Marek Marczykowski-Górecki
0c288aa355
qrexec: implement buffered write to child stdin to prevent deadlock
...
Otherwise if the child process isn't reading its stdin at that time, it
would deadlock the whole qrexec connection (for example preventing
reading the data from the child, which may be a cause of that deadlock).
QubesOS/qubes-issues#1347
2015-10-30 14:16:53 +01:00
Marek Marczykowski-Górecki
4a7c2e2d42
version 3.1.1
2015-10-11 02:57:47 +02:00
Marek Marczykowski-Górecki
c8ce468c7f
qrexec: fallback to kdialog if zenity is not installed
...
Fixes QubesOS/qubes-issues#1277
2015-10-11 01:55:46 +02:00
Marek Marczykowski-Górecki
63e74a01d3
qrexec: fix handling autostarting RPC target VM
...
Do not reimplement manual VM state checking in qrexec-policy.
`qubes.xml` is loaded anyway, so just use QubesVM object to check if
domain is running.
Fixes QubesOS/qubes-issues#1283
2015-10-11 01:52:40 +02:00
Marek Marczykowski-Górecki
63dffb48c5
version 3.1.0
2015-09-29 16:48:32 +02:00
Marek Marczykowski-Górecki
867baa7266
kernel-install: add new kernel to xen.cfg for xen.efi
...
QubesOS/qubes-issues#794
2015-09-26 03:56:16 +02:00
Marek Marczykowski-Górecki
0e733bd0de
kernel-install: call grub2-mkconfig only when it is installed
...
On systems booting with EFI, there is no grub2 installed at all - the
system is started directly to xen.efi.
2015-09-26 02:54:32 +02:00
Marek Marczykowski-Górecki
71342f4bd2
version 3.0.15
2015-09-05 00:31:10 +02:00
Marek Marczykowski-Górecki
55f9ca5996
Merge remote-tracking branch 'origin/pr/3'
...
* origin/pr/3:
filter out tar time wrap warnings using grep
2015-09-04 15:24:27 +02:00
Patrick Schleizer
7d0b2479f5
filter out tar time wrap warnings using grep
...
https://phabricator.whonix.org/T401#6634
2015-09-04 00:54:50 +00:00
Marek Marczykowski-Górecki
0d69e8fe3e
doc: add some more details to qubes-dom0-update --action
2015-09-04 02:11:16 +02:00
Marek Marczykowski-Górecki
5f030b0033
Merge remote-tracking branch 'qubesos/pr/2'
2015-09-04 02:10:19 +02:00
Marek Marczykowski-Górecki
4e1f6b5bd5
core: use vm.absolute_path to parse paths in qubes.xml
...
This makes easier to handle some corner cases.
qubesos/qubes-issues#1124
Reported by @doncohen, thanks @wyory for providing more details.
2015-09-04 01:57:59 +02:00
Jeppler
7d9751048e
Merge pull request #1 from Jeeppler/Jeeppler-patch-1
...
added the --action parameter description
2015-09-03 23:56:20 +02:00
Jeppler
c88a2dceb9
added the --action parameter description
...
added the --action parameter description. The --action parameter is implemented since a long time, but was not documented at all.
2015-09-03 23:55:21 +02:00
Marek Marczykowski-Górecki
730db56623
version 3.0.14
2015-09-03 02:45:10 +02:00
Marek Marczykowski-Górecki
ccd8021af9
appmenus: do not create appmenus for DispVMs ( #1123 )
...
Fixes qubesos/qubes-issues#1123
2015-09-03 01:18:16 +02:00
Marek Marczykowski-Górecki
079d0b1060
version 3.0.13
2015-08-05 02:02:26 +02:00
Marek Marczykowski-Górecki
c2c34528a2
appmenus: fix broken import
2015-08-03 04:19:49 +02:00
Marek Marczykowski-Górecki
f795e58483
Undo 'Boot Loader Spec' by deleting /boot/MACHINE_ID
...
The specification doesn't cover how to boot Xen (or any other multiboot
binary), but the sole presence of such directory changes dracut default
path. So get rid of that directory.
2015-08-03 03:00:59 +02:00
Marek Marczykowski-Górecki
c85fc7a098
appmenus: Add offline mode to qubes-receive-appmenus
...
Will be useful during LiveUSB build - we can't start template at this
stage, but still need to somehow generate appmenus.
2015-08-02 14:43:17 +02:00
Marek Marczykowski-Górecki
5b4b4190a5
version 3.0.12
2015-07-29 21:45:01 +02:00
Marek Marczykowski-Górecki
e062c431dd
rpm: move os-prober removing code to kernel-install subpackage
...
Main qubes-core-dom0 should not be installed as part of installer image,
but os-prober dependency pulls that in. So move it into
qubes-core-dom0-kernel-install subpackage. After all this is where grub
config regeneration code is placed, so it is more logical place.
2015-07-29 21:35:04 +02:00
Marek Marczykowski-Górecki
a2da1c9e8d
version 3.0.11
2015-07-27 17:29:06 +02:00
Marek Marczykowski-Górecki
7fdff6a735
rpm: force removal os-prober package
...
It can be can be harmful, because it accesses (and mounts) every block
device, including VM controlled /dev/loop*.
2015-07-27 17:27:35 +02:00
Marek Marczykowski-Górecki
c752353471
version 3.0.10
2015-07-15 05:10:28 +02:00
Marek Marczykowski-Górecki
5e6d3a273d
Prevent installing all the qubes packages in the installer image
...
