Marek Marczykowski-Górecki
7e867fd810
lorax: remove SecureBoot files - save some space in efiboot.img
2015-09-25 16:25:06 +02:00
Marek Marczykowski-Górecki
44dc8e0278
lorax: do not create macboot.img - it will be too big anyway
2015-09-25 16:25:05 +02:00
Marek Marczykowski-Górecki
b024e93e40
lorax: remove network support from UEFI initrd
...
Reduce its size to have efiboot.img under 32MB.
This needs rebuilding initrd and we need kernel version for that - so pass it
down from x86.tmpl.
2015-09-25 16:24:53 +02:00
Marek Marczykowski-Górecki
9a80875a5d
live: remove automatic swap discovery
...
We don't want to leave unencrypted memory dumps on some "random" disk
found in the system.
2015-09-25 15:31:12 +02:00
Marek Marczykowski-Górecki
c4b965ed88
lorax: select xen.cfg section to enable/disable media check
...
Apparently all but first parameters are passed to xen.efi, so it is possible to
select which config section should be used. This makes xen.efi copy
unnecessary.
2015-09-21 18:09:34 +02:00
Marek Marczykowski-Górecki
49b3630362
lorax: disable UEFI Secure Boot shim
...
We don't have signed xen/kernel/initramfs binaries. And more
importantly, we don't have MS-signed key...
2015-09-21 18:09:33 +02:00
Marek Marczykowski-Górecki
3df2363093
Merge remote-tracking branch 'qubesos/master'
2015-09-16 17:08:46 +02:00
Marek Marczykowski-Górecki
d08f0cf0a4
conf: drop debian-7 template from ISO image
...
Fixes qubesos/qubes-issues#1070
2015-09-16 16:53:16 +02:00
Marek Marczykowski-Górecki
d57c5e814a
live: place private.img of default VMs back on dm-snapshot device
...
Apparently those 350MB are critical on 4GB systems without a swap.
2015-08-09 20:43:06 +02:00
Marek Marczykowski-Górecki
012cad5b47
live: remove redundant livecd-creator --verbose flag
...
--debug already implies this. Actually only the last one is used.
2015-08-09 20:42:24 +02:00
Marek Marczykowski-Górecki
1408be322e
live: disable (currently broken) EFI
2015-08-09 14:05:15 +02:00
Marek Marczykowski-Górecki
f5673dbb49
liveusb: fix package name in build-deps
2015-08-07 02:27:42 +02:00
Marek Marczykowski-Górecki
67cda610e7
pungi: do not use isohybrid --offset as it isn't compatible with EFI
2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
b3d04825a2
anaconda: generate xen efi configuration
2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
ff30f25718
lorax: preliminary EFI support
2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
5796c78979
anaconda: disable os prober
...
It tries to mount every existing block device, including VM images.
2015-08-05 02:11:23 +02:00
Marek Marczykowski-Górecki
a0060ff53f
pungi: do not generate upgrade.img
...
We do not support in-place upgrades this way.
2015-08-05 02:11:11 +02:00
Marek Marczykowski-Górecki
ea884ac81d
liveusb: use more friendly output image name
2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
28fcfcc238
liveusb: overlayfs doesn't support sparse files, use tmpfs directly
...
This comes with some overhead, at least at the beginning, because all
private images are copied there at system startup (instead of first
use). This uses about 450MB of RAM.
Still better than non-sparse private.img (2GB...).
2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
2718c73c31
liveusb: include default appmenus based on default fedora-21 template
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
823fecf988
liveusb: use offline-mode of qubes-set-updates
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
ae670d0290
liveusb: mount /var/lib/qubes using overlayfs on tmpfs, instead of dm-snapshot
...
When dm-snapshot fills up, it is not recoverable situation. Also much
less flexible (for example deleting files does not free the space).
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
d8e4080015
liveusb: reset list of PCI devices assigned to sys-net before assigning new ones
...
Just in case of installation with persistent configuration.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
f69016ec5c
conf/liveusb: disable updates check - senseless on non-persistent system
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
0b3058b1b7
liveusb: use qvm-pci --offline-mode
...
It is called before libvirtd start.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
1c1d8ba478
conf/liveusb: create default dispvm template
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
4bf5169ad9
Make liveusb build compatible with qubes-builder - use 'iso' target
...
