Commit Graph

707 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
7e867fd810 lorax: remove SecureBoot files - save some space in efiboot.img 2015-09-25 16:25:06 +02:00
Marek Marczykowski-Górecki
44dc8e0278 lorax: do not create macboot.img - it will be too big anyway 2015-09-25 16:25:05 +02:00
Marek Marczykowski-Górecki
b024e93e40 lorax: remove network support from UEFI initrd
Reduce its size to have efiboot.img under 32MB.
This needs rebuilding initrd and we need kernel version for that - so pass it
down from x86.tmpl.
2015-09-25 16:24:53 +02:00
Marek Marczykowski-Górecki
9a80875a5d
live: remove automatic swap discovery
We don't want to leave unencrypted memory dumps on some "random" disk
found in the system.
2015-09-25 15:31:12 +02:00
Marek Marczykowski-Górecki
c4b965ed88 lorax: select xen.cfg section to enable/disable media check
Apparently all but first parameters are passed to xen.efi, so it is possible to
select which config section should be used. This makes xen.efi copy
unnecessary.
2015-09-21 18:09:34 +02:00
Marek Marczykowski-Górecki
49b3630362 lorax: disable UEFI Secure Boot shim
We don't have signed xen/kernel/initramfs binaries. And more
importantly, we don't have MS-signed key...
2015-09-21 18:09:33 +02:00
Marek Marczykowski-Górecki
3df2363093
Merge remote-tracking branch 'qubesos/master' 2015-09-16 17:08:46 +02:00
Marek Marczykowski-Górecki
d08f0cf0a4 conf: drop debian-7 template from ISO image
Fixes qubesos/qubes-issues#1070
2015-09-16 16:53:16 +02:00
Marek Marczykowski-Górecki
d57c5e814a
live: place private.img of default VMs back on dm-snapshot device
Apparently those 350MB are critical on 4GB systems without a swap.
2015-08-09 20:43:06 +02:00
Marek Marczykowski-Górecki
012cad5b47
live: remove redundant livecd-creator --verbose flag
--debug already implies this. Actually only the last one is used.
2015-08-09 20:42:24 +02:00
Marek Marczykowski-Górecki
1408be322e
live: disable (currently broken) EFI 2015-08-09 14:05:15 +02:00
Marek Marczykowski-Górecki
f5673dbb49
liveusb: fix package name in build-deps 2015-08-07 02:27:42 +02:00
Marek Marczykowski-Górecki
67cda610e7
pungi: do not use isohybrid --offset as it isn't compatible with EFI 2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
b3d04825a2
anaconda: generate xen efi configuration 2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
ff30f25718
lorax: preliminary EFI support 2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
5796c78979
anaconda: disable os prober
It tries to mount every existing block device, including VM images.
2015-08-05 02:11:23 +02:00
Marek Marczykowski-Górecki
a0060ff53f
pungi: do not generate upgrade.img
We do not support in-place upgrades this way.
2015-08-05 02:11:11 +02:00
Marek Marczykowski-Górecki
ea884ac81d
liveusb: use more friendly output image name 2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
28fcfcc238
liveusb: overlayfs doesn't support sparse files, use tmpfs directly
This comes with some overhead, at least at the beginning, because all
private images are copied there at system startup (instead of first
use). This uses about 450MB of RAM.
Still better than non-sparse private.img (2GB...).
2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
2718c73c31
liveusb: include default appmenus based on default fedora-21 template 2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
823fecf988
liveusb: use offline-mode of qubes-set-updates 2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
ae670d0290
liveusb: mount /var/lib/qubes using overlayfs on tmpfs, instead of dm-snapshot
When dm-snapshot fills up, it is not recoverable situation. Also much
less flexible (for example deleting files does not free the space).
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
d8e4080015
liveusb: reset list of PCI devices assigned to sys-net before assigning new ones
