core-agent.spec.in 34 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048
  1. #
  2. # The Qubes OS Project, http://www.qubes-os.org
  3. #
  4. # Copyright (C) 2010 Joanna Rutkowska <joanna@invisiblethingslab.com>
  5. # Copyright (C) 2010 Rafal Wojtczuk <rafal@invisiblethingslab.com>
  6. #
  7. # This program is free software; you can redistribute it and/or
  8. # modify it under the terms of the GNU General Public License
  9. # as published by the Free Software Foundation; either version 2
  10. # of the License, or (at your option) any later version.
  11. #
  12. # This program is distributed in the hope that it will be useful,
  13. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  14. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  15. # GNU General Public License for more details.
  16. #
  17. # You should have received a copy of the GNU General Public License
  18. # along with this program; if not, write to the Free Software
  19. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  20. #
  21. #
  22. %define qubes_services qubes-core qubes-core-netvm qubes-core-early qubes-firewall qubes-iptables qubes-updates-proxy qubes-updates-proxy-forwarder
  23. %define qubes_preset_file 75-qubes-vm.preset
  24. # systemd is used in Fedora and CentOS
  25. %if 0%{?fedora} || 0%{?rhel}
  26. %define with_sysvinit 0
  27. %else
  28. %define with_sysvinit 1
  29. %endif
  30. %if 0%{?rhel} == 8
  31. %define plateform_python3_sitelib %(/usr/libexec/platform-python -c 'import distutils.sysconfig; print(distutils.sysconfig.get_python_lib())')
  32. %endif
  33. %define scriptletfuns is_static() { \
  34. [ -f "%{_unitdir}/$1" ] && ! grep -q '^[[].nstall]' "%{_unitdir}/$1" \
  35. } \
  36. \
  37. is_masked() { \
  38. if [ ! -L %{_sysconfdir}/systemd/system/"$1" ] \
  39. then \
  40. return 1 \
  41. fi \
  42. target=`readlink %{_sysconfdir}/systemd/system/"$1" 2>/dev/null` || : \
  43. if [ "$target" = "/dev/null" ] \
  44. then \
  45. return 0 \
  46. fi \
  47. return 1 \
  48. } \
  49. \
  50. mask() { \
  51. ln -sf /dev/null %{_sysconfdir}/systemd/system/"$1" \
  52. } \
  53. \
  54. unmask() { \
  55. if ! is_masked "$1" \
  56. then \
  57. return 0 \
  58. fi \
  59. rm -f %{_sysconfdir}/systemd/system/"$1" \
  60. } \
  61. \
  62. preset_units() { \
  63. local represet= \
  64. cat "$1" | while read action unit_name \
  65. do \
  66. if [ "$action" = "#" -a "$unit_name" = "Units below this line will be re-preset on package upgrade" ] \
