core-agent-linux/vm-init.d
Marek Marczykowski-Górecki b49ae50ad5
Implement qrexec-based connection to updates proxy
Configure package manager to use 127.0.0.1:8082 as proxy instead of
"magic" IP intercepted later. The listen on this port and whenever
new connection arrives, spawn qubes.UpdatesProxy service call (to
default target domain - subject to configuration in dom0) and connect
its stdin/out to the local TCP connection. This part use systemd.socket
unit in case of systemd, and ncat --exec otherwise.

On the other end - in target domain - simply pass stdin/out to updates
proxy (tinyproxy) running locally.

It's important to _not_ configure the same VM to both be updates proxy and
use it. In practice such configuration makes little sense - if VM can
access network (which is required to run updates proxy), package manager
can use it directly. Even if this network access is through some
VPN/Tor. If a single VM would be configured as both proxy provider and
proxy user, connection would loop back to itself. Because of this, proxy
connection redirection (to qrexec service) is disabled when the same VM
also run updates proxy.

Fixes QubesOS/qubes-issues#1854
2017-05-26 05:25:29 +02:00
..
qubes-core Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-core-early Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-core-netvm Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-core.modules Do not load xen-usbfront automatically 2015-03-21 00:54:19 +01:00
qubes-dvm Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-firewall Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-misc.modules Use systemd mechanism for loading kernel modules (when available) 2014-09-29 21:31:10 +02:00
qubes-qrexec-agent Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-sysinit Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-updates-proxy Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qubes-updates-proxy-forwarder Implement qrexec-based connection to updates proxy 2017-05-26 05:25:29 +02:00