Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
609 Commits 1 Branch 0 Tags 34 MiB
499e9cca8d
Commit Graph

609 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Joanna Rutkowska
499e9cca8d Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-07-16 14:25:11 +02:00
Joanna Rutkowska
0e49436ef4 version 1.7.35 2012-07-16 14:24:52 +02:00
Marek Marczykowski
c8f3f737f5 Revert "vm/spec: disable pam_systemd globally (#607)" (#626) 
This reverts commit 8ec4b6963b71b95bc0cda6dd80d99bf60aa9caec.
This caused regression (#626).

Conflicts:

	rpm_spec/core-vm.spec
 2012-07-16 13:36:08 +02:00
Marek Marczykowski
8129032c9e vm: implement qubes.GetAppmenus to reduce code duplication 
As one-liner services are now real one-line, just do it.
 2012-07-15 02:41:23 +02:00
Marek Marczykowski
55130c0dee vm: simplify qubes.VMShell service 
Now additional wrapper not required to skip cmdline argument
 2012-07-15 02:41:23 +02:00
Marek Marczykowski
58a12f951c dom0+vm/qrexec-services: pass remote domain via env variable not argument 
Most qrexec services doesn't use remote domain name, as policy is enforced
earlier. So pass it in way that will allow use of generic command as qrexec
service.
 2012-07-15 02:41:23 +02:00
Joanna Rutkowska
5a00577da5 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-07-13 14:51:22 +02:00
Marek Marczykowski
bec4afc919 vm: export SuspendPre and SuspendPost qrexec services (#617) 
1. Try to use NetworkManager sleep command instead of shutting it down
2. Move sleep action details (which is VM-specific) to VM
3. Export it as qrexec service(s)
 2012-07-13 14:44:11 +02:00
Joanna Rutkowska
786e5a86a8 version 1.7.34 2012-07-13 13:32:29 +02:00
Joanna Rutkowska
332113c745 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-07-13 13:25:55 +02:00
Marek Marczykowski
3af500fc80 vm: provide dispvm-dotfiles and dispvm-prerun.sh in rpm package (#620) 2012-07-12 14:22:44 +02:00
Joanna Rutkowska
7285d4f404 version 1.7.33 2012-07-12 13:41:49 +02:00
Marek Marczykowski
6d0cc13c13 vm/system: ensure that DispVM savefile have pagecache populated (#620) 
This is done by readahead, so just let it done its work before suspend.
 2012-07-12 03:56:09 +02:00
Marek Marczykowski
c336586fae vm/systemd: disable additional useless services (#620) 
Most of them relay on direct network acces, which isn't true on Qubes.
 2012-07-12 03:56:09 +02:00
Marek Marczykowski
654fb64a74 vm/spec: remove dupplicated commnds, suppress error message 2012-07-12 03:56:09 +02:00
Marek Marczykowski
821d853abb vm/file-editor: load session environment (#620) 
Especially set DBUS socket to allow interprocess communication instead of
spawning new instances or timeouts.
 2012-07-12 03:56:09 +02:00
Marek Marczykowski
5ee694f4d3 vm/spec: disable pam_systemd only in trigger 
The %post part is unnecessary.
 2012-07-09 15:54:33 +02:00
Marek Marczykowski
78df05afe1 Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2012-07-09 15:54:14 +02:00
Marek Marczykowski
4d9898aa69 makefile: fix clean target 2012-07-07 02:45:56 +02:00
Joanna Rutkowska
28e12902a0 version 1.7.32 2012-07-06 10:32:27 +02:00
Joanna Rutkowska
625d092b48 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-07-06 10:20:01 +02:00
Marek Marczykowski
f0cdcdae34 vm: disable D-Bus activation of NetworkManager (#610) 2012-07-05 01:43:32 +02:00
Marek Marczykowski
0cd7a783d4 vm/spec: disable pam_systemd globally (#607) 
Actually all /etc/pam.d/ files containing pam_systemd.so are autogenerated by
authconfig, so "removing" pam_systemd.so file as not elegant solution, seems to
be much more realiable.
 2012-07-05 01:43:32 +02:00
Marek Marczykowski
7e55f001f5 vm/qubes-update-proxy: update URL whitelist 2012-07-05 01:43:32 +02:00
Joanna Rutkowska
