Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
b49ae50ad5
core-agent-linux/qubes-rpc
History
Marek Marczykowski-Górecki b49ae50ad5
Implement qrexec-based connection to updates proxy 
Configure package manager to use 127.0.0.1:8082 as proxy instead of
"magic" IP intercepted later. The listen on this port and whenever
new connection arrives, spawn qubes.UpdatesProxy service call (to
default target domain - subject to configuration in dom0) and connect
its stdin/out to the local TCP connection. This part use systemd.socket
unit in case of systemd, and ncat --exec otherwise.

On the other end - in target domain - simply pass stdin/out to updates
proxy (tinyproxy) running locally.

It's important to _not_ configure the same VM to both be updates proxy and
use it. In practice such configuration makes little sense - if VM can
access network (which is required to run updates proxy), package manager
can use it directly. Even if this network access is through some
VPN/Tor. If a single VM would be configured as both proxy provider and
proxy user, connection would loop back to itself. Because of this, proxy
connection redirection (to qrexec service) is disabled when the same VM
also run updates proxy.

Fixes QubesOS/qubes-issues#1854
2017-05-26 05:25:29 +02:00
..
.gitignore The Underscores Revolution: RPC services 2013-03-14 04:25:31 +01:00
dvm2.h The Underscores Revolution: RPC services 2013-03-14 04:25:31 +01:00
gui-fatal.c qfile-agent: move data handling code to libqubes-rpc-filecopy 2015-11-03 03:42:24 +01:00
gui-fatal.h qfile-agent: move data handling code to libqubes-rpc-filecopy 2015-11-03 03:42:24 +01:00
Makefile qfile-agent: move data handling code to libqubes-rpc-filecopy 2015-11-03 03:42:24 +01:00
prepare-suspend Clean up early initialization and setup of /rw 2016-10-23 20:19:51 +00:00
qfile-agent.c qfile-agent: move data handling code to libqubes-rpc-filecopy 2015-11-03 03:42:24 +01:00
qfile-unpacker.c Merge remote-tracking branch 'qubesos/pr/5' 2015-11-02 21:27:02 +01:00
qopen-in-vm.c removed trailing spaces 2015-10-15 04:34:55 +02:00
qrun-in-vm Make qvm-run bidirectional and document its limitations. 2015-02-09 06:37:32 +01:00
qubes-open qubes-open: switch from mimeopen to xdg-open 2016-02-02 03:28:34 +01:00
qubes.Backup backup: Use 'type' instead of 'which' to prevent unnecessary dependency 2015-11-27 12:31:33 +01:00
qubes.DetachPciDevice Add qubes.DetachPciDevice for live PCI detach (#708) 2013-09-01 01:28:07 +02:00
qubes.Filecopy qrexec: get rid of shell in services using EOF for any signaling 2015-03-17 14:51:10 +01:00
qubes.GetAppmenus Proposed solution for issue #1657 2016-01-18 23:02:30 -06:00
qubes.GetImageRGBA qubes-rpc: fix SVG icon scaling 2016-03-29 17:25:31 +02:00
qubes.InstallUpdatesGUI Shut down after update only if it's a template. 2017-01-14 22:20:51 +00:00
qubes.OpenInVM qrexec: get rid of shell in services using EOF for any signaling 2015-03-17 14:51:10 +01:00
qubes.OpenURL Implement qubes.OpenURL service instead of wrapping URLs in HTML 2016-05-18 01:32:54 +02:00
qubes.ResizeDisk Add qubes.ResizeDisk service to adjust filesystem size 2016-08-17 21:47:22 +02:00
qubes.Restore backup: Use 'type' instead of 'which' to prevent unnecessary dependency 2015-11-27 12:31:33 +01:00
qubes.SelectDirectory qubes-rpc: introduce services for browsing VM filesystem 2014-01-13 05:07:23 +01:00
qubes.SelectFile qubes-rpc: introduce services for browsing VM filesystem 2014-01-13 05:07:23 +01:00
qubes.SetDateTime Fix time sync service 2016-01-07 05:06:39 +01:00
qubes.StartApp Add qubes.StartApp service 2017-05-20 03:48:02 +02:00
qubes.SuspendPost The Underscores Revolution: RPC services 2013-03-14 04:25:31 +01:00
qubes.SuspendPostAll qubes.SuspendPreAll and qubes.SuspendPostAll services 2016-03-15 23:33:11 +01:00
qubes.SuspendPre The Underscores Revolution: RPC services 2013-03-14 04:25:31 +01:00
qubes.SuspendPreAll qubes.SuspendPreAll and qubes.SuspendPostAll services 2016-03-15 23:33:11 +01:00
qubes.SyncNtpClock The Underscores Revolution: RPC services 2013-03-14 04:25:31 +01:00
qubes.UpdatesProxy Implement qrexec-based connection to updates proxy 2017-05-26 05:25:29 +02:00
qubes.VMShell qrexec: get rid of shell in services using EOF for any signaling 2015-03-17 14:51:10 +01:00
qubes.WaitForSession Replacing "sleep 365d" with "sleep inf" 2015-11-03 14:00:00 +01:00
qvm_copy_nautilus.py Removed nautilus-actions depend and replaced with nautilus-python 2015-02-27 00:52:17 -05:00
qvm_dvm_nautilus.py Removed nautilus-actions depend and replaced with nautilus-python 2015-02-27 00:52:17 -05:00
qvm_move_nautilus.py Removed nautilus-actions depend and replaced with nautilus-python 2015-02-27 00:52:17 -05:00
qvm-copy-to-vm qvm-copy-to-vm: fix handling empty target VM 2017-05-17 14:22:10 +02:00
qvm-copy-to-vm.gnome Ask for target VM for file-copy in dom0 2017-05-20 15:53:03 +02:00
qvm-copy-to-vm.kde Ask for target VM for file-copy in dom0 2017-05-20 15:53:03 +02:00
qvm-copy.desktop The Underscores Revolution: RPC services 2013-03-14 04:25:31 +01:00
qvm-dvm.desktop The Underscores Revolution: RPC services 2013-03-14 04:25:31 +01:00
qvm-move-to-vm.gnome Ask for target VM for file-copy in dom0 2017-05-20 15:53:03 +02:00
qvm-move-to-vm.kde Fall back to gnome utilities if kdialog not present 2016-06-01 02:55:25 +01:00
qvm-move.desktop Implement "Move to VM" action (#725) 2014-03-24 05:19:16 +01:00
qvm-open-in-dvm Implement qubes.OpenURL service instead of wrapping URLs in HTML 2016-05-18 01:32:54 +02:00
qvm-open-in-vm Implement qubes.OpenURL service instead of wrapping URLs in HTML 2016-05-18 01:32:54 +02:00
qvm-run-vm Rename qvm-run to qvm-run-vm 2017-05-23 02:55:31 +02:00
suspend-post.README qubes.SuspendPreAll and qubes.SuspendPostAll services 2016-03-15 23:33:11 +01:00
suspend-pre.README qubes.SuspendPreAll and qubes.SuspendPostAll services 2016-03-15 23:33:11 +01:00
sync-ntp-clock The Underscores Revolution: RPC services 2013-03-14 04:25:31 +01:00
tar2qfile.c qfile-agent: move data handling code to libqubes-rpc-filecopy 2015-11-03 03:42:24 +01:00
vm-file-editor.c qrexec: hide timing debug messages in vm-file-editor 2016-03-05 12:51:07 +01:00
xdg-icon qubes-rpc: fix icon selection using pyxdg and support SVG icons 2015-09-06 22:02:27 +02:00