  67. then \
  68. represet=1 \
  69. continue \
  70. fi \
  71. echo "$action $unit_name" | grep -q '^[[:space:]]*[^#;]' || continue \
  72. [ -n "$action" -a -n "$unit_name" ] || continue \
  73. if [ "$2" = "initial" -o "$represet" = "1" ] \
  74. then \
  75. if [ "$action" = "disable" ] && is_static "$unit_name" \
  76. then \
  77. if ! is_masked "$unit_name" \
  78. then \
  79. # We must effectively mask these units, even if they are static. \
  80. mask "$unit_name" \
  81. fi \
  82. elif [ "$action" = "enable" ] && is_static "$unit_name" \
  83. then \
  84. if is_masked "$unit_name" \
  85. then \
  86. # We masked this static unit before, now we unmask it. \
  87. unmask "$unit_name" \
  88. fi \
  89. systemctl --no-reload preset "$unit_name" >/dev/null 2>&1 || : \
  90. else \
  91. systemctl --no-reload preset "$unit_name" >/dev/null 2>&1 || : \
  92. fi \
  93. fi \
  94. done \
  95. } \
  96. \
  97. restore_units() { \
  98. grep '^[[:space:]]*[^#;]' "$1" | while read action unit_name \
  99. do \
  100. if is_static "$unit_name" && is_masked "$unit_name" \
  101. then \
  102. # If the unit had been masked by us, we must unmask it here. \
  103. # Otherwise systemctl preset will fail badly. \
  104. unmask "$unit_name" \
  105. fi \
  106. systemctl --no-reload preset "$unit_name" >/dev/null 2>&1 || : \
  107. done \
  108. } \
  109. Name: qubes-core-agent
  110. Version: @VERSION@
  111. Release: 1%{dist}
  112. Summary: The QubesOS core files for VMs
  113. Group: Qubes
  114. Vendor: Invisible Things Lab
  115. License: GPL
  116. URL: https://www.qubes-os.org
  117. Conflicts: firewalld
  118. Requires: xdg-utils
  119. Requires: qubes-utils >= 3.1.3
  120. Requires: qubes-utils-libs >= 4.0.16
  121. Requires: initscripts
  122. Requires: gawk
  123. Requires: sed
  124. Requires: util-linux
  125. Requires: e2fsprogs
  126. Requires: hostname
  127. # for Qubes Manager VM updater
  128. Requires: xterm
  129. # for qubes-desktop-run
  130. Requires: python%{python3_pkgversion}-gobject-base
  131. Requires: python%{python3_pkgversion}-dbus
  132. # for qubes-session-autostart, xdg-icon
  133. Requires: python%{python3_pkgversion}-pyxdg
  134. Requires: python%{python3_pkgversion}-daemon
  135. # for qvm-feature-request
  136. Requires: python%{python3_pkgversion}-qubesdb
  137. # for qubes.ShowInTerminal RPC service
  138. Requires: socat
  139. Requires: ImageMagick
  140. Requires: librsvg2-tools
  141. Requires: zenity
  142. Requires: dconf
  143. Requires: qubes-core-qrexec-vm
  144. Requires: qubes-libvchan
  145. Requires: qubes-db-vm
  146. %if 0%{?rhel} == 8
  147. # we need to stick to related DNF python version
  148. # which is python3.6 by default
  149. Requires: python3-dnf-plugins-qubes-hooks
  150. %else
  151. Requires: python%{python3_pkgversion}-dnf-plugins-qubes-hooks
  152. %endif
  153. Requires: python%{python3_pkgversion}-setuptools
  154. # for qubes.ResizeDisk
  155. Requires: parted
  156. Obsoletes: qubes-core-vm-kernel-placeholder <= 1.0
  157. Obsoletes: qubes-upgrade-vm < 3.2
  158. Provides: qubes-core-vm = %{version}-%{release}
  159. Obsoletes: qubes-core-vm < 4.0.0
  160. Provides: qubes-core-vm-doc = %{version}-%{release}
  161. Obsoletes: qubes-core-vm-doc < 4.0.0
  162. Conflicts: qubes-gui-agent < 4.1.6
  163. BuildRequires: gcc
  164. BuildRequires: pandoc
  165. BuildRequires: xen-devel
  166. BuildRequires: libX11-devel
  167. BuildRequires: qubes-utils-devel >= 3.1.3
  168. BuildRequires: qubes-libvchan-@BACKEND_VMM@-devel
  169. BuildRequires: pam-devel
  170. BuildRequires: python%{python3_pkgversion}-setuptools
  171. BuildRequires: systemd
  172. Source0: %{name}-%{version}.tar.gz
  173. %description
  174. The Qubes core files for installation inside a Qubes VM.
  175. %package -n python2-dnf-plugins-qubes-hooks
  176. Summary: DNF plugin for Qubes specific post-installation actions
  177. BuildRequires: python2-devel
  178. %{?python_provide:%python_provide python2-dnf-plugins-qubes-hooks}
  179. %description -n python2-dnf-plugins-qubes-hooks
  180. DNF plugin for Qubes specific post-installation actions:
  181. * notify dom0 that updates were installed
  182. * refresh applications shortcut list
  183. %if 0%{?rhel} == 8
  184. %package -n python3-dnf-plugins-qubes-hooks
  185. Summary: DNF plugin for Qubes specific post-installation actions
  186. BuildRequires: python3-devel
  187. %description -n python3-dnf-plugins-qubes-hooks
  188. DNF plugin for Qubes specific post-installation actions:
  189. * notify dom0 that updates were installed
  190. * refresh applications shortcut list
  191. %else
  192. %package -n python%{python3_pkgversion}-dnf-plugins-qubes-hooks
  193. Summary: DNF plugin for Qubes specific post-installation actions
  194. BuildRequires: python%{python3_pkgversion}-devel
  195. %{?python_provide:%python_provide python%{python3_pkgversion}-dnf-plugins-qubes-hooks}
  196. %description -n python%{python3_pkgversion}-dnf-plugins-qubes-hooks
  197. DNF plugin for Qubes specific post-installation actions:
  198. * notify dom0 that updates were installed
  199. * refresh applications shortcut list
  200. %endif
  201. %package nautilus
  202. Summary: Qubes integration for Nautilus
  203. Requires: qubes-core-agent = %{version}
  204. Requires: nautilus-python
  205. Conflicts: qubes-core-vm < 4.0.0
  206. %description nautilus
  207. Nautilus addons for inter-VM file copy/move/open.
  208. %package dom0-updates
  209. Summary: Scripts required to handle dom0 updates
  210. Requires: qubes-core-agent = %{version}
  211. Requires: fakeroot
  212. Conflicts: qubes-core-vm < 4.0.0
  213. Requires: tar
  214. %description dom0-updates
  215. Scripts required to handle dom0 updates.
  216. %package networking
  217. Summary: Networking support for Qubes VM
  218. Requires: ethtool
  219. Requires: iptables
  220. Requires: conntrack-tools
  221. Requires: net-tools
  222. Requires: iproute
  223. Requires: nftables
  224. Requires: socat
  225. Requires: qubes-core-agent = %{version}
  226. Requires: tinyproxy
  227. Conflicts: qubes-core-vm < 4.0.0
  228. %description networking
  229. This package provides:
  230. * basic network functionality (setting IP address, DNS, default gateway)
  231. * proxy service used by TemplateVMs to download updates
  232. * qubes-firewall service (FirewallVM)
  233. Note: if you want to use NetworkManager (you do want it in NetVM), install also
  234. qubes-core-agent-network-manager.
  235. %package network-manager
  236. Summary: NetworkManager integration for Qubes VM
  237. # to show/hide nm-applet
  238. Requires: NetworkManager >= 0.8.1-1
  239. Requires: glib2
  240. Requires: polkit
  241. Requires: qubes-core-agent-networking = %{version}
  242. Conflicts: qubes-core-vm < 4.0.0
  243. %description network-manager
  244. Integration of NetworkManager for Qubes VM:
  245. * make connections config persistent
  246. * adjust DNS redirections when needed
  247. * show/hide NetworkManager applet icon
  248. %package passwordless-root
  249. Summary: Passwordless root access from normal user
  250. Conflicts: qubes-core-vm < 4.0.0
  251. %description passwordless-root
  252. Configure sudo, PolicyKit and similar tool to not ask for any password when
  253. switching from user to root. Since all the user data in a VM is accessible
  254. already from normal user account, there is not much more to guard there. Qubes
  255. VM is a single user system.
  256. %package thunar
  257. Summary: Thunar support for Qubes VM tools
  258. Requires: Thunar
  259. %description thunar
  260. Thunar support for Qubes VM tools
  261. %define kde_service_dir /usr/share/kde4/services
  262. %define kde5_service_dir /usr/share/kservices5/ServiceMenus
  263. %prep
  264. %setup -q
  265. %build
  266. %{?set_build_flags}
  267. for dir in qubes-rpc misc; do
  268. make -C $dir BACKEND_VMM=@BACKEND_VMM@
  269. done
  270. make -C doc manpages
  271. %pre
  272. # Make sure there is a qubes group
  273. groupadd --force --system --gid 98 qubes
  274. id -u 'user' >/dev/null 2>&1 || {
  275. useradd --user-group --create-home --shell /bin/bash user
  276. }
  277. usermod -a --groups qubes user
  278. if [ "$1" != 1 ] ; then
  279. # do this whole %%pre thing only when updating for the first time...
