Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
1,414 Commits 1 Branch 0 Tags 34 MiB
6c288d0ac2
Commit Graph

1414 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Joanna Rutkowska
72846acf2a Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-06-22 15:17:45 +02:00
Joanna Rutkowska
2d20600f29 version 2.0.28 2012-06-19 15:31:43 +02:00
Joanna Rutkowska
8a7f3819ce Merge branch 'hvm' of 10.141.1.101:/var/lib/qubes/git/marmarek/core into hvm 2012-06-19 15:23:39 +02:00
Joanna Rutkowska
b38685deba Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-06-19 15:20:05 +02:00
Marek Marczykowski
4dbe4da998 Merge branch 'hvm' of git://gitpro.qubes-os.org/alex/core into hvm 2012-06-15 17:48:37 +02:00
Joanna Rutkowska
e213d17341 version 1.7.27 2012-06-14 11:23:59 +02:00
Joanna Rutkowska
07fd62e330 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2012-06-14 11:22:53 +02:00
Joanna Rutkowska
ef4b663519 version 2.0.27 2012-06-14 10:45:30 +02:00
Joanna Rutkowska
1351bf9773 Merge branch 'hvm' of 10.141.1.101:/var/lib/qubes/git/marmarek/core into hvm 2012-06-14 10:43:45 +02:00
Joanna Rutkowska
f1eb950b2e Merge branch 'hvm' of 10.141.1.101:/var/lib/qubes/git/marmarek/core into hvm 2012-06-13 14:47:06 +02:00
Marek Marczykowski
a952fc503d vm/qubes-dom0-update: rebuild dom0 rpmdb before touching it with yum 
Dom0 can have different (older) rpmdb version than VM. Starting from FC17 yum
refuses to work without rebuild.
 2012-06-13 04:56:11 +02:00
Marek Marczykowski
dd8400ee27 vm/qubes-dom0-update: rebuild dom0 rpmdb before touching it with yum 
Dom0 can have different (older) rpmdb version than VM. Starting from FC17 yum
refuses to work without rebuild.
 2012-06-13 01:59:25 +02:00
Joanna Rutkowska
6df913e880 version 1.7.26 2012-06-12 12:25:19 +02:00
Joanna Rutkowska
4fc2e799a8 version 2.0.26 2012-06-12 12:12:31 +02:00
Marek Marczykowski
e5c77507a1 vm: chown /home/user to user if user UID have changed 
FC16 and FC17 starts normal users at UID 1000, not 500 as in <=FC15.
 2012-06-11 22:35:44 +02:00
Marek Marczykowski
975c0a0bc7 vm: fix yum-qubes-hooks 
Program must be given as full path to qrexec_client_vm - it is passed directly
to execv.
 2012-06-11 22:35:44 +02:00
Marek Marczykowski
64a9c54ba6 vm: enable yum-qubes-hooks plugin (#592) 2012-06-11 22:35:44 +02:00
Marek Marczykowski
20c170427d vm: disable gnome update plugin, not only unattended installation 2012-06-11 22:35:44 +02:00
Marek Marczykowski
871d4485b9 dom0+vm/qvm-block: speed up udev block handler (#560) 
xenstore is very slow, so don't bother it when unneeded. Namely do not try to
remove entries, which haven't even created.
 2012-06-11 22:35:44 +02:00
Marek Marczykowski
e9bdc21bc2 vm: chown /home/user to user if user UID have changed 
FC16 and FC17 starts normal users at UID 1000, not 500 as in <=FC15.
 2012-06-11 22:33:57 +02:00
Marek Marczykowski
9a028d23c5 Merge branch 'hvm' of git://gitpro.qubes-os.org/alex/core into hvm 2012-06-09 12:12:36 +02:00
Marek Marczykowski
27664a74f1 vm: fix yum-qubes-hooks 
Program must be given as full path to qrexec_client_vm - it is passed directly
to execv.
 2012-06-08 04:36:33 +02:00
Marek Marczykowski
b4561e4453 vm: enable yum-qubes-hooks plugin (#592) 2012-06-08 00:34:11 +02:00
Marek Marczykowski
c7fbe7f6c3 vm: disable gnome update plugin, not only unattended installation 2012-06-08 00:24:46 +02:00
Marek Marczykowski
43416870fb vm/spec: create firmware symlink only when needed 
On new systems, like FC16+, firmware is provided by separate package (like
linux-firmware), so no longer need to get it from kernel package.
 2012-06-06 03:02:58 +02:00
Marek Marczykowski
48a08ab2f0 vm/spec: depend on ethtool _package_ 2012-06-06 03:02:58 +02:00
Marek Marczykowski
3e89b33209 vm/spec: create firmware symlink only when needed 
On new systems, like FC16+, firmware is provided by separate package (like
linux-firmware), so no longer need to get it from kernel package.
 2012-06-06 03:00:05 +02:00
Marek Marczykowski
baf95fb765 vm/spec: depend on ethtool _package_ 2012-06-06 02:59:07 +02:00
Marek Marczykowski
78faa76c7d dom0+vm/qvm-block: speed up udev block handler (#560) 
xenstore is very slow, so don't bother it when unneeded. Namely do not try to
remove entries, which haven't even created.
 2012-06-06 02:12:10 +02:00
Marek Marczykowski
03b5c4778a vm: use yum proxy in TemplateVM by default (#590) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
06c4d57b60 vm: yum plugin to notify dom0 about installed updates (#592) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
b77cd12dff vm/systemd: fix ProxyVM related services deps (#578) 2012-06-05 21:21:53 +02:00
Marek Marczykowski
55f99e23db makefile: rename vchan Makefile to not conflict with windows build 2012-06-05 21:21:53 +02:00
Marek Marczykowski
8519f12630 vm: use yum proxy in TemplateVM by default (#590) 2012-06-05 19:42:11 +02:00
Marek Marczykowski
a1bebcd10d vm: yum plugin to notify dom0 about installed updates (#592) 2012-06-05 19:28:59 +02:00
Marek Marczykowski
c28a0ea463 vm/systemd: fix ProxyVM related services deps (#578) 2012-06-04 15:29:26 +02:00
Alexander Tereshkin
98f4dedb36 Merge branch 'hvm' of 10.141.1.101:/var/lib/qubes/git/marmarek/core into hvm 2012-06-04 17:11:03 +04:00
Alexander Tereshkin
f92a5c80fb Merge branch 'hvm' of git://10.141.1.101/joanna/core into hvm 2012-06-04 16:42:30 +04:00
Marek Marczykowski
77e38afcd9 makefile: rename vchan Makefile to not conflict with windows build 2012-06-02 12:32:49 +02:00
Marek Marczykowski
75b8083e28 Merge branch 'hvm' of git://gitpro.qubes-os.org/alex/core into hvm 2012-06-02 00:46:41 +02:00
Marek Marczykowski
9930a89fb1 vm/qubes-yum-proxy: setup yum to use qubes-yum-proxy (#568) 
The simplest way is just add proxy=... entry to /etc/yum.conf, but sometimes it
is reasonable to bypass the proxy. Some examples:
 - usage of non-standard repos with some exotic file layout, which will be
   blocked by the proxy
 - usage of repos not-accessible via proxy (eg only via VPN stared in VpnVM)

