Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
561 Commits 1 Branch 0 Tags 6.4 MiB
55f99e23db
Commit Graph

561 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Marek Marczykowski
55f99e23db makefile: rename vchan Makefile to not conflict with windows build 2012-06-05 21:21:53 +02:00
Marek Marczykowski
9930a89fb1 vm/qubes-yum-proxy: setup yum to use qubes-yum-proxy (#568) 
The simplest way is just add proxy=... entry to /etc/yum.conf, but sometimes it
is reasonable to bypass the proxy. Some examples:
 - usage of non-standard repos with some exotic file layout, which will be
   blocked by the proxy
 - usage of repos not-accessible via proxy (eg only via VPN stared in VpnVM)

This commit introduces 'yum-proxy-setup' pseudo-service, which can be
controlled via standard qvm-service or qubes-manager. When enabled - yum will
be configured at VM startup to use qubes proxy, otherwise - to connect directly
(proxy setting will be cleared).
 2012-05-31 03:11:44 +02:00
Marek Marczykowski
c37e4b2344 vm/qubes-yum-proxy: create dir for pidfile under FC15 (#568) 
On FC>=15 /var/run is on tmpfs, so /var/run/tinyproxy from rpm don't survive
reboot. This is bug in Fedora package (should include config file for tmpfiles
service). For now create dir just before starting service.
 2012-05-31 03:11:43 +02:00
Marek Marczykowski
0430e5186b vm: qubes-yum-proxy service (#568) 
Introduce proxy service, which allow only http(s) traffic to yum repos. The
filter rules are based on URL regexp, so it isn't full-featured content
inspection and can be easy bypassed, but should be enough to prevent some
erroneus user actions (like clicking on invalid link).