  280. exit 0
  281. fi
  282. mkdir -p /var/lib/qubes
  283. if [ -e /etc/fstab ] ; then
  284. mv /etc/fstab /var/lib/qubes/fstab.orig
  285. fi
  286. usermod -L user
  287. %pre passwordless-root
  288. usermod -L root
  289. %install
  290. make install-vm PYTHON=%{__python3} DESTDIR=$RPM_BUILD_ROOT SYSTEM_DROPIN_DIR=%{_unitdir} SYSLIBDIR=/usr/lib
  291. make -C app-menu DESTDIR=$RPM_BUILD_ROOT install
  292. make -C boot/redhat DESTDIR=$RPM_BUILD_ROOT install
  293. make -C config-overrides DESTDIR=$RPM_BUILD_ROOT install
  294. make -C filesystem DESTDIR=$RPM_BUILD_ROOT install
  295. make -C misc DESTDIR=$RPM_BUILD_ROOT install
  296. make -C network DESTDIR=$RPM_BUILD_ROOT install
  297. make -C passwordless-root DESTDIR=$RPM_BUILD_ROOT install install-rh
  298. make -C qubes-rpc DESTDIR=$RPM_BUILD_ROOT install
  299. make -C qubes-rpc/kde DESTDIR=$RPM_BUILD_ROOT install
  300. make -C qubes-rpc/nautilus DESTDIR=$RPM_BUILD_ROOT install
  301. make -C qubes-rpc/thunar DESTDIR=$RPM_BUILD_ROOT install
  302. make -C package-managers PYTHON=%{__python3} DESTDIR=$RPM_BUILD_ROOT install install-dnf
  303. %if 0%{?rhel} == 7
  304. make -C package-managers DESTDIR=$RPM_BUILD_ROOT install-yum
  305. %endif
  306. %if 0%{?rhel} >= 7
  307. sed -i \
  308. -e 's:-primary:-centos:' \
  309. -e 's:/fc:/centos:' \
  310. $RPM_BUILD_ROOT/etc/yum.repos.d/qubes-*.repo
  311. %endif
  312. install -D -m 0644 boot/dracut-qubes.conf $RPM_BUILD_ROOT/usr/lib/dracut/dracut.conf.d/30-qubes.conf
  313. install -D -m 0644 boot/grub.qubes $RPM_BUILD_ROOT/etc/default/grub.qubes
  314. %if ! %with_sysvinit
  315. rm -rf $RPM_BUILD_ROOT/etc/init.d/qubes-* $RPM_BUILD_ROOT/etc/sysconfig/modules/qubes-core.modules
  316. %endif
  317. %triggerin -- initscripts
  318. if [ -e /etc/init/serial.conf ]; then
  319. cp /usr/share/qubes/serial.conf /etc/init/serial.conf
  320. fi
  321. %triggerin -- grub2-tools
  322. if ! grep -q /etc/default/grub.qubes /etc/default/grub 2>/dev/null; then
  323. # do not keep Qubes-related settings directly in user-controlled config,
  324. # include another file
  325. echo '. /etc/default/grub.qubes' >> /etc/default/grub
  326. fi
  327. %triggerin passwordless-root -- util-linux
  328. qubesfile=/etc/pam.d/su.qubes
  329. origfile=${qubesfile%.qubes}
  330. backupfile=${origfile}.qubes-orig
  331. if [ -r "$origfile" -a ! -r "$backupfile" ]; then
  332. mv -f "$origfile" "$backupfile"
  333. fi
  334. ln -sf "$qubesfile" "$origfile"
  335. %post
  336. # disable some Upstart services
  337. for F in plymouth-shutdown prefdm splash-manager start-ttys tty ; do
  338. if [ -e /etc/init/$F.conf ]; then
  339. mv -f /etc/init/$F.conf /etc/init/$F.conf.disabled
  340. fi
  341. done
  342. chgrp user /var/lib/qubes/dom0-updates
  343. # Remove old firmware updates link
  344. if [ -L /lib/firmware/updates ]; then
  345. rm -f /lib/firmware/updates
  346. fi
  347. # convert /usr/local symlink to a mount point
  348. if [ -L /usr/local ]; then
  349. rm -f /usr/local
  350. mkdir /usr/local
  351. mount /usr/local || :
  352. fi
  353. # workaround for Fedora's systemd package bug
  354. # https://bugzilla.redhat.com/1559286
  355. if [ -d /var/lib/private ]; then
  356. chmod 700 /var/lib/private
  357. fi
  358. if test -f /etc/yum.conf && ! grep -q '/etc/yum\.conf\.d/qubes-proxy\.conf' /etc/yum.conf; then
  359. echo >> /etc/yum.conf
  360. echo '# Yum does not support inclusion of config dir...' >> /etc/yum.conf
  361. echo 'include=file:///etc/yum.conf.d/qubes-proxy.conf' >> /etc/yum.conf
  362. fi
  363. if ! [ -r /etc/dconf/profile/user ]; then
  364. mkdir -p /etc/dconf/profile
  365. echo "user-db:user" >> /etc/dconf/profile/user
  366. echo "system-db:local" >> /etc/dconf/profile/user
  367. fi
  368. dconf update &> /dev/null || :
  369. # And actually setup the proxy usage in package managers
  370. /usr/lib/qubes/update-proxy-configs
  371. # Location of files which contains list of protected files
  372. mkdir -p /etc/qubes/protected-files.d
  373. . /usr/lib/qubes/init/functions
  374. # qubes-core-vm has been broken for some time - it overrides /etc/hosts; restore original content
  375. if ! is_protected_file /etc/hosts ; then
  376. if ! grep -q localhost /etc/hosts; then
  377. cat <<EOF > /etc/hosts
  378. 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 `hostname`
  379. ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
  380. EOF
  381. fi
  382. fi
  383. # ensure that hostname resolves to 127.0.0.1 resp. ::1 and that /etc/hosts is
  384. # in the form expected by qubes-sysinit.sh
  385. if ! is_protected_file /etc/hostname ; then
  386. for ip in '127\.0\.0\.1' '::1'; do
  387. if grep -q "^${ip}\(\s\|$\)" /etc/hosts; then
  388. sed -i "/^${ip}\s/,+0s/\(\s`hostname`\)\+\(\s\|$\)/\2/g" /etc/hosts
  389. sed -i "s/^${ip}\(\s\|$\).*$/\0 `hostname`/" /etc/hosts
  390. else
  391. echo "${ip} `hostname`" >> /etc/hosts
  392. fi
  393. done
  394. fi
  395. if [ "$1" != 1 ] ; then
  396. # do the rest of %%post thing only when updating for the first time...