4bb56e55aa version 1.7.31 2012-06-28 12:19:10 +02:00
Marek Marczykowski
733317492e Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2012-06-26 03:44:31 +02:00
Marek Marczykowski
9efee9324f vm/spec: fix enabling NetworkManager SystemD service 2012-06-26 03:43:36 +02:00
Marek Marczykowski
77ccf99b88 vm/spec: fix error messages 2012-06-26 03:43:36 +02:00
Marek Marczykowski
47e49d0fd6 vm/spec: fix enabling of qubes-firewall SysV service 2012-06-26 03:43:36 +02:00
Joanna Rutkowska
95dc878497 version 1.7.30 2012-06-25 23:38:18 +02:00
Marek Marczykowski
6f88dae1be Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2012-06-23 20:18:21 +02:00
Marek Marczykowski
1fdaa847c4 vm: RPC service for NTP time sync (#603) 2012-06-23 00:37:47 +02:00
Joanna Rutkowska
72846acf2a Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-06-22 15:17:45 +02:00
Joanna Rutkowska
b38685deba Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-06-19 15:20:05 +02:00
Joanna Rutkowska
e213d17341 version 1.7.27 2012-06-14 11:23:59 +02:00
Joanna Rutkowska
07fd62e330 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-06-14 11:22:53 +02:00
Marek Marczykowski
a952fc503d vm/qubes-dom0-update: rebuild dom0 rpmdb before touching it with yum 
Dom0 can have different (older) rpmdb version than VM. Starting from FC17 yum
refuses to work without rebuild.
 2012-06-13 04:56:11 +02:00
Joanna Rutkowska
6df913e880 version 1.7.26 2012-06-12 12:25:19 +02:00
Marek Marczykowski
e5c77507a1 vm: chown /home/user to user if user UID have changed 
FC16 and FC17 starts normal users at UID 1000, not 500 as in <=FC15.
 2012-06-11 22:35:44 +02:00
Marek Marczykowski
975c0a0bc7 vm: fix yum-qubes-hooks 
Program must be given as full path to qrexec_client_vm - it is passed directly
to execv.
 2012-06-11 22:35:44 +02:00
Marek Marczykowski
64a9c54ba6 vm: enable yum-qubes-hooks plugin (#592) 2012-06-11 22:35:44 +02:00
Marek Marczykowski
20c170427d vm: disable gnome update plugin, not only unattended installation 2012-06-11 22:35:44 +02:00
Marek Marczykowski
871d4485b9 dom0+vm/qvm-block: speed up udev block handler (#560) 
xenstore is very slow, so don't bother it when unneeded. Namely do not try to
remove entries, which haven't even created.
 2012-06-11 22:35:44 +02:00
Marek Marczykowski
3e89b33209 vm/spec: create firmware symlink only when needed 
On new systems, like FC16+, firmware is provided by separate package (like
linux-firmware), so no longer need to get it from kernel package.
 2012-06-06 03:00:05 +02:00
Marek Marczykowski
baf95fb765 vm/spec: depend on ethtool _package_ 2012-06-06 02:59:07 +02:00
Marek Marczykowski
03b5c4778a vm: use yum proxy in TemplateVM by default (#590) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
06c4d57b60 vm: yum plugin to notify dom0 about installed updates (#592) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
b77cd12dff vm/systemd: fix ProxyVM related services deps (#578) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
55f99e23db makefile: rename vchan Makefile to not conflict with windows build 2012-06-05 21:21:53 +02:00
Marek Marczykowski
9930a89fb1 vm/qubes-yum-proxy: setup yum to use qubes-yum-proxy (#568) 
The simplest way is just add proxy=... entry to /etc/yum.conf, but sometimes it
is reasonable to bypass the proxy. Some examples:
 - usage of non-standard repos with some exotic file layout, which will be
   blocked by the proxy
 - usage of repos not-accessible via proxy (eg only via VPN stared in VpnVM)

This commit introduces 'yum-proxy-setup' pseudo-service, which can be
controlled via standard qvm-service or qubes-manager. When enabled - yum will
be configured at VM startup to use qubes proxy, otherwise - to connect directly
(proxy setting will be cleared).
 2012-05-31 03:11:44 +02:00