Split kernel-install hook into separate package, as only this part is
needed by the installer. This will prevent installing all the Qubes/Xen
staff in the installer, especially udev scripts and xenstored, which
doesn't play well with anaconda.
2015-07-14 23:27:03 +02:00
Marek Marczykowski-Górecki
5f1e7a77e6
version 3.0.9
2015-07-13 00:14:17 +02:00
Marek Marczykowski-Górecki
fddeb4a23c
Generate initramfs in kernel-install hook
...
The default one generates initramfs in location expected by Boot Loader
Specification, which as noted before, isn't useful for Qubes.
2015-07-12 01:54:53 +02:00
Marek Marczykowski-Górecki
f056e0341e
rpm: provide qubes-core-dom0-linux-kernel-install virtual pkg
...
This is for kernel package dependencies, since we have the same kernel
packages for both R2 and R3.0
2015-07-12 01:53:48 +02:00
Marek Marczykowski-Górecki
2a14ae9c0b
Add kernel post-installation script to regenerate grub2 config
...
Since we now allow using Fedora kernel, add a script to generate proper
bootloader configuration then. Standard Fedora mechanism relies on
Boot Loader Specification support in grub2, which sadly does not support
Xen, so it is useless in Qubes.
2015-07-10 17:54:24 +02:00
Marek Marczykowski-Górecki
20051e18c9
Update README
2015-07-10 17:50:25 +02:00
Marek Marczykowski-Górecki
c3331645e4
version 3.0.8
2015-07-08 05:57:52 +02:00
Marek Marczykowski-Górecki
cc7075ab65
appmenus: defer menu cache regeneration to speedup qvm-sync-appmenus
...
Call "xdg-desktop-menu forceupdate" at the end of the process, not for
every single item.
2015-07-08 05:56:38 +02:00
Marek Marczykowski-Górecki
5e3fbb1623
dom0-updates: ensure proper permissions on packages and metadata
...
This also includes possibly error flag file.
2015-07-08 04:54:34 +02:00
Marek Marczykowski-Górecki
fcd084f908
version 3.0.7
2015-07-01 07:18:18 +02:00
Marek Marczykowski-Górecki
4ce5e04d7e
dracut: fix assigning devices to xen-pciback
2015-07-01 07:16:59 +02:00
Marek Marczykowski-Górecki
8acd40905d
Disable lesspipe in dom0
...
It can be dangerous when processing untrusted content (for example VM
logs).
Details:
https://groups.google.com/d/msgid/qubes-users/20150527215812.GA13915%40mail-itl
2015-06-25 02:37:29 +02:00
Marek Marczykowski-Górecki
1288a13520
qrexec: do not terminate before sending all the data
...
Make sure that all the data from local process is sent (including final
EOF), before handling its exit code - which would include terminating
qrexec-client process.
2015-06-23 02:44:59 +02:00
Marek Marczykowski-Górecki
7ce62cbd98
dracut: support the case when xen-pciback is built-in, not a module
...
In such case, we can't set module parameters in initramfs. But we can
bind the driver to appropriate devices manually - which is also doable
in case of module.
2015-06-15 03:26:04 +02:00
Marek Marczykowski-Górecki
07de8f7515
appmenus: allow '_' in Exec and other fields
2015-05-17 00:07:01 +02:00
Marek Marczykowski-Górecki
7e80d203ff
version 3.0.6
2015-05-15 03:29:37 +02:00
Marek Marczykowski-Górecki
a5650d3251
dom0-update: improve package validation regexp - include DSA case ( #988 )
...
Apparently when package is signed with DSA key, rpm -K output is totally
different. This is the case for bumblebee package on rpmfusion.
Fixes qubesos/qubes-issues#988
2015-05-15 03:13:01 +02:00
Marek Marczykowski-Górecki
f2b5cf1cc0
dom0-update: clear error marker before downloading new packages ( #987 )
...
Otherwise if some package download fails once - further tries will also
report errors.
Fixes qubesos/qubes-issues#987
2015-05-13 02:34:51 +02:00
Marek Marczykowski-Górecki
4cab815317
dom0-update: prevent template package upgrades ( #996 )
...
This would override user changes to the template. Previous method
(Obsoletes: rpm header) doesn't work now, so add explicit exclude list
as yum option
Fixes qubesos/qubes-issues#996
2015-05-13 02:33:12 +02:00
Marek Marczykowski-Górecki
3f29b411d0
qrexec: do not send spurious MSG_SERVICE_REFUSED
...
This causes closing connection (FD) to still alive client.
Fixes qubesos/qubes-issues#993
2015-05-10 04:36:33 +02:00
Marek Marczykowski-Górecki
0d75af86d8
version 3.0.5
2015-05-03 16:05:37 +02:00
Marek Marczykowski-Górecki
ed363452c9
gitignore
2015-05-03 16:05:02 +02:00
Marek Marczykowski-Górecki
50eb23d60e
appmenus: add missing appicons_cleanup function
...
Commit f05f214f
"appmenus: update icons only when changed" introduced
usage of vm.appicons_cleanup, but that function wasn't implemented. That
caused not generating appmenus at all after template update (old
appmenus was removed, but script crashes before adding the new one).
2015-05-02 23:49:40 +02:00
Marek Marczykowski-Górecki
b40008a06d
appmenus: do not regenerate all the icons for the template itself
2015-05-02 21:09:42 +02:00