  397. exit 0
  398. fi
  399. if [ -e /etc/init/serial.conf ] && ! [ -f /var/lib/qubes/serial.orig ] ; then
  400. cp /etc/init/serial.conf /var/lib/qubes/serial.orig
  401. fi
  402. # Remove most of the udev scripts to speed up the VM boot time
  403. # Just leave the xen* scripts, that are needed if this VM was
  404. # ever used as a net backend (e.g. as a VPN domain in the future)
  405. #echo "--> Removing unnecessary udev scripts..."
  406. mkdir -p /var/lib/qubes/removed-udev-scripts
  407. for f in /etc/udev/rules.d/*
  408. do
  409. if [ $(basename $f) == "xen-backend.rules" ] ; then
  410. continue
  411. fi
  412. if echo $f | grep -q qubes; then
  413. continue
  414. fi
  415. mv $f /var/lib/qubes/removed-udev-scripts/
  416. done
  417. mkdir -p /rw
  418. #rm -f /etc/mtab
  419. #echo "--> Removing HWADDR setting from /etc/sysconfig/network-scripts/ifcfg-eth0"
  420. #mv /etc/sysconfig/network-scripts/ifcfg-eth0 /etc/sysconfig/network-scripts/ifcfg-eth0.orig
  421. #grep -v HWADDR /etc/sysconfig/network-scripts/ifcfg-eth0.orig > /etc/sysconfig/network-scripts/ifcfg-eth0
  422. %triggerin -- notification-daemon
  423. # Enable autostart of notification-daemon when installed
  424. if [ ! -e /etc/xdg/autostart/notification-daemon.desktop ]; then
  425. ln -s /usr/share/applications/notification-daemon.desktop /etc/xdg/autostart/
  426. fi
  427. exit 0
  428. %triggerin -- selinux-policy
  429. . /usr/lib/qubes/init/functions
  430. if ! is_protected_file /etc/selinux/config; then
  431. echo "--> Disabling SELinux..."
  432. sed -e s/^SELINUX=.*$/SELINUX=disabled/ </etc/selinux/config >/etc/selinux/config.processed
  433. mv /etc/selinux/config.processed /etc/selinux/config
  434. setenforce 0 2>/dev/null
  435. fi
  436. exit 0
  437. %post network-manager
  438. # Create NetworkManager configuration if we do not have it
  439. if ! [ -e /etc/NetworkManager/NetworkManager.conf ]; then
  440. echo '[main]' > /etc/NetworkManager/NetworkManager.conf
  441. echo 'plugins = keyfile' >> /etc/NetworkManager/NetworkManager.conf
  442. echo '[keyfile]' >> /etc/NetworkManager/NetworkManager.conf
  443. fi
  444. # Remove ip_forward setting from sysctl, so NM will not reset it
  445. sed 's/^net.ipv4.ip_forward.*/#\0/' -i /etc/sysctl.conf
  446. /usr/lib/qubes/qubes-fix-nm-conf.sh
  447. %post networking
  448. %systemd_post qubes-firewall.service
  449. %systemd_post qubes-iptables.service
  450. %systemd_post qubes-network.service
  451. %systemd_post qubes-network-uplink.service
  452. %systemd_post qubes-updates-proxy.service
  453. %post thunar
  454. if [ "$1" = 1 ]; then
  455. # There is no system-wide Thunar custom actions. There is only a default
  456. # file and a user file created from the default one. Qubes actions need
  457. # to be placed after all already defined actions and before </actions>
  458. # the end of file.
  459. if [ -f /etc/xdg/Thunar/uca.xml ] ; then
  460. cp -p /etc/xdg/Thunar/uca.xml{,.bak}
  461. sed -i '$e cat /usr/lib/qubes/uca_qubes.xml' /etc/xdg/Thunar/uca.xml
  462. fi
  463. if [ -f /home/user/.config/Thunar/uca.xml ] ; then
  464. cp -p /home/user/.config/Thunar/uca.xml{,.bak}
  465. sed -i '$e cat /usr/lib/qubes/uca_qubes.xml' /home/user/.config/Thunar/uca.xml
  466. fi
  467. fi
  468. %preun
  469. if [ "$1" = 0 ] ; then
  470. # no more packages left
  471. if [ -e /var/lib/qubes/fstab.orig ] ; then
  472. mv /var/lib/qubes/fstab.orig /etc/fstab
  473. fi
  474. mv /var/lib/qubes/removed-udev-scripts/* /etc/udev/rules.d/
  475. if [ -e /var/lib/qubes/serial.orig ] ; then
  476. mv /var/lib/qubes/serial.orig /etc/init/serial.conf
  477. fi
  478. fi
  479. %preun networking
  480. %systemd_preun qubes-firewall.service
  481. %systemd_preun qubes-iptables.service
  482. %systemd_preun qubes-network.service
  483. %systemd_preun qubes-updates-proxy.service
  484. %postun thunar
  485. if [ "$1" = 0 ]; then
  486. if [ -f /etc/xdg/Thunar/uca.xml ] ; then
  487. mv /etc/xdg/Thunar/uca.xml{,.uninstall}
  488. mv /etc/xdg/Thunar/uca.xml{.bak,}
  489. fi
  490. if [ -f /home/user/.config/Thunar/uca.xml ] ; then
  491. mv /home/user/.config/Thunar/uca.xml{,.uninstall}
  492. mv /home/user/.config/Thunar/uca.xml{.bak,}
  493. fi
  494. fi
  495. %postun
  496. if [ $1 -eq 0 ] ; then
  497. /usr/bin/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
