Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
378 Commits 1 Branch 0 Tags 34 MiB
61d88dd8df
Commit Graph

82 Commits

Author SHA1 Message Date
Joanna Rutkowska
8242e6fc5b vm: allow user-define hook for IP change event 
This is especially useful for proxy VMs that e.g. run some transparent proxy service such as tor,
and need to rebind it upon IP change (of course this assumes iptables-based transparent redirection
such as DNAT).
 2011-08-18 15:49:49 +02:00
Joanna Rutkowska
a014fb19cf Merge branch 'prebeta2' of git.qubes-os.org:/var/lib/qubes/git/rafal/core 2011-08-02 19:35:19 +02:00
Rafal Wojtczuk
5cbb38a2a9 setup_ip: turn off sg 
Apparently vif frontend has broken sg implementation; we already worked around
it in init.d script via ethtool; now do the same in setup_ip. It is relevant
when attaching firewallvm to a different netvm on the fly.
 2011-08-02 19:27:45 +02:00
Joanna Rutkowska
ff2f260352 Merge branch 'prebeta2' of git.qubes-os.org:/var/lib/qubes/git/rafal/core 2011-08-01 15:41:56 +02:00
Rafal Wojtczuk
968308c55f qvm-prefs: allow on the fly netvm switch (#302) 
When changing netvm of a running vm, detach/attach eth0.
Some functionality of qubes_core_netvm thus is duplicated in setup_ip.
REQUIRES http://git.qubes-os.org/?p=rafal/xen.git;a=commit;h=42c72e6173586a807f8f153391e2e57352d362b1
 2011-08-01 15:06:01 +02:00
Marek Marczykowski
89fba848e1 dom0+vm: Polishing qvm-dom0-upgrade (#287) 
Do not print error message when no package downloaded. Also some more covenient
usage when dowloading new packages (implied --resolve --nogui).
 2011-07-25 13:45:36 +02:00
Marek Marczykowski
22fbccee6b dom0+vm: download updates as normal user (#198) 2011-07-17 01:20:13 +02:00
Marek Marczykowski
382dafb6cd vm: Split updates check and download into separate scripts (#198) 2011-07-17 01:20:13 +02:00
Marek Marczykowski
ac61edf880 dom0: implement size/file-count limit of downloaded updates (#198) 
Currently limit is 2GB and 2048 files, but can be adjusted by env variables
(UPDATES_MAX_BYTES, UPDATES_MAX_FILES).
 2011-07-17 01:20:13 +02:00
Marek Marczykowski
4da05e52d8 vm: more reliably set IP address of VM 2011-07-14 02:11:43 +02:00
Marek Marczykowski
1288b7a839 vm: Do not try to load non-existing xen-evtchn module 2011-07-10 23:54:23 +02:00
Rafal Wojtczuk
601d0ec931 qrexec: adjust updates fetching to the new qrexec api 2011-07-06 14:44:40 +02:00
Rafal Wojtczuk
3ea7aca257 qrexec: change qrexec_client_vm syntax to be nicer to read 
Now the local_program is just before arguments, which is nicer.
 2011-07-06 14:21:35 +02:00
Rafal Wojtczuk
9b831e32cb qrexec: adjust appmenu syncing to the new qrexec api 2011-07-06 14:09:36 +02:00
Marek Marczykowski
3b81062087 vm: remove /lib/modules from fstab (#263) 
This is mounted by initramfs
 2011-07-03 20:53:36 +02:00
Marek Marczykowski
f963a419b6 vm: Do not setup IP second time 
It is assigned by udev script
 2011-07-03 20:11:55 +02:00
Marek Marczykowski
508a39cbb0 vm: Load evtchn module by script in /etc/sysconfig/modules 2011-07-02 19:11:15 +02:00
Marek Marczykowski
84eaf09bc6 Revert "vm: Load evtchn module in qubes_core" 
This reverts commit 26a9b7754514bae4dabf57808c9be22e2b560416.
Will be loaded by separate script in /etc/sysconfig/modules

Conflicts:

	common/qubes_core
 2011-07-02 19:09:28 +02:00
Joanna Rutkowska
232f22856c vm: qubes_core ident fixes 2011-07-02 13:14:57 +02:00
Joanna Rutkowska
0574daa2c5 vm: Load evtchn module in qubes_core 2011-07-02 13:12:53 +02:00
Joanna Rutkowska
62c1a9c780 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-07-02 00:29:32 +02:00
Marek Marczykowski
c01485b19a vm: Load u2mfn module 2011-07-02 00:24:20 +02:00
Joanna Rutkowska
3d1ca80d28 Update VM yum repos confs for Beta2 2011-07-01 22:56:11 +02:00
Marek Marczykowski
b6f036caf2 dom0+vm: Update VM kernel mechanism (#242) 
Get kernel from global kernels dir (/var/lib/qubes/vm-kernels), not per-VM. Can
be configured by qvm-prefs (kernel parameter).
New tool: qvm-set-default-kernel