It is set up to intercept connections to 10.137.255.254:8082, so VM can connect
to this IP regardless of VM in which proxy is running. By default it is
started in every NetVM, but this can be changed using qvm-service or
qubes-manager (as always).
 2012-05-31 03:11:43 +02:00
Marek Marczykowski
542cd42d04 vm/spec: remove executable perm where not needed 2012-05-31 03:11:43 +02:00
Marek Marczykowski
4b98106732 dom0+vm/iptables: add PR-QBS-SERVICES chain in PREROUTING nat table 
Additional chain for some qubes-related redirections. BTW PR-QBS should be
renamed now to PR-QBS-DNS...
 2012-05-31 03:11:43 +02:00
Marek Marczykowski
c18cb08f8c dom0+vm/vif-script: setup IP address of net backend interface 
This is needed to connect to ProxyVM/NetVM, not only pass traffic ahead. Still
firewall rules applies.
 2012-05-31 03:11:43 +02:00
Marek Marczykowski
f290b2e939 vm+dom0/vif-script: indent fix 2012-05-31 03:11:43 +02:00
Marek Marczykowski
bdf8e5f5c7 vm/notify-update: do not treat network problems as updates pending symptom 2012-05-31 03:09:22 +02:00
Joanna Rutkowska
f28ad79651 version 1.7.24 2012-05-28 19:30:55 +02:00
Joanna Rutkowska
63b2560742 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-05-28 19:29:38 +02:00
Marek Marczykowski
aba5ce6048 vm/systemd: generate opts for GUI based on debug-mode (#567) 2012-05-22 16:50:25 +02:00
Joanna Rutkowska
5d3bc77a63 version 1.7.23-vm 2012-05-12 13:45:12 +02:00
Joanna Rutkowska
1849481a81 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-05-12 13:36:16 +02:00
Marek Marczykowski
be05968bd1 vm/spec: fix /etc/hosts if it was broken by previous version 2012-05-08 23:44:07 +02:00
Marek Marczykowski
76847de0f2 vm: do not override /etc/hosts, just add VMNAME to 127.0.0.1 2012-05-08 23:43:57 +02:00
Marek Marczykowski
873ca589fe Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2012-05-08 23:22:29 +02:00
Joanna Rutkowska
ee150d996d version 1.7.22 2012-05-08 18:36:30 +02:00
Joanna Rutkowska
04f18e147c Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-05-08 18:31:55 +02:00
Joanna Rutkowska
667d85a5f8 vm: Add localhost alias to /etc/hosts 
... or otherwise, some programs will hang for many secconds trying to resolve localhost.
 2012-05-08 18:30:27 +02:00
Marek Marczykowski
65e3c1d13e version 1.7.21 2012-05-08 13:20:14 +02:00
Marek Marczykowski
7d947ad809 Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2012-05-02 00:10:41 +02:00
Marek Marczykowski
e654e5b851 vm/systemd: do not depend on proc-xen.mount (#466) 
local-fs.target already covers /proc/xen
 2012-05-02 00:09:00 +02:00
Marek Marczykowski
ab0b4b4030 vm: include /proc/xen in fstab (#466) 2012-05-02 00:09:00 +02:00
Marek Marczykowski
bd8977c824 vm: notify dom0 when updates available in VM (#475) 2012-05-02 00:09:00 +02:00
Joanna Rutkowska
ddd2ca1d8a version 1.7.20 2012-05-01 11:01:16 +02:00
Marek Marczykowski
232c00590a dom0+vm/hotplug-script: improve error checking, log only important messages (#477) 2012-04-25 23:43:50 +02:00
Marek Marczykowski
e5478d6578 vm/qubes-dom0-update: display info when no updates available 2012-04-25 23:43:50 +02:00
Marek Marczykowski
6c441e7755 Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2012-04-18 16:54:10 +02:00
Joanna Rutkowska
aed5496638 version 1.7.19 2012-04-15 16:22:22 +02:00
Joanna Rutkowska
be3ff05867 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-04-15 16:21:50 +02:00
Marek Marczykowski
d0296d9783 vm: load block backend in every VM (#516) 2012-04-04 11:55:48 +02:00
Joanna Rutkowska
daa60f334a version 1.7.18 2012-03-31 19:53:14 +02:00
Joanna Rutkowska
cb9b76d039 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-03-31 19:52:28 +02:00
Marek Marczykowski
3b55fc51e8 dom0+vm: qvm-block --attach-file 
Allow to attach disk image from different VM as block device. File attached
with qvm-block -A will be visible as loopX device and as such can be detached.
File path will be in device description.
 2012-03-31 19:04:50 +02:00
Joanna Rutkowska
bdf6016b5a New signing key cleanup (removed the unused encryption key) 2012-03-31 14:57:26 +02:00
Joanna Rutkowska
069ae8e520 Update Qubes Signing key 2012-03-31 13:04:22 +02:00
Marek Marczykowski
a1ae0bba89 vm/init: Use the same default services for TemplateVM as for AppVM (#503) 
Actually it already was done in traditional init.d script, so do the same in
systemd version.
 2012-03-28 00:49:18 +02:00
Marek Marczykowski
47c144f8f5 Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2012-03-09 17:26:14 +01:00
Joanna Rutkowska
70ad4146e1 version 1.7.17 2012-03-09 09:46:06 +01:00
Marek Marczykowski
703c74397f vm/netwatcher: fix watch 2012-03-09 01:54:16 +01:00
Marek Marczykowski
9de77d7fe4 vm/qvm-firewall: force firewall reload on service start (#478) 
This makes firewall reload triggered by qubes-netwatcher working again.
 2012-03-09 01:50:51 +01:00
Marek Marczykowski
4401c3e525 vm/init.d: make firewall and netwatcher service consistent with systemd 2012-03-09 01:50:18 +01:00
Marek Marczykowski
aa0d767e8a vm/netwatcher: watch also for netvm change (#478) 2012-03-09 01:01:30 +01:00
Marek Marczykowski
31ccbce992 Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core 2012-03-09 01:00:08 +01:00
Joanna Rutkowska
531449b16f vm/qubes_netwatcher: correct type in service name (#465) 
This prevented netwatcher being started in the firewallvm.
 2012-03-09 00:21:54 +01:00
Joanna Rutkowska
0ad42ab63f version 1.7.16 2012-03-08 21:45:55 +01:00
Joanna Rutkowska
281d2e3870 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-03-08 21:40:30 +01:00
Marek Marczykowski
2b3939ab64 vm/network: use metric to allow multiple routes to same VM 
This is required when VM has multiple interfaces (eg HVM: PV and stubdom).
Prefer the later one.
 2012-03-08 14:57:10 +01:00
Marek Marczykowski
8a7906a016 vm/network: really place anti-spoof rules in 'raw' table 
This fixes commit:
4d68998 vm/network: place anti-spoof rules in 'raw' table
 2012-03-08 14:56:39 +01:00