  498. if [ -L /lib/firmware/updates ]; then
  499. rm /lib/firmware/updates
  500. fi
  501. rm -rf /var/lib/qubes/xdg
  502. fi
  503. %postun passwordless-root
  504. if [ $1 -eq 0 ]; then
  505. usermod -p '*' root
  506. fi
  507. qubesfile=/etc/pam.d/su.qubes
  508. origfile=${qubesfile%.qubes}
  509. backupfile=${origfile}.qubes-orig
  510. if [ -f "$backupfile" ]; then
  511. mv -f "$backupfile" "$origfile"
  512. fi
  513. %posttrans
  514. /usr/bin/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
  515. %clean
  516. rm -rf $RPM_BUILD_ROOT
  517. rm -f %{name}-%{version}
  518. %files
  519. %defattr(-,root,root,-)
  520. %dir /var/lib/qubes
  521. %{kde_service_dir}/qvm-copy.desktop
  522. %{kde_service_dir}/qvm-move.desktop
  523. %{kde_service_dir}/qvm-dvm.desktop
  524. %{kde5_service_dir}/qvm-copy.desktop
  525. %{kde5_service_dir}/qvm-move.desktop
  526. %{kde5_service_dir}/qvm-dvm.desktop
  527. /etc/fstab
  528. /etc/pki/rpm-gpg/RPM-GPG-KEY-qubes*
  529. %dir /etc/qubes-rpc
  530. %config(noreplace) /etc/qubes-rpc/qubes.ShowInTerminal
  531. %config(noreplace) /etc/qubes-rpc/qubes.Filecopy
  532. %config(noreplace) /etc/qubes-rpc/qubes.OpenInVM
  533. %config(noreplace) /etc/qubes-rpc/qubes.OpenURL
  534. %config(noreplace) /etc/qubes-rpc/qubes.GetAppmenus
  535. %config(noreplace) /etc/qubes-rpc/qubes.ConnectTCP
  536. %config(noreplace) /etc/qubes-rpc/qubes.VMShell
  537. %config(noreplace) /etc/qubes-rpc/qubes.VMExec
  538. %config(noreplace) /etc/qubes-rpc/qubes.VMExecGUI
  539. %config(noreplace) /etc/qubes-rpc/qubes.VMRootShell
  540. %config(noreplace) /etc/qubes-rpc/qubes.SuspendPre
  541. %config(noreplace) /etc/qubes-rpc/qubes.SuspendPreAll
  542. %config(noreplace) /etc/qubes-rpc/qubes.SuspendPost
  543. %config(noreplace) /etc/qubes-rpc/qubes.SuspendPostAll
  544. %config(noreplace) /etc/qubes-rpc/qubes.WaitForSession
  545. %config(noreplace) /etc/qubes-rpc/qubes.DetachPciDevice
  546. %config(noreplace) /etc/qubes-rpc/qubes.Backup
  547. %config(noreplace) /etc/qubes-rpc/qubes.Restore
  548. %config(noreplace) /etc/qubes-rpc/qubes.RegisterBackupLocation
  549. %config(noreplace) /etc/qubes-rpc/qubes.RestoreById
  550. %config(noreplace) /etc/qubes-rpc/qubes.SelectFile
  551. %config(noreplace) /etc/qubes-rpc/qubes.SelectDirectory
  552. %config(noreplace) /etc/qubes-rpc/qubes.GetImageRGBA
  553. %config(noreplace) /etc/qubes-rpc/qubes.SetDateTime
  554. %config(noreplace) /etc/qubes-rpc/qubes.InstallUpdatesGUI
  555. %config(noreplace) /etc/qubes-rpc/qubes.ResizeDisk
  556. %config(noreplace) /etc/qubes-rpc/qubes.StartApp
  557. %config(noreplace) /etc/qubes-rpc/qubes.PostInstall
  558. %config(noreplace) /etc/qubes-rpc/qubes.GetDate
  559. %config(noreplace) /etc/qubes-rpc/qubes.TemplateSearch
  560. %config(noreplace) /etc/qubes-rpc/qubes.TemplateDownload
  561. %config(noreplace) /etc/qubes/rpc-config/qubes.OpenInVM
  562. %config(noreplace) /etc/qubes/rpc-config/qubes.OpenURL
  563. %config(noreplace) /etc/qubes/rpc-config/qubes.SelectFile
  564. %config(noreplace) /etc/qubes/rpc-config/qubes.SelectDirectory
  565. %config(noreplace) /etc/qubes/rpc-config/qubes.ShowInTerminal
  566. %config(noreplace) /etc/qubes/rpc-config/qubes.StartApp
  567. %config(noreplace) /etc/qubes/rpc-config/qubes.InstallUpdatesGUI
  568. %config(noreplace) /etc/qubes/rpc-config/qubes.VMShell+WaitForSession
  569. %config(noreplace) /etc/qubes/rpc-config/qubes.VMExecGUI
  570. %config(noreplace) /etc/default/grub.qubes
  571. %dir /etc/qubes/autostart
  572. /etc/qubes/autostart/README.txt
  573. %config /etc/qubes/autostart/*.desktop.d/30_qubes.conf
  574. %dir /etc/qubes/applications
  575. /etc/qubes/applications/README.txt
  576. %config /etc/qubes/applications/*.desktop.d/30_qubes.conf
  577. %dir /etc/qubes/suspend-pre.d
  578. /etc/qubes/suspend-pre.d/README
  579. %dir /etc/qubes/suspend-post.d
  580. /etc/qubes/suspend-post.d/README
  581. /etc/qubes/suspend-post.d/qvm-sync-clock.sh
  582. %dir /etc/qubes/post-install.d
  583. /etc/qubes/post-install.d/README
  584. /etc/qubes/post-install.d/*.sh
  585. %config(noreplace) /etc/profile.d/qt_x11_no_mitshm.sh
  586. %config(noreplace) /etc/sudoers.d/qt_x11_no_mitshm
  587. %config(noreplace) /etc/sudoers.d/umask
  588. %config(noreplace) /etc/sysctl.d/20_tcp_timestamps.conf
  589. %config(noreplace) /etc/qubes-suspend-module-blacklist