This commit introduces 'yum-proxy-setup' pseudo-service, which can be
controlled via standard qvm-service or qubes-manager. When enabled - yum will
be configured at VM startup to use qubes proxy, otherwise - to connect directly
(proxy setting will be cleared).
 2012-05-31 03:11:44 +02:00
Marek Marczykowski
c37e4b2344 vm/qubes-yum-proxy: create dir for pidfile under FC15 (#568) 
On FC>=15 /var/run is on tmpfs, so /var/run/tinyproxy from rpm don't survive
reboot. This is bug in Fedora package (should include config file for tmpfiles
service). For now create dir just before starting service.
 2012-05-31 03:11:43 +02:00
Marek Marczykowski
0430e5186b vm: qubes-yum-proxy service (#568) 
Introduce proxy service, which allow only http(s) traffic to yum repos. The
filter rules are based on URL regexp, so it isn't full-featured content
inspection and can be easy bypassed, but should be enough to prevent some
erroneus user actions (like clicking on invalid link).

It is set up to intercept connections to 10.137.255.254:8082, so VM can connect
to this IP regardless of VM in which proxy is running. By default it is
started in every NetVM, but this can be changed using qvm-service or
qubes-manager (as always).
 2012-05-31 03:11:43 +02:00
Marek Marczykowski
542cd42d04 vm/spec: remove executable perm where not needed 2012-05-31 03:11:43 +02:00
Marek Marczykowski
4b98106732 dom0+vm/iptables: add PR-QBS-SERVICES chain in PREROUTING nat table 
Additional chain for some qubes-related redirections. BTW PR-QBS should be
renamed now to PR-QBS-DNS...
 2012-05-31 03:11:43 +02:00
Marek Marczykowski
c18cb08f8c dom0+vm/vif-script: setup IP address of net backend interface 
This is needed to connect to ProxyVM/NetVM, not only pass traffic ahead. Still
firewall rules applies.
 2012-05-31 03:11:43 +02:00
Marek Marczykowski
f290b2e939 vm+dom0/vif-script: indent fix 2012-05-31 03:11:43 +02:00
Marek Marczykowski
bdf8e5f5c7 vm/notify-update: do not treat network problems as updates pending symptom 2012-05-31 03:09:22 +02:00
Marek Marczykowski
4365b7b270 vm/qubes-yum-proxy: setup yum to use qubes-yum-proxy (#568) 
The simplest way is just add proxy=... entry to /etc/yum.conf, but sometimes it
is reasonable to bypass the proxy. Some examples:
 - usage of non-standard repos with some exotic file layout, which will be
   blocked by the proxy
 - usage of repos not-accessible via proxy (eg only via VPN stared in VpnVM)

This commit introduces 'yum-proxy-setup' pseudo-service, which can be
controlled via standard qvm-service or qubes-manager. When enabled - yum will
be configured at VM startup to use qubes proxy, otherwise - to connect directly
(proxy setting will be cleared).
 2012-05-31 03:05:13 +02:00
Marek Marczykowski
9c434abc82 vm/qubes-yum-proxy: create dir for pidfile under FC15 (#568) 
On FC>=15 /var/run is on tmpfs, so /var/run/tinyproxy from rpm don't survive
reboot. This is bug in Fedora package (should include config file for tmpfiles
service). For now create dir just before starting service.
 2012-05-31 03:05:05 +02:00