Marek Marczykowski
4b98106732
dom0+vm/iptables: add PR-QBS-SERVICES chain in PREROUTING nat table
...
Additional chain for some qubes-related redirections. BTW PR-QBS should be
renamed now to PR-QBS-DNS...
2012-05-31 03:11:43 +02:00
Marek Marczykowski
c18cb08f8c
dom0+vm/vif-script: setup IP address of net backend interface
...
This is needed to connect to ProxyVM/NetVM, not only pass traffic ahead. Still
firewall rules applies.
2012-05-31 03:11:43 +02:00
Marek Marczykowski
f290b2e939
vm+dom0/vif-script: indent fix
2012-05-31 03:11:43 +02:00
Marek Marczykowski
bdf8e5f5c7
vm/notify-update: do not treat network problems as updates pending symptom
2012-05-31 03:09:22 +02:00
Marek Marczykowski
4365b7b270
vm/qubes-yum-proxy: setup yum to use qubes-yum-proxy ( #568 )
...
The simplest way is just add proxy=... entry to /etc/yum.conf, but sometimes it
is reasonable to bypass the proxy. Some examples:
- usage of non-standard repos with some exotic file layout, which will be
blocked by the proxy
- usage of repos not-accessible via proxy (eg only via VPN stared in VpnVM)
This commit introduces 'yum-proxy-setup' pseudo-service, which can be
controlled via standard qvm-service or qubes-manager. When enabled - yum will
be configured at VM startup to use qubes proxy, otherwise - to connect directly
(proxy setting will be cleared).
2012-05-31 03:05:13 +02:00
Marek Marczykowski
9c434abc82
vm/qubes-yum-proxy: create dir for pidfile under FC15 ( #568 )
...
On FC>=15 /var/run is on tmpfs, so /var/run/tinyproxy from rpm don't survive
reboot. This is bug in Fedora package (should include config file for tmpfiles
service). For now create dir just before starting service.
2012-05-31 03:05:05 +02:00
Marek Marczykowski
81806796ca
vm: qubes-yum-proxy service ( #568 )
...
Introduce proxy service, which allow only http(s) traffic to yum repos. The
filter rules are based on URL regexp, so it isn't full-featured content
inspection and can be easy bypassed, but should be enough to prevent some
erroneus user actions (like clicking on invalid link).
It is set up to intercept connections to 10.137.255.254:8082, so VM can connect
to this IP regardless of VM in which proxy is running. By default it is
started in every NetVM, but this can be changed using qvm-service or
qubes-manager (as always).
2012-05-31 03:04:11 +02:00
Marek Marczykowski
181426c19d
vm/spec: remove executable perm where not needed
2012-05-31 02:21:15 +02:00
Marek Marczykowski
bfe9e92c11
dom0+vm/iptables: add PR-QBS-SERVICES chain in PREROUTING nat table
...
Additional chain for some qubes-related redirections. BTW PR-QBS should be
renamed now to PR-QBS-DNS...
2012-05-31 02:21:15 +02:00
Marek Marczykowski
72521b88e1
dom0+vm/vif-script: setup IP address of net backend interface
...
This is needed to connect to ProxyVM/NetVM, not only pass traffic ahead. Still
firewall rules applies.
2012-05-31 02:21:05 +02:00
Marek Marczykowski
e820841d6b
vm+dom0/vif-script: indent fix
2012-05-31 02:03:12 +02:00
Marek Marczykowski
7664575cae
Merge branch 'hvm' of ssh://gitpro.qubes-os.org/var/lib/qubes/git/joanna/core into hvm
2012-05-31 01:02:52 +02:00
Marek Marczykowski
f87a620aa6
vm/notify-update: do not treat network problems as updates pending symptom
2012-05-30 13:40:27 +02:00
Joanna Rutkowska
f28ad79651
version 1.7.24
2012-05-28 19:30:55 +02:00
Joanna Rutkowska
63b2560742
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-05-28 19:29:38 +02:00
Marek Marczykowski
aba5ce6048
vm/systemd: generate opts for GUI based on debug-mode ( #567 )
2012-05-22 16:50:25 +02:00
Marek Marczykowski
386597a26f
vm/systemd: generate opts for GUI based on debug-mode ( #567 )
2012-05-22 16:49:03 +02:00
Joanna Rutkowska
5d3bc77a63
version 1.7.23-vm
2012-05-12 13:45:12 +02:00
Joanna Rutkowska
1849481a81
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-05-12 13:36:16 +02:00
Marek Marczykowski
651f202213
vm/spec: fix /etc/hosts if it was broken by previous version
2012-05-08 23:45:00 +02:00
Marek Marczykowski
088bbcc137
vm: do not override /etc/hosts, just add VMNAME to 127.0.0.1
2012-05-08 23:44:59 +02:00
Joanna Rutkowska
2d949bae4c
vm: Add localhost alias to /etc/hosts
...