  590. %config(noreplace) /etc/yum.conf.d/qubes-proxy.conf
  591. %config(noreplace) /etc/yum.repos.d/qubes-r4.repo
  592. %if 0%{?rhel} == 7
  593. /etc/yum/pluginconf.d/yum-qubes-hooks.conf
  594. /usr/lib/yum-plugins/yum-qubes-hooks.py*
  595. %endif
  596. %config(noreplace) /etc/dnf/plugins/qubes-hooks.conf
  597. %config(noreplace) /etc/dconf/db/local.d/dpi
  598. /lib/udev/rules.d/50-qubes-mem-hotplug.rules
  599. /usr/lib/systemd/system/user@.service.d/90-session-stop-timeout.conf
  600. /usr/sbin/qubes-serial-login
  601. /usr/bin/qvm-copy-to-vm
  602. /usr/bin/qvm-move-to-vm
  603. /usr/bin/qvm-copy
  604. /usr/bin/qvm-move
  605. /usr/bin/qvm-open-in-dvm
  606. /usr/bin/qvm-open-in-vm
  607. /usr/bin/qvm-run-vm
  608. /usr/bin/qvm-features-request
  609. /usr/bin/qvm-sync-clock
  610. /usr/bin/qubes-desktop-run
  611. /usr/bin/qubes-run-terminal
  612. /usr/bin/qubes-run-gnome-terminal
  613. /usr/bin/qubes-open
  614. /usr/bin/qubes-session-autostart
  615. /usr/bin/qvm-connect-tcp
  616. /usr/bin/qubes-vmexec
  617. %dir /usr/lib/qubes
  618. /usr/lib/qubes/prepare-suspend
  619. /usr/lib/qubes/qfile-agent
  620. %attr(4755,root,root) /usr/lib/qubes/qfile-unpacker
  621. /usr/lib/qubes/qopen-in-vm
  622. /usr/lib/qubes/qrun-in-vm
  623. /usr/lib/qubes/qubes-trigger-sync-appmenus.sh
  624. /usr/lib/qubes/qvm-copy-to-vm.kde
  625. /usr/lib/qubes/qvm-move-to-vm.kde
  626. /usr/lib/qubes/tar2qfile
  627. /usr/lib/qubes/vm-file-editor
  628. /usr/lib/qubes/xdg-icon
  629. /usr/lib/qubes/update-proxy-configs
  630. /usr/lib/qubes/upgrades-installed-check
  631. /usr/lib/qubes/upgrades-status-notify
  632. /usr/lib/qubes/qubes-sync-clock
  633. /usr/lib/qubes/resize-rootfs
  634. /usr/lib/qubes/tinyproxy-wrapper
  635. /usr/lib/qubes/qvm-template-repo-query
  636. /usr/lib/dracut/dracut.conf.d/30-qubes.conf
  637. %dir /usr/lib/qubes/init
  638. /usr/lib/qubes/init/bind-dirs.sh
  639. /usr/lib/qubes/init/control-printer-icon.sh
  640. /usr/lib/qubes/init/functions
  641. /usr/lib/qubes/init/misc-post-stop.sh
  642. /usr/lib/qubes/init/misc-post.sh
  643. /usr/lib/qubes/init/mount-dirs.sh
  644. /usr/lib/qubes/init/qubes-early-vm-config.sh
  645. /usr/lib/qubes/init/qubes-random-seed.sh
  646. /usr/lib/qubes/init/qubes-sysinit.sh
  647. /usr/lib/qubes/init/resize-rootfs-if-needed.sh
  648. /usr/lib/qubes/init/setup-rw.sh
  649. /usr/lib/qubes/init/setup-rwdev.sh
  650. %dir /usr/lib/qubes-bind-dirs.d
  651. /usr/lib/qubes-bind-dirs.d/30_cron.conf
  652. /usr/share/applications/qubes-run-terminal.desktop
  653. /usr/share/applications/qubes-open-file-manager.desktop
  654. /usr/share/qubes/serial.conf
  655. /usr/share/qubes/marker-vm
  656. /usr/share/glib-2.0/schemas/20_org.gnome.settings-daemon.plugins.updates.qubes.gschema.override
  657. /usr/share/glib-2.0/schemas/20_org.gnome.nautilus.qubes.gschema.override
  658. /usr/share/glib-2.0/schemas/20_org.mate.NotificationDaemon.qubes.gschema.override
  659. /usr/share/glib-2.0/schemas/20_org.gnome.desktop.wm.preferences.qubes.gschema.override
  660. %{_mandir}/man1/qvm-*.1*
  661. %dir %{python3_sitelib}/qubesagent-*-py*.egg-info
  662. %{python3_sitelib}/qubesagent-*-py*.egg-info/*
  663. %{python3_sitelib}/qubesagent/__pycache__
  664. %dir %{python3_sitelib}/qubesagent
  665. %{python3_sitelib}/qubesagent/__init__.py*
  666. %{python3_sitelib}/qubesagent/firewall.py*
  667. %{python3_sitelib}/qubesagent/test_firewall.py*
  668. %{python3_sitelib}/qubesagent/vmexec.py*
  669. %{python3_sitelib}/qubesagent/test_vmexec.py*
  670. %{python3_sitelib}/qubesagent/xdg.py*
  671. %{python3_sitelib}/qubesagent/test_xdg.py*
  672. /usr/share/qubes/mime-override/globs
  673. /usr/share/qubes/qubes-master-key.asc
  674. %dir /mnt/removable
  675. %dir /rw
  676. %files -n python2-dnf-plugins-qubes-hooks
  677. %{python2_sitelib}/dnf-plugins/*
  678. %if 0%{?rhel} == 8
  679. %files -n python3-dnf-plugins-qubes-hooks
  680. %{plateform_python3_sitelib}/dnf-plugins/*
  681. %else
  682. %files -n python%{python3_pkgversion}-dnf-plugins-qubes-hooks
  683. %{python3_sitelib}/dnf-plugins/*
  684. %endif
  685. %files nautilus
  686. /usr/lib/qubes/qvm-copy-to-vm.gnome
  687. /usr/lib/qubes/qvm-move-to-vm.gnome
  688. /usr/share/nautilus-python/extensions/qvm_copy_nautilus.py*
  689. /usr/share/nautilus-python/extensions/qvm_move_nautilus.py*
