Joanna Rutkowska
5a00577da5
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-07-13 14:51:22 +02:00
Marek Marczykowski
bec4afc919
vm: export SuspendPre and SuspendPost qrexec services ( #617 )
...
1. Try to use NetworkManager sleep command instead of shutting it down
2. Move sleep action details (which is VM-specific) to VM
3. Export it as qrexec service(s)
2012-07-13 14:44:11 +02:00
Joanna Rutkowska
786e5a86a8
version 1.7.34
2012-07-13 13:32:29 +02:00
Joanna Rutkowska
332113c745
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-07-13 13:25:55 +02:00
Marek Marczykowski
3af500fc80
vm: provide dispvm-dotfiles and dispvm-prerun.sh in rpm package ( #620 )
2012-07-12 14:22:44 +02:00
Joanna Rutkowska
7285d4f404
version 1.7.33
2012-07-12 13:41:49 +02:00
Marek Marczykowski
6d0cc13c13
vm/system: ensure that DispVM savefile have pagecache populated ( #620 )
...
This is done by readahead, so just let it done its work before suspend.
2012-07-12 03:56:09 +02:00
Marek Marczykowski
c336586fae
vm/systemd: disable additional useless services ( #620 )
...
Most of them relay on direct network acces, which isn't true on Qubes.
2012-07-12 03:56:09 +02:00
Marek Marczykowski
654fb64a74
vm/spec: remove dupplicated commnds, suppress error message
2012-07-12 03:56:09 +02:00
Marek Marczykowski
821d853abb
vm/file-editor: load session environment ( #620 )
...
Especially set DBUS socket to allow interprocess communication instead of
spawning new instances or timeouts.
2012-07-12 03:56:09 +02:00
Marek Marczykowski
5ee694f4d3
vm/spec: disable pam_systemd only in trigger
...
The %post part is unnecessary.
2012-07-09 15:54:33 +02:00
Marek Marczykowski
78df05afe1
Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core
2012-07-09 15:54:14 +02:00
Marek Marczykowski
4d9898aa69
makefile: fix clean target
2012-07-07 02:45:56 +02:00
Joanna Rutkowska
28e12902a0
version 1.7.32
2012-07-06 10:32:27 +02:00
Joanna Rutkowska
625d092b48
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-07-06 10:20:01 +02:00
Marek Marczykowski
f0cdcdae34
vm: disable D-Bus activation of NetworkManager ( #610 )
2012-07-05 01:43:32 +02:00
Marek Marczykowski
0cd7a783d4
vm/spec: disable pam_systemd globally ( #607 )
...
Actually all /etc/pam.d/ files containing pam_systemd.so are autogenerated by
authconfig, so "removing" pam_systemd.so file as not elegant solution, seems to
be much more realiable.
2012-07-05 01:43:32 +02:00
Marek Marczykowski
7e55f001f5
vm/qubes-update-proxy: update URL whitelist
2012-07-05 01:43:32 +02:00
Joanna Rutkowska
4bb56e55aa
version 1.7.31
2012-06-28 12:19:10 +02:00
Marek Marczykowski
733317492e
Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core
2012-06-26 03:44:31 +02:00
Marek Marczykowski
9efee9324f
vm/spec: fix enabling NetworkManager SystemD service
2012-06-26 03:43:36 +02:00
Marek Marczykowski
77ccf99b88
vm/spec: fix error messages
2012-06-26 03:43:36 +02:00
Marek Marczykowski
47e49d0fd6
vm/spec: fix enabling of qubes-firewall SysV service
2012-06-26 03:43:36 +02:00
Joanna Rutkowska
95dc878497
version 1.7.30
2012-06-25 23:38:18 +02:00
Marek Marczykowski
6f88dae1be
Merge branch 'master' of ssh://git.qubes-os.org/var/lib/qubes/git/joanna/core
2012-06-23 20:18:21 +02:00
Marek Marczykowski
1fdaa847c4
vm: RPC service for NTP time sync ( #603 )
2012-06-23 00:37:47 +02:00
Joanna Rutkowska
72846acf2a
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-06-22 15:17:45 +02:00
Joanna Rutkowska
b38685deba
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-06-19 15:20:05 +02:00
Joanna Rutkowska
e213d17341
version 1.7.27
2012-06-14 11:23:59 +02:00
Joanna Rutkowska
07fd62e330
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2012-06-14 11:22:53 +02:00
Marek Marczykowski
a952fc503d
vm/qubes-dom0-update: rebuild dom0 rpmdb before touching it with yum
...
Dom0 can have different (older) rpmdb version than VM. Starting from FC17 yum
refuses to work without rebuild.
