Normal View History

debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/X11/xorg-preload-apps.conf
etc/apt/apt.conf.d/00notify-hook
debian: disable timer-based apt-get Debian stretch in default configuration calls apt-get update every 24h. And additionally, have automatic unattended security updates enabled. Generally it would be good thing on standalone system, but in AppVM which loose its rootfs changes after restart it is a waste of resources. Especially when it kicks in on multiple VMs simultaneously, while on battery (apt-daily.service have ConditionACPower=true, but VM don't have that information...). It would make some sense on TemplateVM/StandaloneVM, but then it kicks in just at VM startup. Which conflicts with starting the update manually then (by clicking "update VM" button in manager for example, or using salt). So, disable this feature completely. The actual solution is based on pkg-manager-no-autoupdate by @adrelanos. Fixes QubesOS/qubes-issues#2621
2017-10-19 15:03:06 +02:00
etc/apt/apt.conf.d/70no-unattended
Ship Qubes 4.0 repository definition and keys
2017-06-13 11:38:49 +02:00
etc/apt/sources.list.d/qubes-r4.list
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/apt/trusted.gpg.d/qubes-archive-keyring.gpg
Ship grub configuration Qubes VM require few config options in grub. Ship appropriate configuration. Debian have grub.d support, so it can be done cleanly. On Fedora, /etc/default/grub needs to be modified. Still keep the options in separate file, but include it manually from /etc/default/grub. QubesOS/qubes-issues#2577
2017-06-13 01:36:12 +02:00
etc/default/grub.d/30-qubes.cfg
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/fstab
etc/needrestart/conf.d/50_qubes.conf
etc/profile.d/qt_x11_no_mitshm.sh
etc/qubes-rpc/qubes.Backup
etc/qubes-rpc/qubes.DetachPciDevice
etc/qubes-rpc/qubes.Filecopy
etc/qubes-rpc/qubes.GetAppmenus
etc/qubes-rpc/qubes.GetImageRGBA
etc/qubes-rpc/qubes.InstallUpdatesGUI
etc/qubes-rpc/qubes.OpenInVM
etc/qubes-rpc/qubes.OpenURL
Implement qubes.PostInstall service This is meant to notify dom0 about features supported by just-installed template. This service is called by dom0 just after template installation. Fixes QubesOS/qubes-issues#1637 Documentation pending: QubesOS/qubes-issues#2829
2017-05-26 05:19:21 +02:00
etc/qubes-rpc/qubes.PostInstall
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes-rpc/qubes.ResizeDisk
etc/qubes-rpc/qubes.Restore
etc/qubes-rpc/qubes.SelectDirectory
etc/qubes-rpc/qubes.SelectFile
etc/qubes-rpc/qubes.SetDateTime
etc/qubes-rpc/qubes.StartApp
etc/qubes-rpc/qubes.SuspendPost
etc/qubes-rpc/qubes.SuspendPostAll
etc/qubes-rpc/qubes.SuspendPre
etc/qubes-rpc/qubes.SuspendPreAll
etc/qubes-rpc/qubes.VMShell
Add qubes.VMRootShell service It is the same as qubes.VMShell - the actual difference is in qrexec policy, which contains 'user=root' option. QubesOS/qubes-issues#2572
2017-06-09 23:01:46 +02:00
etc/qubes-rpc/qubes.VMRootShell
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes-rpc/qubes.WaitForSession
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
etc/qubes-rpc/qubes.GetDate
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes-suspend-module-blacklist
etc/qubes/autostart/*
Implement qubes.PostInstall service This is meant to notify dom0 about features supported by just-installed template. This service is called by dom0 just after template installation. Fixes QubesOS/qubes-issues#1637 Documentation pending: QubesOS/qubes-issues#2829
2017-05-26 05:19:21 +02:00
etc/qubes/post-install.d/README
etc/qubes/post-install.d/*.sh
qubes-rpc: add 'wait-for-session=1' option for some services Configure selected services to wait until GUI session is available. QubesOS/qubes-issues#2974
2017-08-05 21:39:42 +02:00
etc/qubes/rpc-config/qubes.OpenInVM
etc/qubes/rpc-config/qubes.OpenURL
etc/qubes/rpc-config/qubes.SelectFile
etc/qubes/rpc-config/qubes.SelectDirectory
etc/qubes/rpc-config/qubes.StartApp
etc/qubes/rpc-config/qubes.InstallUpdatesGUI
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes/suspend-post.d/README
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
etc/qubes/suspend-post.d/*.sh
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/qubes/suspend-pre.d/README
etc/sudoers.d/qt_x11_no_mitshm
etc/sudoers.d/umask
etc/sysctl.d/20_tcp_timestamps.conf
etc/sysctl.d/80-qubes.conf
debian: make haveged.service patch less intrusive... ...but installed on all Debian versions. This is mostly required by vebose file list in debian/qubes-core-agent.install. But also make it use new options when upstream will set them. QubesOS/qubes-issues#2161
