Commit Graph

182 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
fbc011f01c
anaconda: use proper subvolume argument when booting from btrfs (EFI)
Kernel command line in legacy mode is constructed by grub scripts and
properly handle btrfs subvolumes. For EFI, it is built directly by
anaconda and 'rootflags=subvol=...' argument need to be added manually.

Fixes QubesOS/qubes-issues#1871
2018-02-27 04:52:24 +01:00
Eric Duncan
1c57cfd615
Fix macOS EFI Installation
Typical GRUB2 installations would execute the script
located at /usr/libexec/mactel-boot-setup which would
modify the HFS+ ESP files and bless the specified efi.
However, we are not using GRUB at this time which would
cause that script to exit earlier.

These changes will execute the relevant commands
to symlink the efi file in the /System directory as well
the cfg file.  Lastly, macOS requires the bootable efi
file to be blessed.

We also attempt to place some user-friendly icons
for Qubes to show to the user.

Lastly, we add a README with some instructions on how
to get into rescue mode from macOS.
2018-02-20 10:52:57 -05:00
Marek Marczykowski-Górecki
13dcbb4c15
anaconda 25.20.9-10, lorax-templates-qubes 4.0.1-1, qubes-anaconda-addon 4.0.5-1 2018-01-30 06:07:19 +01:00
Marek Marczykowski-Górecki
3791fd7c5e
anaconda: fix interrupt remapping detection 2018-01-27 12:44:11 +01:00
Marek Marczykowski-Górecki
3c71ef6c1e
qubes-anaconda-addon 4.0.4, anaconda 25.20.9-9 2018-01-20 03:36:09 +01:00
Marek Marczykowski-Górecki
3b4a02cc26
anaconda: fix default scheme in custom partitioning
Update to LVM Thin Provisioning there too.

Fixes QubesOS/qubes-issues#3225
2018-01-15 01:20:18 +01:00
Marek Marczykowski-Górecki
a09af2b727
anaconda 25.20.9-8 2017-12-23 03:21:55 +01:00
Martin Kolman
fa4d491f88
Remove in-memory kickstart representation from traceback file (#1519895)
We have been doing this filtering already, but some paths have likely
changed and the filter was no longer effective.

So add two new filter strings:
"_intf.storage.ksdata"
"_intf.data"

After adding these two I was no longer able to find the plaintext password
anywhere in the traceback after manually triggering a crash with:

kill -USR1 `cat /var/run/anaconda.pid`

Resolves: rhbz#1519895
2017-12-23 03:21:11 +01:00
Marek Marczykowski-Górecki
7489992ddd
anaconda: check also for message about AMD interrupt remapping
Fixes QubesOS/qubes-issues#3208
2017-12-07 00:43:02 +01:00
Marek Marczykowski-Górecki
ca85026ffd
anaconda: update message about unusupported hardware
Advise to not continue.

Fixes QubesOS/qubes-issues#3208
2017-12-03 02:23:05 +01:00
Marek Marczykowski-Górecki
e9a09bd61f
anaconda 25.20.9-7, qubes-anaconda-addon 4.0.2, qubes-release 4.0-0.3 2017-10-09 00:04:51 +02:00
Marek Marczykowski-Górecki
c834daa176
anaconda: make sure the latest version is placed as xen.efi
os.listdir returns files in filesystem order, not sorted.

QubesOS/qubes-issues#2990
2017-09-21 22:10:04 +02:00
Freddie Rice
e3a4a46958
xen.efi upgraded during each install 2017-09-20 12:59:09 -04:00
Marek Marczykowski-Górecki
fbd48c789f
anaconda 25.20.9-6 2017-09-12 04:20:54 +02:00
Marek Marczykowski-Górecki
63043751a5
anaconda: consider Interrupt Remapping as required feature
QubesOS/qubes-issues#2977
2017-09-12 04:20:25 +02:00
Marek Marczykowski-Górecki
6b77cb5ae4
anaconda: don't crash when no target disk is available
self.storage.root_device may be None in such case.
Instead, allow proper reporting that no space is available.
2017-09-05 04:18:11 +02:00
Marek Marczykowski-Górecki
b8ceee513f
anaconda: generate proper extlinux.conf
Fixes QubesOS/qubes-issues#2902
2017-09-05 04:18:10 +02:00
Marek Marczykowski-Górecki
696bd4ccf3
anaconda: check for virtualization features
Warn if the hardware lack features required for proper Qubes OS
operation.

Fixes QubesOS/qubes-issues#2977
2017-09-05 04:18:10 +02:00
Marek Marczykowski-Górecki
2d3405de9a
anaconda: abort installation on X startup fail
Do not fallback to text mode, which cannot property install the system
without kickstart file (missing LUKS passphrase prompt).

