 Marek Marczykowski-Górecki
|
0caa7fcf75
network: stop IP forwarding before disabling firewall
|
4 years ago |
|
Marek Marczykowski-Górecki
|
f66a494cc2
Allow DHCPv6 replies on uplink interface, if ipv6 is enabled
|
4 years ago |
|
Marek Marczykowski-Górecki
|
5ddc118429
Merge remote-tracking branch 'origin/pr/266'
|
3 years ago |
|
Marek Marczykowski-Górecki
|
6da7f77013
Merge remote-tracking branch 'origin/pr/265'
|
3 years ago |
|
Marek Marczykowski-Górecki
|
4543d4f003
Merge remote-tracking branch 'origin/pr/232'
|
3 years ago |
|
Demi Marie Obenour
|
06d84b5198
Only allow known-safe characters in socket paths
|
3 years ago |
|
ejose19
|
489fde7cb3
Replace custom script reloading with sourcing /etc/profile in qubes.GetAppmenus
|
3 years ago |
|
Marek Marczykowski-Górecki
|
c3761ac7e7
Merge remote-tracking branch 'origin/pr/264'
|
4 years ago |
|
Demi Marie Obenour
|
5e0d1cd1d8
qubes.ShowInTerminal requires socat
|
4 years ago |
|
Marek Marczykowski-Górecki
|
156e18190f
gitlab-ci: install test dependencies
|
4 years ago |
|
Marek Marczykowski-Górecki
|
3b6a878851
gitlab-ci: include codecov
|
4 years ago |
|
Marek Marczykowski-Górecki
|
7c42fb68bb
gitlab-ci: move tests earlier, rename job
|
4 years ago |
|
Demi Marie Obenour
|
0580fe545b
Use netvm_gw_ip instead of netvm_ip
|
4 years ago |
|
Demi Marie Obenour
|
9d10ecc08f
Remove commented-out code
|
4 years ago |
|
Demi Marie Obenour
|
e4eeb2ee1b
Add NetVM-facing neighbor entry in NAT namespace
|
4 years ago |
|
Demi Marie Obenour
|
097342bd08
Optimization: use `ip -n` over `ip netns exec`
|
4 years ago |
|
Demi Marie Obenour
|
6517cca2a4
NAT network namespaces need neighbor entries
|
4 years ago |
|
Frédéric Pierret (fepitre)
|
b28f8a27e8
Add .gitlab-ci.yml
|
4 years ago |
|
Demi Marie Obenour
|
791b08c2ec
vif-route-qubes: better input validation
|
4 years ago |
|
Demi Marie Obenour
|
9646acb18e
Don’t use onlink flag for nexthop
|
4 years ago |
|
Demi Marie Obenour
|
3e7552856f
Fix running under -euo pipefail
|
4 years ago |
|
Demi Marie Obenour
|
377add43d1
Don’t hardcode MAC addresses
|
4 years ago |
|
Demi Marie Obenour
|
0a322958e4
Add gateway IP+MAC, not VM’s own
|
4 years ago |
|
Demi Marie Obenour
|
aa71677cbd
Add permanent neighbor entries
|
4 years ago |
|
Marek Marczykowski-Górecki
|
74f5fb5ac7
network: prevent IP spoofing on upstream (eth0) interface
|
4 years ago |
|
Marek Marczykowski-Górecki
|
68b61c2c6d
network: setup anti-spoofing firewall rules before enabling the interface
|
4 years ago |
|
Marek Marczykowski-Górecki
|
05a213a7e3
Relax private.img condition for mkfs even further
|
4 years ago |
|
Marek Marczykowski-Górecki
|
2d7a10add7
Drop systemd re-exec during boot
|
4 years ago |
|
Marek Marczykowski-Górecki
|
7f15690e43
Add a service to enable swap early - before fsck of the root filesystem
|
4 years ago |
|
Marek Marczykowski-Górecki
|
aa50b2fedc
grub: override GRUB_DEVICE with /dev/mapper/dmroot
|
4 years ago |