This commit introduces two new settings (for builder.conf):
ISO_INSTALLER - build installer ISO; enabled by default
ISO_LIVEUSB - build Live ISO; disabled by default
2015-08-03 17:52:05 +02:00
Marek Marczykowski-Górecki
6783a317c7
liveusb: add lightdm autologin
2015-08-03 17:52:05 +02:00
Marek Marczykowski-Górecki
d57620c96d
Add 'liveusb' make target
2015-08-01 23:20:46 +02:00
Marek Marczykowski-Górecki
9db56031f5
qubes-release: include R3.0 rpm keys symlinks
...
$releasever used in yum configuration points at "3.0", so make such keys
available.
2015-08-01 23:20:25 +02:00
Marek Marczykowski-Górecki
8eb5dba9bc
liveusb: fix rpm key import; tmp.mount is already enabled
2015-08-01 23:20:25 +02:00
Wojtek Porczyk
68a8e1777c
liveusb: add qubes-specific configuration
2015-08-01 23:20:02 +02:00
Wojtek Porczyk
ac5128e9b3
livecd-creator: fix /dev in chroot
2015-08-01 23:20:02 +02:00
Wojtek Porczyk
5553b98e2f
livecd-creator imported from rhinstaller/livecd-tools
2015-08-01 23:20:02 +02:00
Wojtek Porczyk
65ca4d222c
Move /etc/rc.d files from kickstart to package
2015-08-01 23:20:01 +02:00
Marek Marczykowski-Górecki
fa151f3261
Preliminary qubes-live package
2015-08-01 23:20:01 +02:00
Wojtek Porczyk
ecd43c43c4
liveusb: new ks stolen from fedora spins
2015-08-01 23:19:52 +02:00
Marek Marczykowski-Górecki
c254186978
qubes-release 3.0-0.4
2015-07-13 15:25:30 +02:00
Marek Marczykowski-Górecki
73748a3519
qubes-release: add security-testing repository definition
2015-07-13 15:24:58 +02:00
Marek Marczykowski-Górecki
40ba343677
lorax-templates-qubes-2.2
2015-07-13 00:12:52 +02:00
Marek Marczykowski-Górecki
9e8a70dfb8
anaconda 20.25.16-9
2015-07-13 00:11:14 +02:00
Marek Marczykowski-Górecki
57887fd90a
lorax: use even shorter file names for kernel/initrd
...
Apparently initrd-3.19.8-100.fc20.x86_64.img is still too long for
ISO9660.
2015-07-12 16:01:09 +02:00
Marek Marczykowski-Górecki
2726c5a9f5
anaconda: use kernel-install instead of grubby to regenerate initrd/grub.conf
...
Since we have own hook there, it properly handles Xen. This means we no
longer need post scripts in kickstart for that.
2015-07-12 16:01:02 +02:00
Marek Marczykowski-Górecki
20ec7c3935
lorax: no longer include 3.11 kernel
2015-07-10 16:58:00 +02:00
Marek Marczykowski-Górecki
f7ab7b217c
lorax: include kernels downloaded from Fedora repository
...
Do it by manually extracting packages from pungi cache instead of
redownloading, because we can't access yum configuration (repositories,
gpg keys etc) here, so it would be even more hacky...
All this is needed because pungi does not support including multiple
versions of a single package.
2015-07-10 16:48:36 +02:00
Marek Marczykowski-Górecki
c792d42b22
comps: remove most of firmware packages
...
Leave only linux-firmware (containing firmware needed for some GPUs) and
alsa-firmware (as we need sound in dom0).
2015-07-10 02:56:12 +02:00
Marek Marczykowski-Górecki
569b48bcc1
gitignore pkgs
2015-05-14 23:42:11 +02:00
Marek Marczykowski-Górecki
73e8665a2b
anaconda: add dom0_mem=min:1024M to default xen cmdline
...
This will solve #959 for new installations.
Related to qubesos/qubes-issues#959
2015-05-14 21:41:37 +02:00
Marek Marczykowski-Górecki
29fafe803e
firstboot 18.6-8
2015-04-15 18:48:15 +02:00
Marek Marczykowski-Górecki
3ce7faca65
Ensure that installer repo is created with proper comps.xml
2015-04-15 14:24:23 +02:00