core-agent-linux/package-managers
Demi Marie Obenour 274df33d4d
Harden shell scripts against metacharacters
`qubes-download-dom0-updates.sh` can now handle spaces in its inputs,
for example.
2020-12-23 13:19:58 -05:00
..
apt-conf-00notify-hook Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
apt-conf-10no-cache Disable package caching in apt operations 2020-01-15 18:47:53 +00:00
apt-conf-70no-unattended Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
apt-qubes-archive-keyring.gpg Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
apt-qubes-r4.list.in Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
dnf-qubes-hooks.conf Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
dnf-qubes-hooks.py dnf: update for DNF 4+ API 2020-06-27 05:37:55 +02:00
Makefile dnf-plugin: restrict to only version provided by plateform-python 2020-10-30 10:46:56 +01:00
qubes-download-dom0-updates.sh Harden shell scripts against metacharacters 2020-12-23 13:19:58 -05:00
README.md Add README.md to package-managers 2020-02-05 00:12:23 +00:00
RPM-GPG-KEY-qubes-4-centos Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
RPM-GPG-KEY-qubes-4-primary Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
RPM-GPG-KEY-qubes-4-unstable Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
upgrades-installed-check package-managers: handle Gentoo 2020-07-26 14:31:05 +02:00
upgrades-status-notify Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
yum-qubes-hooks.conf Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
yum-qubes-hooks.py Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
yum-qubes-r4.repo.in Split items in misc directory by topic 2020-02-04 23:59:09 +00:00

Package managers

Each Qubes VM should notify Qubes updater in dom0 of new updates available for the particular template or standalone VM. The is the configuration and hooks for various package managers to interact with Qubes updater. Moreover Qubes OS dom0 updates are downloaded by a Qubes VM, rather directly in dom0 which doesn't have networking configured at all.

dom0 updates download

qubes-download-dom0-updates.sh handles downloading packages for dom0 in VM. It needs to be installed in VM which will handle dom0 updates download only.

Apt

The configuration includes:

  1. Hook to notify dom0.
  2. Disabling unattended upgrades (Qubes updater).
  3. List of repos with Qubes packages for VM.