Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
6738926ce9
core-agent-linux/debian/control

172 lines
4.3 KiB
Plaintext
Raw Normal View History

Initial debian packaging
2014-05-02 01:47:52 +02:00
Source: qubes-core-agent
Section: admin
Priority: extra
Enable build for Zesty
2017-05-24 00:59:41 +02:00
Maintainer: unman <unman@thirdeyesecurity.org>
debian: reformat Build-Depends: QubesOS/qubes-issues#1416
2015-11-26 21:10:23 +01:00
Build-Depends:
qrexec: use PAM directly instead of calling su to setup the session Instead of calling 'su' to switch the user, use own implementation of this. Thanks to PAM it's pretty simple. The main reason is to have control over process waiting for session termination (to call pam_close_sesion/pam_end). Especially we don't want it to keep std* fds open, which would prevent qrexec-agent from receiving EOF when one of them will be closed. Also, this will preserve QREXEC_AGENT_PID environment variable. Fixes QubesOS/qubes-issues#2851
2014-10-31 01:07:49 +01:00
libpam0g-dev,
debian: update build-depends for split qubes-utils package QubesOS/qubes-issues#1416
2015-11-26 22:26:50 +01:00
libqubes-rpc-filecopy-dev (>= 3.1.3),
debian: reformat Build-Depends: QubesOS/qubes-issues#1416
2015-11-26 21:10:23 +01:00
libvchan-xen-dev,
python,
Convert qubesagent module to python3 This and all files using it. QubesOS/qubes-issues#5297
2019-09-18 01:42:51 +02:00
python3-setuptools,
debian: reformat Build-Depends: QubesOS/qubes-issues#1416
2015-11-26 21:10:23 +01:00
debhelper,
quilt,
libxen-dev,
debian: add missing pkg-config build depends
2016-06-05 22:32:54 +02:00
pkg-config,
debian: reformat Build-Depends: QubesOS/qubes-issues#1416
2015-11-26 21:10:23 +01:00
dh-systemd (>= 1.5),
Revert "firewall: switch to python 3" This reverts commit 5dfcf06ef4b5ae9889dddb26b30849146fa0557c. python3-daemon isn't widespread enough yet - for Debian jessie available only in packports. In addition to the revert itself, adjust packaging for this change (mostly for Debian).
2017-05-21 01:55:00 +02:00
dh-python,
debian: reformat Build-Depends: QubesOS/qubes-issues#1416
2015-11-26 21:10:23 +01:00
lsb-release,
xserver-xorg-dev,
debian: install man pages Man pages were installed only in RPM package...
2017-06-20 23:34:04 +02:00
config-package-dev,
pandoc,
debian: Converted debian package to a quilt package to allow patches Applied patch to qrexec Makefile to prevent compile failure on warnings qrexec: Disable all warnings being treated as errors gcc -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -I. -g -Wall -Wextra -Werror -pie -fPIC `pkg-config --cflags vchan-xen` -D_FORTIFY_SOURCE=2 -c -o qrexec-agent-data.o qrexec-agent-data.c qrexec-agent-data.c: In function 'handle_remote_data': qrexec-agent-data.c:217:17: error: dereferencing type-punned pointer will break strict-aliasing rules [-Werror=strict-aliasing] status = *(unsigned int *)buf; ^ cc1: all warnings being treated as errors <builtin>: recipe for target 'qrexec-agent-data.o' failed
2015-02-10 16:40:51 +01:00
Standards-Version: 3.9.5
debian: update basic metadata of package
2017-06-08 15:26:44 +02:00
Homepage: https://www.qubes-os.org
Vcs-Git: https://github.com/QubesOS/qubes-core-agent-linux
Initial debian packaging
2014-05-02 01:47:52 +02:00
Package: qubes-core-agent
Architecture: any
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
Depends:
Add apt-transport-https dependency
2019-01-19 18:32:11 +01:00
apt-transport-https,
Require dconf utility to (re)build /etc/dconf/db/local Some applications complains if compiled version of dconf database is missing ("dconf-WARNING **: unable to open file '/etc/dconf/db/local': Failed to open file '/etc/dconf/db/local': open() failed: No such file or directory; expect degraded performance"). There is only one entry in that database, but generate its binary version anyway to avoid that warning message. The dconf call is already included in package scripts, now only make sure the utility is really installed. QubesOS/qubes-issues#1951
2018-05-02 03:02:07 +02:00
dconf-cli,
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
dmsetup,
