19a4c6d0dd
This patch introduces two new qvm-services: - disable-default-route - disable-dns-server Both disabled by default. You can enable any of them to not set default route and/or DNS servers in the VM. Those settings have no effect on NetVM, where such settings are controlled by NetworkManager. This is based on patch sent by Joonas Lehtonen <joonas.lehtonen@openmailbox.org> https://groups.google.com/d/msgid/qubes-devel/54C7FB59.2020603%40openmailbox.org Conflicts: network/setup-ip vm-init.d/qubes-core vm-systemd/qubes-sysinit.sh
94 lines
2.9 KiB
Bash
Executable File
94 lines
2.9 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# List of services enabled by default (in case of absence of qubesdb entry)
|
|
DEFAULT_ENABLED_NETVM="network-manager qubes-network qubes-update-check qubes-updates-proxy"
|
|
DEFAULT_ENABLED_PROXYVM="meminfo-writer qubes-network qubes-firewall qubes-netwatcher qubes-update-check"
|
|
DEFAULT_ENABLED_APPVM="meminfo-writer cups qubes-update-check"
|
|
DEFAULT_ENABLED_TEMPLATEVM="$DEFAULT_ENABLED_APPVM updates-proxy-setup"
|
|
DEFAULT_ENABLED="meminfo-writer"
|
|
|
|
QDB_READ=qubesdb-read
|
|
QDB_LS=qubesdb-multiread
|
|
|
|
read_service() {
|
|
$QDB_READ /qubes-service/$1 2> /dev/null
|
|
}
|
|
|
|
systemd_pkg_version=`systemctl --version|head -n 1`
|
|
if ! dmesg | grep -q "$systemd_pkg_version running in system mode."; then
|
|
# Ensure we're running right version of systemd (the one started by initrd may be different)
|
|
systemctl daemon-reexec
|
|
fi
|
|
|
|
# Wait for evtchn initialization
|
|
while [ ! -e /proc/xen/xenbus ]; do
|
|
sleep 0.1
|
|
done
|
|
|
|
mkdir -p /var/run/qubes
|
|
mkdir -p /var/run/qubes-service
|
|
mkdir -p /var/run/xen-hotplug
|
|
|
|
# Set permissions to /proc/xen/xenbus, so normal user can use qubesdb-read
|
|
chmod 666 /proc/xen/xenbus
|
|
|
|
[ -e /proc/u2mfn ] || modprobe u2mfn
|
|
# Set permissions to files needed to listen at vchan
|
|
chmod 666 /proc/u2mfn
|
|
|
|
# Set default services depending on VM type
|
|
TYPE=`$QDB_READ /qubes-vm-type 2> /dev/null`
|
|
[ "$TYPE" = "AppVM" ] && DEFAULT_ENABLED=$DEFAULT_ENABLED_APPVM
|
|
[ "$TYPE" = "NetVM" ] && DEFAULT_ENABLED=$DEFAULT_ENABLED_NETVM
|
|
[ "$TYPE" = "ProxyVM" ] && DEFAULT_ENABLED=$DEFAULT_ENABLED_PROXYVM
|
|
[ "$TYPE" = "TemplateVM" ] && DEFAULT_ENABLED=$DEFAULT_ENABLED_TEMPLATEVM
|
|
|
|
# Enable default services
|
|
for srv in $DEFAULT_ENABLED; do
|
|
touch /var/run/qubes-service/$srv
|
|
done
|
|
|
|
# Enable services
|
|
for srv in `$QDB_LS /qubes-service/ 2>/dev/null |grep ' = 1'|cut -f 1 -d ' '`; do
|
|
touch /var/run/qubes-service/$srv
|
|
done
|
|
|
|
# Disable services
|
|
for srv in `$QDB_LS /qubes-service/ 2>/dev/null |grep ' = 0'|cut -f 1 -d ' '`; do
|
|
rm -f /var/run/qubes-service/$srv
|
|
done
|
|
|
|
# Set the hostname
|
|
name=`$QDB_READ /name`
|
|
if [ -n "$name" ]; then
|
|
hostname $name
|
|
if [ -e /etc/debian_version ]; then
|
|
ipv4_localhost_re="127\.0\.1\.1"
|
|
else
|
|
ipv4_localhost_re="127\.0\.0\.1"
|
|
fi
|
|
sed -i "s/^\($ipv4_localhost_re\(\s.*\)*\s\).*$/\1${name}/" /etc/hosts
|
|
sed -i "s/^\(::1\(\s.*\)*\s\).*$/\1${name}/" /etc/hosts
|
|
fi
|
|
|
|
timezone=`$QDB_READ /qubes-timezone 2> /dev/null`
|
|
if [ -n "$timezone" ]; then
|
|
cp -p /usr/share/zoneinfo/$timezone /etc/localtime
|
|
if [ -e /etc/debian_version ]; then
|
|
echo "$timezone" > /etc/timezone
|
|
else
|
|
echo "# Clock configuration autogenerated based on Qubes dom0 settings" > /etc/sysconfig/clock
|
|
echo "ZONE=\"$timezone\"" >> /etc/sysconfig/clock
|
|
fi
|
|
fi
|
|
|
|
# Prepare environment for other services
|
|
echo > /var/run/qubes-service-environment
|
|
|
|
debug_mode=`$QDB_READ /qubes-debug-mode 2> /dev/null`
|
|
if [ -n "$debug_mode" -a "$debug_mode" -gt 0 ]; then
|
|
echo "GUI_OPTS=-vv" >> /var/run/qubes-service-environment
|
|
fi
|
|
|
|
exit 0
|