2017-05-22 17:30:06 +02:00
etc/systemd/system/haveged.service
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
etc/udev/rules.d/50-qubes-misc.rules
lib/modules-load.d/qubes-core.conf
lib/systemd/system-preset/75-qubes-vm.preset
lib/systemd/system/ModemManager.service.d/30_qubes.conf
lib/systemd/system/NetworkManager-wait-online.service.d/30_qubes.conf
lib/systemd/system/NetworkManager.service.d/30_qubes.conf
lib/systemd/system/anacron-resume.service.d/30_qubes.conf
lib/systemd/system/anacron.service.d/30_qubes.conf
lib/systemd/system/avahi-daemon.service.d/30_qubes.conf
lib/systemd/system/chronyd.service.d/30_qubes.conf
lib/systemd/system/cron.service.d/30_qubes.conf
lib/systemd/system/cups.path.d/30_qubes.conf
lib/systemd/system/cups.service.d/30_qubes.conf
lib/systemd/system/cups.socket.d/30_qubes.conf
lib/systemd/system/exim4.service.d/30_qubes.conf
lib/systemd/system/getty@tty.service.d/30_qubes.conf
lib/systemd/system/netfilter-persistent.service.d/30_qubes.conf
lib/systemd/system/org.cups.cupsd.path.d/30_qubes.conf
lib/systemd/system/org.cups.cupsd.service.d/30_qubes.conf
lib/systemd/system/org.cups.cupsd.socket.d/30_qubes.conf
lib/systemd/system/qubes-early-vm-config.service
lib/systemd/system/qubes-misc-post.service
lib/systemd/system/qubes-mount-dirs.service
lib/systemd/system/qubes-sysinit.service
lib/systemd/system/qubes-update-check.service
lib/systemd/system/qubes-update-check.timer
Implement qrexec-based connection to updates proxy Configure package manager to use 127.0.0.1:8082 as proxy instead of "magic" IP intercepted later. The listen on this port and whenever new connection arrives, spawn qubes.UpdatesProxy service call (to default target domain - subject to configuration in dom0) and connect its stdin/out to the local TCP connection. This part use systemd.socket unit in case of systemd, and ncat --exec otherwise. On the other end - in target domain - simply pass stdin/out to updates proxy (tinyproxy) running locally. It's important to _not_ configure the same VM to both be updates proxy and use it. In practice such configuration makes little sense - if VM can access network (which is required to run updates proxy), package manager can use it directly. Even if this network access is through some VPN/Tor. If a single VM would be configured as both proxy provider and proxy user, connection would loop back to itself. Because of this, proxy connection redirection (to qrexec service) is disabled when the same VM also run updates proxy. Fixes QubesOS/qubes-issues#1854
2017-05-26 03:07:47 +02:00
lib/systemd/system/qubes-updates-proxy-forwarder@.service
lib/systemd/system/qubes-updates-proxy-forwarder.socket
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
lib/systemd/system/qubes-sync-time.service
lib/systemd/system/qubes-sync-time.timer
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
lib/systemd/system/systemd-random-seed.service.d/30_qubes.conf
lib/systemd/system/tinyproxy.service.d/30_not_needed_in_qubes_by_default.conf
lib/systemd/system/tmp.mount.d/30_qubes.conf
lib/systemd/system/tor.service.d/30_qubes.conf
lib/systemd/system/tor@default.service.d/30_qubes.conf
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
lib/systemd/system/systemd-timesyncd.service.d/30_qubes.conf
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/bin/qubes-desktop-run
usr/bin/qubes-open
usr/bin/qubes-session-autostart
Add convenient wrappers for qvm-copy-to-vm and qvm-move-to-vm Default `ask` policy ignore target domain specified by the caller, so it doesn't make sense to specify one. Provide convenient wrappers not needing one. Do not change behaviour of existing tools for compatibility reasons. Fixes QubesOS/qubes-issues#3141
2017-10-02 03:19:30 +02:00
usr/bin/qvm-copy
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/bin/qvm-copy-to-vm
usr/bin/qvm-features-request
Add convenient wrappers for qvm-copy-to-vm and qvm-move-to-vm Default `ask` policy ignore target domain specified by the caller, so it doesn't make sense to specify one. Provide convenient wrappers not needing one. Do not change behaviour of existing tools for compatibility reasons. Fixes QubesOS/qubes-issues#3141
2017-10-02 03:19:30 +02:00
usr/bin/qvm-move
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/bin/qvm-move-to-vm
usr/bin/qvm-open-in-dvm
usr/bin/qvm-open-in-vm
Rename qvm-run to qvm-run-vm Avoid conflict with qvm-run from qubes-core-admin-client package.