debian: depend on gawk qubes.GetAppmenus uses "nextfile" which is gawk-specific. Fixes qubesos/qubes-issues#1062
2015-09-02 02:36:35 +02:00
gawk,
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
imagemagick,
init-system-helpers,
initscripts,
qubes-rpc: fix icon selection using pyxdg and support SVG icons
2015-09-06 21:05:01 +02:00
librsvg2-bin,
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
locales,
ncurses-term,
psmisc,
Clean up early initialization and setup of /rw
2016-10-22 17:43:16 +02:00
procps,
util-linux,
Add dependency on e2fsprogs It is needed by the startup scripts to create fs on fresh private image. Otherwise /rw (and thus /home) isn't mounted and user applications fail to start. Fixes QubesOS/qubes-issues#4671
2019-01-08 18:14:06 +01:00
e2fsprogs,
Convert qubesagent module to python3 This and all files using it. QubesOS/qubes-issues#5297
2019-09-18 01:42:51 +02:00
python3-daemon,
debian: switch to python3 QubesOS/qubes-issues#5297
2019-09-19 04:57:13 +02:00
python3-distutils,
Convert qubesagent module to python3 This and all files using it. QubesOS/qubes-issues#5297
2019-09-18 01:42:51 +02:00
python3-qubesdb,
python3-gi,
python3-xdg,
python3-dbus,
Bump qubes-utils version requirement Those commits needs updated qubes-utils: 823954c qrexec: use #define for protocol-specified strings 5774c78 qfile-agent: move data handling code to libqubes-rpc-filecopy QubesOS/qubes-issues#1324 QubesOS/qubes-issues#1392
2015-11-11 05:25:17 +01:00
qubes-utils (>= 3.1.3),
Remove qrexec-agent related files Move it to the core-qrexec repository. QubesOS/qubes-issues#4955
2019-04-08 15:37:15 +02:00
qubes-core-qrexec,
debian: add Depends: qubesdb-vm Make sure that qubesdb is configured (including service start) before executing postinst of qubes-core-agent package, which will communicate with qubesdb service. Fixes QubesOS/qubes-issues#3951
2018-06-13 16:58:35 +02:00
qubesdb-vm,
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
systemd,
xdg-user-dirs,
qubes-open: switch from mimeopen to xdg-open xdg-open is more robust in choosing default application for particular file type: it supports fallback if the preferred application isn't working, and most importantly it support system-wide defaults (/usr/share/applications/defaults.list, /usr/share/applications/mimeapps.list), so no "random" application is chosen. By default xdg-open tries to use environment-specific tool, like gvfs-open - which isn't good for us, because many such tools do not wait for editor/viewer termination. That would mean that DisposableVM would be destroyed just after opening the file. To avoid such effect, we set DE=generic. Fixes QubesOS/qubes-issues#1621
2016-02-02 03:20:29 +01:00
xdg-utils,
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
xen-utils-common,
debian: depend on xen-utils-guest Workaround for https://bugs.debian.org/922033
2019-08-11 04:38:36 +02:00
xen-utils-guest,
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
xenstore-utils,
debian: switch to python3 QubesOS/qubes-issues#5297
2019-09-19 04:57:13 +02:00
${python3:Depends},
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
${shlibs:Depends},
${misc:Depends}
Recommends:
cups,
gnome-terminal,
gnome-themes-standard,
haveged,
libnotify-bin,
debian,fedora: split nautilus integration into separate package This will allow to avoid a lot of dependencies on minimal template. QubesOS/qubes-issues#2816 QubesOS/qubes-issues#2771
2017-05-21 01:52:23 +02:00
locales-all,
debian: Switch to using org.mate.NotificationDaemon by default to eliminate popups not closing - uses 'slider' theme
2015-08-04 18:02:19 +02:00
mate-notification-daemon,
debian: Reformat depends in control for better readability
2015-08-04 04:48:47 +02:00
ntpdate,
system-config-printer,
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
qubes-core-agent-nautilus,
qubes-core-agent-networking,
qubes-core-agent-network-manager,
Remove qubes-core-agent Debian dependency on xserver Mark xserver, xinit and x11-xserver-utils as Recommends
2018-10-21 15:30:24 +02:00
x11-xserver-utils,
xinit,
xserver-xorg-core,
Add XTerm as a dependency Qubes Manager's update button fails in strange ways without it.