2012-06-13 04:56:11 +02:00
Joanna Rutkowska
6df913e880
version 1.7.26
2012-06-12 12:25:19 +02:00
Marek Marczykowski
e5c77507a1
vm: chown /home/user to user if user UID have changed
...
FC16 and FC17 starts normal users at UID 1000, not 500 as in <=FC15.
2012-06-11 22:35:44 +02:00
Marek Marczykowski
975c0a0bc7
vm: fix yum-qubes-hooks
...
Program must be given as full path to qrexec_client_vm - it is passed directly
to execv.
2012-06-11 22:35:44 +02:00
Marek Marczykowski
64a9c54ba6
vm: enable yum-qubes-hooks plugin ( #592 )
2012-06-11 22:35:44 +02:00
Marek Marczykowski
20c170427d
vm: disable gnome update plugin, not only unattended installation
2012-06-11 22:35:44 +02:00
Marek Marczykowski
871d4485b9
dom0+vm/qvm-block: speed up udev block handler ( #560 )
...
xenstore is very slow, so don't bother it when unneeded. Namely do not try to
remove entries, which haven't even created.
2012-06-11 22:35:44 +02:00
Marek Marczykowski
3e89b33209
vm/spec: create firmware symlink only when needed
...
On new systems, like FC16+, firmware is provided by separate package (like
linux-firmware), so no longer need to get it from kernel package.
2012-06-06 03:00:05 +02:00
Marek Marczykowski
baf95fb765
vm/spec: depend on ethtool _package_
2012-06-06 02:59:07 +02:00
Marek Marczykowski
03b5c4778a
vm: use yum proxy in TemplateVM by default ( #590 )
2012-06-05 21:21:53 +02:00
Marek Marczykowski
06c4d57b60
vm: yum plugin to notify dom0 about installed updates ( #592 )
2012-06-05 21:21:53 +02:00
Marek Marczykowski
b77cd12dff
vm/systemd: fix ProxyVM related services deps ( #578 )
2012-06-05 21:21:53 +02:00
Marek Marczykowski
55f99e23db
makefile: rename vchan Makefile to not conflict with windows build
2012-06-05 21:21:53 +02:00
Marek Marczykowski
9930a89fb1
vm/qubes-yum-proxy: setup yum to use qubes-yum-proxy ( #568 )
...
The simplest way is just add proxy=... entry to /etc/yum.conf, but sometimes it
is reasonable to bypass the proxy. Some examples:
- usage of non-standard repos with some exotic file layout, which will be
blocked by the proxy
- usage of repos not-accessible via proxy (eg only via VPN stared in VpnVM)
This commit introduces 'yum-proxy-setup' pseudo-service, which can be
controlled via standard qvm-service or qubes-manager. When enabled - yum will
be configured at VM startup to use qubes proxy, otherwise - to connect directly
(proxy setting will be cleared).
2012-05-31 03:11:44 +02:00
Marek Marczykowski
c37e4b2344
vm/qubes-yum-proxy: create dir for pidfile under FC15 ( #568 )
...
On FC>=15 /var/run is on tmpfs, so /var/run/tinyproxy from rpm don't survive
reboot. This is bug in Fedora package (should include config file for tmpfiles
service). For now create dir just before starting service.
2012-05-31 03:11:43 +02:00
Marek Marczykowski
0430e5186b
vm: qubes-yum-proxy service ( #568 )
...
Introduce proxy service, which allow only http(s) traffic to yum repos. The
filter rules are based on URL regexp, so it isn't full-featured content
inspection and can be easy bypassed, but should be enough to prevent some
erroneus user actions (like clicking on invalid link).
It is set up to intercept connections to 10.137.255.254:8082, so VM can connect
to this IP regardless of VM in which proxy is running. By default it is
started in every NetVM, but this can be changed using qvm-service or
qubes-manager (as always).
2012-05-31 03:11:43 +02:00
Marek Marczykowski
542cd42d04
vm/spec: remove executable perm where not needed
2012-05-31 03:11:43 +02:00
Marek Marczykowski
4b98106732
dom0+vm/iptables: add PR-QBS-SERVICES chain in PREROUTING nat table
...
Additional chain for some qubes-related redirections. BTW PR-QBS should be
renamed now to PR-QBS-DNS...
2012-05-31 03:11:43 +02:00
Marek Marczykowski
c18cb08f8c
dom0+vm/vif-script: setup IP address of net backend interface
...
This is needed to connect to ProxyVM/NetVM, not only pass traffic ahead. Still
firewall rules applies.
2012-05-31 03:11:43 +02:00
Marek Marczykowski
f290b2e939
vm+dom0/vif-script: indent fix
2012-05-31 03:11:43 +02:00