  690. /usr/share/nautilus-python/extensions/qvm_dvm_nautilus.py*
  691. /usr/lib/qubes/qvm_nautilus_bookmark.sh
  692. %files thunar
  693. /usr/lib/qubes/qvm-actions.sh
  694. /usr/lib/qubes/uca_qubes.xml
  695. /etc/xdg/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
  696. %files dom0-updates
  697. %dir %attr(0755,user,user) /var/lib/qubes/dom0-updates
  698. /usr/lib/qubes/qubes-download-dom0-updates.sh
  699. %files networking
  700. %config(noreplace) /etc/qubes-rpc/qubes.UpdatesProxy
  701. %config(noreplace) /etc/qubes/ip6tables.rules
  702. %config(noreplace) /etc/qubes/ip6tables-enabled.rules
  703. %config(noreplace) /etc/qubes/iptables.rules
  704. %config(noreplace) /etc/tinyproxy/tinyproxy-updates.conf
  705. %config(noreplace) /etc/tinyproxy/updates-blacklist
  706. %config(noreplace) /etc/udev/rules.d/99-qubes-network.rules
  707. /etc/dhclient.d/qubes-setup-dnat-to-ns.sh
  708. /etc/xen/scripts/vif-qubes-nat.sh
  709. /etc/xen/scripts/vif-route-qubes
  710. /usr/lib/systemd/system/qubes-firewall.service
  711. /usr/lib/systemd/system/qubes-iptables.service
  712. /usr/lib/systemd/system/qubes-network.service
  713. /usr/lib/systemd/system/qubes-network-uplink.service
  714. /usr/lib/systemd/system/qubes-network-uplink@.service
  715. /usr/lib/systemd/system/qubes-updates-proxy.service
  716. /usr/lib/qubes/init/network-proxy-setup.sh
  717. /usr/lib/qubes/init/network-proxy-stop.sh
  718. /usr/lib/qubes/init/network-uplink-wait.sh
  719. /usr/lib/qubes/init/qubes-iptables
  720. /usr/lib/qubes/iptables-updates-proxy
  721. /usr/lib/qubes/qubes-setup-dnat-to-ns
  722. /usr/lib/qubes/setup-ip
  723. /usr/lib/tmpfiles.d/qubes-core-agent-linux.conf
  724. /usr/bin/qubes-firewall
  725. %files network-manager
  726. /etc/NetworkManager/dispatcher.d/30-qubes-external-ip
  727. /etc/NetworkManager/dispatcher.d/qubes-nmhook
  728. /etc/xdg/autostart/00-qubes-show-hide-nm-applet.desktop
  729. /usr/lib/NetworkManager/conf.d/30-qubes.conf
  730. /usr/lib/qubes/network-manager-prepare-conf-dir
  731. /usr/lib/qubes/qubes-fix-nm-conf.sh
  732. /usr/lib/qubes/show-hide-nm-applet.sh
  733. %files passwordless-root
  734. %config(noreplace) /etc/polkit-1/localauthority/50-local.d/qubes-allow-all.pkla
  735. %config(noreplace) /etc/polkit-1/rules.d/00-qubes-allow-all.rules
  736. %config(noreplace) /etc/sudoers.d/qubes
  737. %config(noreplace) /etc/pam.d/su.qubes
  738. %if %with_sysvinit
  739. %package sysvinit
  740. Summary: Qubes unit files for SysV init style or upstart
  741. License: GPL v2 only
  742. Group: Qubes
  743. Requires: upstart
  744. Requires: qubes-core-agent = %{version}
  745. Requires: qubes-core-qrexec-vm
  746. Requires: qubes-core-agent-networking = %{version}
  747. Provides: qubes-core-agent-init-scripts
  748. Conflicts: qubes-core-agent-systemd
  749. Provides: qubes-core-vm-sysvinit = %{version}-%{release}
  750. Obsoletes: qubes-core-vm-sysvinit < 4.0.0
  751. %description sysvinit
  752. The Qubes core startup configuration for SysV init (or upstart).
  753. %files sysvinit
  754. /etc/init.d/qubes-sysinit
  755. /etc/init.d/qubes-core-early
  756. /etc/init.d/qubes-core
  757. /etc/init.d/qubes-core-netvm
  758. /etc/init.d/qubes-firewall
  759. /etc/init.d/qubes-iptables
  760. /etc/init.d/qubes-updates-proxy
  761. /etc/init.d/qubes-updates-proxy-forwarder
  762. /etc/sysconfig/modules/qubes-core.modules
  763. %post sysvinit
  764. #echo "--> Turning off unnecessary services..."
  765. # FIXME: perhaps there is more elegant way to do this?
  766. for f in /etc/init.d/*
  767. do
  768. srv=`basename $f`
  769. [ $srv = 'functions' ] && continue
  770. [ $srv = 'killall' ] && continue
  771. [ $srv = 'halt' ] && continue
  772. [ $srv = 'single' ] && continue
  773. [ $srv = 'reboot' ] && continue
  774. [ $srv = 'qubes-gui' ] && continue
  775. chkconfig $srv off
  776. done
  777. #echo "--> Enabling essential services..."
  778. chkconfig rsyslog on
  779. chkconfig haldaemon on
  780. chkconfig messagebus on
  781. for svc in %qubes_services ; do
  782. if [ "$1" = 1 ] ; then
  783. chkconfig --add $svc || echo "WARNING: Cannot add service $svc!"
  784. else
  785. chkconfig $svc resetpriorities || echo "WARNING: Cannot reset priorities of service $svc!"
  786. fi
  787. done
  788. # TODO: make this not display the silly message about security context...