2018-12-07 07:10:34 +01:00
xsettingsd,
xterm
rpm,deb: add Conflicts: qubes-gui-agent < 4.1.0 This version will not work with qubes-gui-agent not supporting -d option. QubesOS/qubes-issues#2619
2019-06-08 05:36:40 +02:00
Conflicts:
qubes-core-agent-linux,
firewalld,
qubes-core-vm-sysvinit,
qubes-gui-agent (<< 4.1.0-1)
Initial debian packaging
2014-05-02 01:47:52 +02:00
Description: Qubes core agent
This package includes various daemons necessary for qubes domU support,
Remove qrexec-agent related files Move it to the core-qrexec repository. QubesOS/qubes-issues#4955
2019-04-08 15:37:15 +02:00
such as qrexec services.
rpm,deb: split qrexec-agent into separate subpackage While it doesn't make sense to install qubes-core-agent without qrexec, it may make sense to do the otherway around - install just qrexec-agent without all the qrexec services and configuration. For example on some pre-installed system. QubesOS/qubes-issues#2771
2017-06-08 15:33:26 +02:00
Rename qubes-nautilus to qubes-core-agent-nautilus Again, this will make it easier to reason about package origin. QubesOS/qubes-issues#2771
2017-05-29 03:33:11 +02:00
Package: qubes-core-agent-nautilus
debian,fedora: split nautilus integration into separate package This will allow to avoid a lot of dependencies on minimal template. QubesOS/qubes-issues#2816 QubesOS/qubes-issues#2771
2017-05-21 01:52:23 +02:00
Architecture: any
Depends:
python-nautilus,
Remove qrexec-agent related files Move it to the core-qrexec repository. QubesOS/qubes-issues#4955
2019-04-08 15:37:15 +02:00
qubes-core-qrexec,
Adjust dependencies for clean upgrade When a file is moved to other package, the new package needs Replaces: and Breaks: dependecies on old package. Otherwise dpkg will refuse to change file ownership. QubesOS/qubes-issues#2771
2017-05-30 12:22:09 +02:00
Replaces: qubes-core-agent (<< 4.0.0-1)
Breaks: qubes-core-agent (<< 4.0.0-1)
Description: Qubes integration for Nautilus
Nautilus addons for inter-VM file copy/move/open.
Add debian package support
2017-11-22 13:06:51 +01:00
Package: qubes-core-agent-thunar
Architecture: any
Depends:
thunar,
Remove qrexec-agent related files Move it to the core-qrexec repository. QubesOS/qubes-issues#4955
2019-04-08 15:37:15 +02:00
qubes-core-qrexec,
Add debian package support
2017-11-22 13:06:51 +01:00
Replaces: qubes-core-agent (<< 4.0.0-1)
Breaks: qubes-core-agent (<< 4.0.0-1)
Description: Qubes integration for Thunar
Thunar addons for inter-VM file copy/move/open.
Split dom0-updates handling into subpackage In Fedora it makes little sense, but in Debian it allows to avoid a lot of dependencies. So split in both, to keep it simple. QubesOS/qubes-issues#2771
2017-05-29 03:40:33 +02:00
Package: qubes-core-agent-dom0-updates
Architecture: any
Depends:
fakeroot,
yum,
rpm,deb: split qrexec-agent into separate subpackage While it doesn't make sense to install qubes-core-agent without qrexec, it may make sense to do the otherway around - install just qrexec-agent without all the qrexec services and configuration. For example on some pre-installed system. QubesOS/qubes-issues#2771
2017-06-08 15:33:26 +02:00
yum-utils,
Remove qrexec-agent related files Move it to the core-qrexec repository. QubesOS/qubes-issues#4955
2019-04-08 15:37:15 +02:00
qubes-core-qrexec,
Adjust dependencies for clean upgrade When a file is moved to other package, the new package needs Replaces: and Breaks: dependecies on old package. Otherwise dpkg will refuse to change file ownership. QubesOS/qubes-issues#2771
2017-05-30 12:22:09 +02:00
Replaces: qubes-core-agent (<< 4.0.0-1)
Breaks: qubes-core-agent (<< 4.0.0-1)
Split dom0-updates handling into subpackage In Fedora it makes little sense, but in Debian it allows to avoid a lot of dependencies. So split in both, to keep it simple. QubesOS/qubes-issues#2771
2017-05-29 03:40:33 +02:00
Description: Scripts required to handle dom0 updates.