For backward compatibility kernel=None means kernel in VM dir (kernels subdir).
(possibly empty) modules.img should be created in it.
 2011-06-30 01:07:47 +02:00
Marek Marczykowski
ae8a8229ee vm: Check for TemplateVM updates (#198) 
Just before dom0 updates check for TemplateVM updates and notify the user when
there are some.
 2011-06-27 21:14:34 +02:00
Marek Marczykowski
a62644bb4f vm: Run ntpd in FirewallVM as clock source for dom0 (#198) 2011-06-27 21:14:34 +02:00
Marek Marczykowski
f564a4d143 dom0+vm: Tools for downloading dom0 update by VM (#198) 
Mainly 4 parts:
 - scripts for providing rpmdb and yum repos to VM (choosen by qvm-set-updatevm)
 - VM script for downloading updates (qubes_download_dom0_updates.sh)
 - qfile-dom0-unpacker which receive updates, check signatures and place its in dom0 local yum repo
 - qvm-dom0-upgrade which calls all of above and after all yum gpk-update-viewer

Besides qvm-dom0-upgrade, updates are checked every 6h and user is prompted if
want to download it. At dom0 side gpk-update-icon (disabled yet) should notice
new updates in "local" repo.
 2011-06-22 00:44:48 +02:00
Marek Marczykowski
31f0308d45 dom0+vm: Trigger appmenus sync after yum transaction (#45), NEW QREXEC COMMAND 
After yum transaction (install/upgrade/remove),
yum-plugin-post-transaction-actions will execute script which trigger
qvm-sync-appmenus in dom0 (through qrexec).
THIS INTRODUCE NEW PREDEFINED COMMAND IN QREXEC
 2011-06-12 01:46:24 +02:00
Marek Marczykowski
12971ec163 dom0: block-snapshot: add prepare and cleanup actions 
"prepare" and "cleanup" actions can be used to setup device manually - not from
udev. This is used by qvm-revert-template-changes.
 2011-06-10 18:34:17 +02:00
Marek Marczykowski
20fe69db75 dom0: block-snapshot: retrieve domain name from frontend-id only when no "domain" entry in xenstore 
This enables compatibility with libxl AND xend.
 2011-06-10 18:33:31 +02:00
Marek Marczykowski
6192e35419 dom0: block-snapshot: enable nullglob to not fail on snapshot/origin remove 
Normally should not happen because all domains needs at least one snapshot
device, but in some rare situation can be helpful to cleanup stale devices.
 2011-06-10 18:29:56 +02:00
Marek Marczykowski
68b5a71add dom0: Use /var/run/xen-hotplug to store information needed for block devices cleanup. 
Libxl removes xenstore entries before udev (+scripts) have chance to read it.
 2011-06-09 14:06:24 +02:00
Marek Marczykowski
1c1e4362b0 Merge branch 'r1-beta1-fixes' 
Conflicts:
	dom0/qvm-core/qubes.py
	version_dom0
	version_vm
 2011-05-24 00:20:39 +02:00
Joanna Rutkowska
76e7a52628 vm: add current-testing repo definitions 2011-05-23 21:39:48 +02:00
Timo Juhani Lindfors
8fac6139be Ensure 'make clean' removes xenstore-watch 2011-05-13 14:16:10 +02:00
Marek Marczykowski
638473a364 Connect vif's to already running VMs on NetVM/ProxyVM startup (#190) 
Also cleanup stale vifs using "xm network-detach ... -f"
Fix iptables rules to support not only first vif of VM
 2011-04-23 03:05:27 +02:00
Marek Marczykowski
59da079f22 Configure VM network iface on attach (not only on boot) (#190) 2011-04-23 02:31:54 +02:00
Marek Marczykowski
0c0083c457 Allow normal user to read xenstore values 
This is needed by qubes-session
 2011-04-07 18:43:52 +02:00
Joanna Rutkowska
44cfc0d2ef Use different repo files depending on %{dist} tag (#197) 2011-04-06 13:59:43 +02:00
Joanna Rutkowska
25704104a4 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-04-06 10:40:51 +02:00
Marek Marczykowski
ae3092e741 Optimize iptables rules in NetVM 
Move "state RELATED,ESTABLISHED" rule to the beginning.
 2011-04-06 10:33:42 +02:00
Joanna Rutkowska
809ab3f950 Correct repo file for VMs 2011-04-05 23:53:44 +02:00
Joanna Rutkowska
21e0c9d3f7 commonvm: Update repo info, use local RPM keys 2011-04-04 11:27:48 +02:00
Joanna Rutkowska
8ac5329884 Fix stupid synatx error that prevented displaing error messages 2011-03-31 15:25:33 +02:00
Joanna Rutkowska
d9c9e802d4 Move nautilus scripts creation to qubes_core 
qubes_core_appvm executes too early, when /home is still not symlinked to /rw/home.
 2011-03-31 15:15:10 +02:00
Joanna Rutkowska
90423aae41 Use zenity instead of kdialog in appvm code 2011-03-31 13:26:41 +02:00
Tomasz Sterna
4b3d17c15a Create needed NetworkManager.conf in netvm. #94 
Also fixed qubes_fix_nm_conf.sh script.
 2011-03-26 11:33:04 +01:00
Rafal Wojtczuk
81257fff75 Removed obsolete code, in appvm. 2011-03-24 17:13:21 +01:00
Rafal Wojtczuk
7fb123db92 Move execution of qrexec_agent to qubes_core 
Previously it was in both qubes_core_appvm and qubes_core_netvm;
somehow counterintuitively, qubes_core_netvm executes on appvm, too. So
move it to a common place.
 2011-03-23 11:34:01 +01:00
Rafal Wojtczuk
dfb499c025 Merge branch 'blockless' into spring-merge 
Conflicts:
	appvm/Makefile
	appvm/qubes_core
	netvm/qubes_core
	rpm_spec/core-appvm.spec
	rpm_spec/core-netvm.spec
 2011-03-21 13:54:35 +01:00