2017-05-23 02:55:31 +02:00
usr/bin/qvm-run-vm
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
usr/bin/qvm-sync-clock
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/bin/xenstore-watch-qubes
usr/lib/python2.7/dist-packages/qubesxdg.py
Revert "firewall: switch to python 3" This reverts commit 5dfcf06ef4b5ae9889dddb26b30849146fa0557c. python3-daemon isn't widespread enough yet - for Debian jessie available only in packports. In addition to the revert itself, adjust packaging for this change (mostly for Debian).
2017-05-21 01:55:00 +02:00
usr/lib/python2.7/dist-packages/qubesagent-*.egg-info/*
usr/lib/python2.7/dist-packages/qubesagent/*
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/lib/qubes-bind-dirs.d/30_cron.conf
usr/lib/qubes/close-window
usr/lib/qubes/init/bind-dirs.sh
usr/lib/qubes/init/control-printer-icon.sh
usr/lib/qubes/init/functions
usr/lib/qubes/init/misc-post-stop.sh
usr/lib/qubes/init/misc-post.sh
usr/lib/qubes/init/mount-dirs.sh
usr/lib/qubes/init/qubes-early-vm-config.sh
usr/lib/qubes/init/qubes-random-seed.sh
usr/lib/qubes/init/qubes-sysinit.sh
usr/lib/qubes/init/setup-rw.sh
usr/lib/qubes/init/setup-rwdev.sh
usr/lib/qubes/prepare-suspend
usr/lib/qubes/qfile-agent
usr/lib/qubes/qfile-unpacker
usr/lib/qubes/qopen-in-vm
clock synchronization rewrite clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the moment, requires: - modifying /etc/qubes-rpc/policy/qubes.GetDate to redirect GetDate to designated clockvm - enabling clocksync service in clockvm ( qvm-features clockvm-name service/clocksync true ) Works as specified in issue listed below, except for: - each VM synces with clockvm after boot and every 6h - clockvm synces time with the Internet using systemd-timesync - dom0 synces itself with clockvm every 1h (using cron) fixes QubesOS/qubes-issues#1230
2017-07-06 23:37:26 +02:00
usr/lib/qubes/qubes-sync-clock
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/lib/qubes/qrun-in-vm
usr/lib/qubes/qubes-trigger-sync-appmenus.sh
usr/lib/qubes/qvm-copy-to-vm.gnome
usr/lib/qubes/qvm-copy-to-vm.kde
usr/lib/qubes/qvm-move-to-vm.gnome
usr/lib/qubes/qvm-move-to-vm.kde
usr/lib/qubes/tar2qfile
usr/lib/qubes/update-proxy-configs
usr/lib/qubes/upgrades-installed-check
usr/lib/qubes/upgrades-status-notify
usr/lib/qubes/vm-file-editor
usr/lib/qubes/xdg-icon
usr/lib/systemd/user/pulseaudio.service.d/30_qubes.conf
usr/lib/systemd/user/pulseaudio.socket.d/30_qubes.conf
usr/share/glib-2.0/schemas/*
usr/share/kde4/services/*.desktop
debian: install man pages Man pages were installed only in RPM package...
2017-06-20 23:34:04 +02:00
usr/share/man/man1/qvm-*
debian: fix qubes-firewall python packaging, make it more verbose Add --install-layout=deb option to setup.py, so files will not land in /usr/local. Also, explicitly list packaged files - make it easier to split the package later.
2017-05-21 01:46:53 +02:00
usr/share/qubes/mime-override/globs
usr/share/qubes/qubes-master-key.asc
Reference in New Issue Copy Permalink