Scripts required to handle dom0 updates. This will allow to use the VM as
"Updates VM".
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
Package: qubes-core-agent-networking
Architecture: any
Depends:
rpm, deb: add strict version dependency between qubes-core-agent-* pkgs Base qubes-core-agent package have common files used by various subpackages. It is important to update them at the same time, otherwise for example python stubs in /usr/bin/* (like qubes-firewall) will not match actual python modules. Fixes QubesOS/qubes-issues#4499
2018-11-13 03:42:24 +01:00
qubes-core-agent (= ${binary:Version}),
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
tinyproxy,
iptables,
net-tools,
ethtool,
Switch qubes.UpdatesProxy to socat - there are many netcat versions (openbsd, nmap, ...), which behave differently - especially while handling EOF - Debian jessie doesn't have nmap-ncat (which handle EOFs sufficiently good) QubesOS/qubes-issues#1854
2017-06-10 23:11:01 +02:00
socat,
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
tinyproxy,
make iproute2 a dependency for Debian core-networking
2018-11-08 14:29:33 +01:00
iproute2,
debian: switch to python3 QubesOS/qubes-issues#5297
2019-09-19 04:57:13 +02:00
${python3:Depends},
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
${misc:Depends}
rpm,deb: fix dependencies 1. Cannot Recommend: nftables, as Debian jessie doesn't have it. 2. gsettings tool is in glib, not dconf
2017-06-10 23:15:22 +02:00
Suggests:
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
nftables,
Adjust dependencies for clean upgrade When a file is moved to other package, the new package needs Replaces: and Breaks: dependecies on old package. Otherwise dpkg will refuse to change file ownership. QubesOS/qubes-issues#2771
2017-05-30 12:22:09 +02:00
Replaces: qubes-core-agent (<< 4.0.0-1)
Breaks: qubes-core-agent (<< 4.0.0-1)
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
Description: Networking support for Qubes VM
This package provides:
* basic network functionality (setting IP address, DNS, default gateway)
* proxy service used by TemplateVMs to download updates
* qubes-firewall service (FirewallVM)
.
Note: if you want to use NetworkManager (you do want it in NetVM), install
also qubes-core-agent-network-manager.
Package: qubes-core-agent-network-manager
Architecture: any
Depends:
rpm, deb: add strict version dependency between qubes-core-agent-* pkgs Base qubes-core-agent package have common files used by various subpackages. It is important to update them at the same time, otherwise for example python stubs in /usr/bin/* (like qubes-firewall) will not match actual python modules. Fixes QubesOS/qubes-issues#4499
2018-11-13 03:42:24 +01:00
qubes-core-agent-networking (= ${binary:Version}),
rpm,deb: fix dependencies 1. Cannot Recommend: nftables, as Debian jessie doesn't have it. 2. gsettings tool is in glib, not dconf
2017-06-10 23:15:22 +02:00
libglib2.0-bin,
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
network-manager (>= 0.8.1-1),
network-manager-gnome,
Adjust dependencies for clean upgrade When a file is moved to other package, the new package needs Replaces: and Breaks: dependecies on old package. Otherwise dpkg will refuse to change file ownership. QubesOS/qubes-issues#2771
2017-05-30 12:22:09 +02:00
Replaces: qubes-core-agent (<< 4.0.0-1)
Breaks: qubes-core-agent (<< 4.0.0-1)
Split network-related files to -networking and -network-manager packages This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771
2017-05-29 06:28:37 +02:00
Description: NetworkManager integration for Qubes VM
Integration of NetworkManager for Qubes VM:
* make connections config persistent
* adjust DNS redirections when needed
* show/hide NetworkManager applet icon
deb,rpm: split passwordless root access configs into separate package Make passwordless root access optional - ease integration qrexec authorization for sudo. QubesOS/qubes-issues#2695
2017-05-31 21:18:34 +02:00
Package: qubes-core-agent-passwordless-root
Architecture: any
Replaces: qubes-core-agent (<< 4.0.0-1)
Breaks: qubes-core-agent (<< 4.0.0-1)
Provides: ${diverted-files}
Conflicts: ${diverted-files}
Description: Passwordless root access from normal user
Configure sudo, PolicyKit and similar tool to not ask for any password when
switching from user to root. Since all the user data in a VM is accessible
already from normal user account, there is not much more to guard there. Qubes
VM is a single user system.
Reference in New Issue Copy Permalink