... or otherwise, some programs will hang for many secconds trying to resolve localhost.
2012-05-08 23:44:59 +02:00
Marek Marczykowski
be05968bd1
vm/spec: fix /etc/hosts if it was broken by previous version
2012-05-08 23:44:07 +02:00
Marek Marczykowski
76847de0f2
vm: do not override /etc/hosts, just add VMNAME to 127.0.0.1
2012-05-08 23:43:57 +02:00
Marek Marczykowski
873ca589fe
Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core
2012-05-08 23:22:29 +02:00
Joanna Rutkowska
ee150d996d
version 1.7.22
2012-05-08 18:36:30 +02:00
Joanna Rutkowska
04f18e147c
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-05-08 18:31:55 +02:00
Joanna Rutkowska
667d85a5f8
vm: Add localhost alias to /etc/hosts
...
... or otherwise, some programs will hang for many secconds trying to resolve localhost.
2012-05-08 18:30:27 +02:00
Marek Marczykowski
65e3c1d13e
version 1.7.21
2012-05-08 13:20:14 +02:00
Marek Marczykowski
94979d87d1
Merge branch 'hvm' of ssh://gitpro.qubes-os.org/var/lib/qubes/git/joanna/core into hvm
2012-05-02 00:42:47 +02:00
Marek Marczykowski
7d947ad809
Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core
2012-05-02 00:10:41 +02:00
Marek Marczykowski
e654e5b851
vm/systemd: do not depend on proc-xen.mount ( #466 )
...
local-fs.target already covers /proc/xen
2012-05-02 00:09:00 +02:00
Marek Marczykowski
ab0b4b4030
vm: include /proc/xen in fstab ( #466 )
2012-05-02 00:09:00 +02:00
Marek Marczykowski
bd8977c824
vm: notify dom0 when updates available in VM ( #475 )
2012-05-02 00:09:00 +02:00
Marek Marczykowski
af321cf32a
vm/systemd: do not depend on proc-xen.mount ( #466 )
...
local-fs.target already covers /proc/xen
2012-05-01 23:48:45 +02:00
Marek Marczykowski
2333a727a9
vm: include /proc/xen in fstab ( #466 )
2012-05-01 23:48:25 +02:00
Joanna Rutkowska
ddd2ca1d8a
version 1.7.20
2012-05-01 11:01:16 +02:00
Marek Marczykowski
155467b65e
vm: notify dom0 when updates available in VM ( #475 )
2012-05-01 01:14:04 +02:00
Joanna Rutkowska
de4419d9e6
Merge branch 'hvm' of 10.141.1.101:/var/lib/qubes/git/marmarek/core into hvm
2012-04-30 13:27:53 +02:00
Marek Marczykowski
232c00590a
dom0+vm/hotplug-script: improve error checking, log only important messages ( #477 )
2012-04-25 23:43:50 +02:00
Marek Marczykowski
e5478d6578
vm/qubes-dom0-update: display info when no updates available
2012-04-25 23:43:50 +02:00
Marek Marczykowski
3de729258e
dom0+vm/hotplug-script: improve error checking, log only important messages ( #477 )
2012-04-25 23:41:48 +02:00
Marek Marczykowski
be33099579
vm/qubes-dom0-update: display info when no updates available
2012-04-25 00:25:54 +02:00
Marek Marczykowski
debc4231c2
vm version 1.7.19 - sync with master branch
2012-04-20 00:14:09 +02:00
Marek Marczykowski
8f7cd6e650
Merge branch 'master' into hvm
...
Conflicts:
dom0/qvm-tools/qvm-prefs
dom0/qvm-tools/qvm-start
version_dom0
version_vm
2012-04-18 17:12:11 +02:00
Marek Marczykowski
f4a08e81f4
Merge branch 'hvm' of ssh://gitpro.qubes-os.org/var/lib/qubes/git/joanna/core into hvm
2012-04-18 17:07:17 +02:00
Marek Marczykowski
6c441e7755
Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core
2012-04-18 16:54:10 +02:00
Joanna Rutkowska
617be22931
Merge branch 'hvm' of 10.141.1.101:/var/lib/qubes/git/marmarek/core into hvm
2012-04-15 16:39:07 +02:00
Joanna Rutkowska
aed5496638
version 1.7.19
2012-04-15 16:22:22 +02:00
Joanna Rutkowska
be3ff05867
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-04-15 16:21:50 +02:00