  789. sed -i s/^id:.:initdefault:/id:3:initdefault:/ /etc/inittab
  790. %preun sysvinit
  791. if [ "$1" = 0 ] ; then
  792. # no more packages left
  793. for svc in %qubes_services ; do
  794. chkconfig --del $svc
  795. done
  796. fi
  797. %endif
  798. %package systemd
  799. Summary: Qubes unit files for SystemD init style
  800. License: GPL v2 only
  801. Group: Qubes
  802. Requires: systemd
  803. Requires(post): systemd-units
  804. Requires(preun): systemd-units
  805. Requires(postun): systemd-units
  806. Requires: qubes-core-agent = %{version}
  807. Provides: qubes-core-agent-init-scripts
  808. Conflicts: qubes-core-agent-sysvinit
  809. Provides: qubes-core-vm-systemd = %{version}-%{release}
  810. Obsoletes: qubes-core-vm-systemd < 4.0.0
  811. Conflicts: qubes-gui-agent < 4.1.0
  812. # preset units after possibly new are installed
  813. OrderWithRequires(post): qubes-core-agent-networking
  814. %description systemd
  815. The Qubes core startup configuration for SystemD init.
  816. %files systemd
  817. %defattr(-,root,root,-)
  818. /etc/systemd/system/xendriverdomain.service
  819. /usr/lib/systemd/system/dev-xvdc1-swap.service
  820. /usr/lib/systemd/system/qubes-misc-post.service
  821. /usr/lib/systemd/system/qubes-mount-dirs.service
  822. /usr/lib/systemd/system/qubes-rootfs-resize.service
  823. /usr/lib/systemd/system/qubes-sysinit.service
  824. /usr/lib/systemd/system/qubes-early-vm-config.service
  825. /usr/lib/systemd/system/qubes-update-check.service
  826. /usr/lib/systemd/system/qubes-update-check.timer
  827. /usr/lib/systemd/system/qubes-sync-time.service
  828. /usr/lib/systemd/system/qubes-sync-time.timer
  829. /usr/lib/systemd/system/qubes-updates-proxy-forwarder@.service
  830. /usr/lib/systemd/system/qubes-updates-proxy-forwarder.socket
  831. /usr/lib/systemd/system-preset/%qubes_preset_file
  832. /usr/lib/modules-load.d/qubes-core.conf
  833. /usr/lib/systemd/system/boot.automount.d/30_qubes.conf
  834. /usr/lib/systemd/system/chronyd.service.d/30_qubes.conf
  835. /usr/lib/systemd/system/crond.service.d/30_qubes.conf
  836. /usr/lib/systemd/system/cups.service.d/30_qubes.conf
  837. /usr/lib/systemd/system/cups.socket.d/30_qubes.conf
  838. /usr/lib/systemd/system/cups.path.d/30_qubes.conf
  839. /usr/lib/systemd/system/cups-browsed.service.d/30_qubes.conf
  840. /usr/lib/systemd/system/org.cups.cupsd.service.d/30_qubes.conf
  841. /usr/lib/systemd/system/org.cups.cupsd.socket.d/30_qubes.conf
  842. /usr/lib/systemd/system/org.cups.cupsd.path.d/30_qubes.conf
  843. /usr/lib/systemd/system/getty@tty.service.d/30_qubes.conf
  844. /usr/lib/systemd/system/ModemManager.service.d/30_qubes.conf
  845. /usr/lib/systemd/system/NetworkManager.service.d/30_qubes.conf
  846. /usr/lib/systemd/system/NetworkManager-wait-online.service.d/30_qubes.conf
  847. /usr/lib/systemd/system/serial-getty@.service.d/30_qubes.conf
  848. /usr/lib/systemd/system/systemd-random-seed.service.d/30_qubes.conf
  849. /usr/lib/systemd/system/systemd-timesyncd.service.d/30_qubes.conf
  850. /usr/lib/systemd/system/tinyproxy.service.d/30_not_needed_in_qubes_by_default.conf
  851. /usr/lib/systemd/system/tor.service.d/30_qubes.conf
  852. /usr/lib/systemd/system/tor@default.service.d/30_qubes.conf
  853. /usr/lib/systemd/system/tmp.mount.d/30_qubes.conf
  854. /usr/lib/systemd/user/pulseaudio.service.d/30_qubes.conf
  855. /usr/lib/systemd/user/pulseaudio.socket.d/30_qubes.conf
  856. %post systemd
  857. changed=
  858. %scriptletfuns
  859. if [ $1 -eq 1 ]
  860. then
  861. preset_units %{_presetdir}/%qubes_preset_file initial
  862. changed=true
  863. else
  864. preset_units %{_presetdir}/%qubes_preset_file upgrade
  865. changed=true
  866. # Upgrade path - now qubes-iptables is used instead
  867. for svc in iptables ip6tables
  868. do
  869. if [ -f "$svc".service ]
  870. then
  871. systemctl --no-reload preset "$svc".service
  872. changed=true
  873. fi
  874. done
  875. fi
  876. if [ $1 -eq 1 ]
  877. then
  878. # First install.
  879. # Set default "runlevel".
  880. # FIXME: this ought to be done via kernel command line.
  881. # The fewer deviations of the template from the seed
  882. # image, the better.
  883. rm -f %{_sysconfdir}/systemd/system/default.target
  884. ln -s %{_unitdir}/multi-user.target %{_sysconfdir}/systemd/system/default.target
  885. changed=true
  886. fi
  887. # remove old symlinks
  888. if [ -L %{_sysconfdir}/systemd/system/sysinit.target.wants/qubes-random-seed.service ]
  889. then
  890. rm -f %{_sysconfdir}/systemd/system/sysinit.target.wants/qubes-random-seed.service
  891. changed=true
  892. fi
  893. if [ -L %{_sysconfdir}/systemd/system/multi-user.target.wants/qubes-mount-home.service ]
  894. then
  895. rm -f %{_sysconfdir}/systemd/system/multi-user.target.wants/qubes-mount-home.service
  896. changed=true
  897. fi
  898. if [ "x$changed" != "x" ]
  899. then
  900. systemctl daemon-reload
  901. fi
  902. %preun systemd
  903. if [ $1 -eq 0 ] ; then
  904. # Run this only during uninstall.
  905. # Save the preset file to later use it to re-preset services there
  906. # once the Qubes OS preset file is removed.
  907. mkdir -p %{_rundir}/qubes-uninstall
  908. cp -f %{_presetdir}/%qubes_preset_file %{_rundir}/qubes-uninstall/
  909. fi
  910. %postun systemd
  911. changed=
  912. %scriptletfuns
  913. if [ -d %{_rundir}/qubes-uninstall ]
  914. then
  915. # We have a saved preset file (or more).
  916. # Re-preset the units mentioned there.
  917. restore_units %{_rundir}/qubes-uninstall/%qubes_preset_file
  918. rm -rf %{_rundir}/qubes-uninstall
  919. changed=true
  920. fi
  921. if [ "x$changed" != "x" ]
  922. then
  923. systemctl daemon-reload
  924. fi
  925. %changelog
  926. @CHANGELOG@