Just in case of installation with persistent configuration.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
f69016ec5c
conf/liveusb: disable updates check - senseless on non-persistent system 2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
0b3058b1b7
liveusb: use qvm-pci --offline-mode
It is called before libvirtd start.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
1c1d8ba478
conf/liveusb: create default dispvm template 2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
4bf5169ad9
Make liveusb build compatible with qubes-builder - use 'iso' target
This commit introduces two new settings (for builder.conf):
ISO_INSTALLER - build installer ISO; enabled by default
ISO_LIVEUSB - build Live ISO; disabled by default
2015-08-03 17:52:05 +02:00
Marek Marczykowski-Górecki
6783a317c7
liveusb: add lightdm autologin 2015-08-03 17:52:05 +02:00
Marek Marczykowski-Górecki
d57620c96d
Add 'liveusb' make target 2015-08-01 23:20:46 +02:00
Marek Marczykowski-Górecki
9db56031f5
qubes-release: include R3.0 rpm keys symlinks
$releasever used in yum configuration points at "3.0", so make such keys
available.
2015-08-01 23:20:25 +02:00
Marek Marczykowski-Górecki
8eb5dba9bc
liveusb: fix rpm key import; tmp.mount is already enabled 2015-08-01 23:20:25 +02:00
Wojtek Porczyk
68a8e1777c
liveusb: add qubes-specific configuration 2015-08-01 23:20:02 +02:00
Wojtek Porczyk
ac5128e9b3
livecd-creator: fix /dev in chroot 2015-08-01 23:20:02 +02:00
Wojtek Porczyk
5553b98e2f
livecd-creator imported from rhinstaller/livecd-tools 2015-08-01 23:20:02 +02:00
Wojtek Porczyk
65ca4d222c
Move /etc/rc.d files from kickstart to package 2015-08-01 23:20:01 +02:00
Marek Marczykowski-Górecki
fa151f3261
Preliminary qubes-live package 2015-08-01 23:20:01 +02:00
Wojtek Porczyk
ecd43c43c4
liveusb: new ks stolen from fedora spins 2015-08-01 23:19:52 +02:00
Marek Marczykowski-Górecki
c254186978
qubes-release 3.0-0.4 2015-07-13 15:25:30 +02:00
Marek Marczykowski-Górecki
73748a3519
qubes-release: add security-testing repository definition 2015-07-13 15:24:58 +02:00
Marek Marczykowski-Górecki
40ba343677
lorax-templates-qubes-2.2 2015-07-13 00:12:52 +02:00
Marek Marczykowski-Górecki
9e8a70dfb8
anaconda 20.25.16-9 2015-07-13 00:11:14 +02:00
Marek Marczykowski-Górecki
57887fd90a
lorax: use even shorter file names for kernel/initrd
Apparently initrd-3.19.8-100.fc20.x86_64.img is still too long for
ISO9660.
2015-07-12 16:01:09 +02:00
Marek Marczykowski-Górecki
2726c5a9f5
anaconda: use kernel-install instead of grubby to regenerate initrd/grub.conf
Since we have own hook there, it properly handles Xen. This means we no
longer need post scripts in kickstart for that.
2015-07-12 16:01:02 +02:00
Marek Marczykowski-Górecki
20ec7c3935
lorax: no longer include 3.11 kernel 2015-07-10 16:58:00 +02:00
Marek Marczykowski-Górecki
f7ab7b217c
lorax: include kernels downloaded from Fedora repository
Do it by manually extracting packages from pungi cache instead of
redownloading, because we can't access yum configuration (repositories,
gpg keys etc) here, so it would be even more hacky...

All this is needed because pungi does not support including multiple
versions of a single package.
2015-07-10 16:48:36 +02:00
Marek Marczykowski-Górecki
c792d42b22 comps: remove most of firmware packages
Leave only linux-firmware (containing firmware needed for some GPUs) and
alsa-firmware (as we need sound in dom0).
2015-07-10 02:56:12 +02:00
Marek Marczykowski-Górecki
569b48bcc1 gitignore pkgs 2015-05-14 23:42:11 +02:00
Marek Marczykowski-Górecki
73e8665a2b anaconda: add dom0_mem=min:1024M to default xen cmdline
This will solve #959 for new installations.

Related to qubesos/qubes-issues#959
2015-05-14 21:41:37 +02:00
Marek Marczykowski-Górecki
29fafe803e firstboot 18.6-8 2015-04-15 18:48:15 +02:00
Marek Marczykowski-Górecki
3ce7faca65 Ensure that installer repo is created with proper comps.xml 2015-04-15 14:24:23 +02:00