Fixes QubesOS/qubes-issues#2996
2017-09-04 02:11:01 +02:00
Marek Marczykowski-Górecki
da9aa47b29
anaconda 25.20.9-5, pungi 4.1.14-2, qubes-anaconda-addon 4.0.0-1 2017-07-05 15:57:25 +02:00
Marek Marczykowski-Górecki
e0d30d499f
anaconda: disable iommu for IGFX
Many Intel processors (and BIOSes) have invalid IOMMU configuration for
IGFX, which cause multiple problems - from screen glitches, to system
hang.
Since IGFX currently is still in dom0 (isn't isolated from other system
components), disabling IOMMU for it doesn't lower overall security.
When GUI domain will be implemented, we need to re-enable IOMMU here and
hope hardware manufacturers will fix it in the meantime.

Fixes QubesOS/qubes-issues#2836
2017-06-14 05:07:13 +02:00
Marek Marczykowski-Górecki
d8d9ac96ac
anaconda: re-enable graphical.target as default target
Workaround for https://bugzilla.redhat.com/1316387 (systemctl preset-all
disables but wont enable default.target).

QubesOS/qubes-issues#2412
2017-05-31 04:33:58 +02:00
Marek Marczykowski-Górecki
0d268f7a27
anaconda: switch default partitioning scheme to LVM Thin Provisioning
QubesOS/qubes-issues#2412
2017-05-30 00:28:10 +02:00
Marek Marczykowski-Górecki
f1c844098a
Merge remote-tracking branch 'qubesos/pr/13'
* qubesos/pr/13:
  Remove coreboot detection, add skip_grub parameter
2017-05-05 21:30:49 +02:00
Rusty Bird
62cb1ca1e6
Remove coreboot detection, add skip_grub parameter
And unconditionally allow boot encryption and the lvmlv format.
(The user still has to fight the installer to actually set it up.)

Fixes QubesOS/qubes-issues#2553
2017-05-01 11:47:57 +00:00
Marek Marczykowski-Górecki
9109005ff1
anaconda: require user password being set
Drop selectable option 'Require a password to use this account'. Make it
required.

QubesOS/qubes-issues#2574
2017-02-14 02:37:52 +01:00
Marek Marczykowski-Górecki
378cfc44dd
anaconda: update Qubes-specific code to upstream base
QubesOS/qubes-issues#2574
2017-02-14 02:37:51 +01:00
Marek Marczykowski-Górecki
cee60f040e
anaconda: add missing build dep
QubesOS/qubes-issues#2574
2017-02-14 02:37:51 +01:00
Marek Marczykowski-Górecki
6bc5671491
anaconda: update to 25.20.9-1
Apply:
  git diff --full-index --binary anaconda-23.19.10-1..anaconda-25.20.9-1

And resolve conflicts.

QubesOS/qubes-issues#2574
2017-02-14 02:36:20 +01:00
Marek Marczykowski-Górecki
e4cf87c537
anaconda: drop removed files from po/POTFILES.in
Fixes QubesOS/qubes-issues#2288
2016-09-02 19:18:13 +02:00
Marek Marczykowski-Górecki
d2988a8643
anaconda 23.19.10-4, lorax-templates-qubes 3.2.3, qubes-anaconda-addon 3.2.2 2016-07-19 01:42:11 +02:00
Marek Marczykowski-Górecki
be9f5b2163
Merge remote-tracking branch 'qubesos/pr/5'
* qubesos/pr/5:
  anaconda: fix encryption passphrase check
2016-07-19 01:38:30 +02:00
Brian C. Lane
cc03f3778d
Deselect all addons correctly (#1333505)
If depsolve failed with some (or all) addons selected it wasn't cleared
by deselecting all of them because the package and group set were never
cleared.

Add a check to skip this if the addons have not been changed (or never
set, as is the case with kickstart).

(cherry picked from commit 2ad90e9294517770372f82a14792379a49bec6a2 from
 anaconda)
Fixes QubesOS/qubes-issues#2105
2016-07-18 23:20:17 +02:00
Wojtek Porczyk
e22de13063 anaconda: fix encryption passphrase check
The installer checks if there is password for autopart. It should check
that only if autopart is actually in use.

QubesOS/qubes-issues#2180
2016-07-18 23:07:24 +02:00
Marek Marczykowski-Górecki
147941657f
anaconda: don't force non-encrypted /boot on coreboot systems
With grub payload it is possible to have all the partitions encrypted.

Based on patch by @tlaurion

Fixes QubesOS/qubes-issues#2118
2016-07-18 12:28:38 +02:00
Marek Marczykowski-Górecki
703a6edc98
anaconda: skip NTP installation and setup in dom0
Dom0 has no direct network access, to this doesn't make sense anyway.

Fixes QubesOS/qubes-issues#2110
2016-07-12 23:22:24 +02:00
Marek Marczykowski-Górecki
8d5bab3f4c
anaconda 23.19.10-3, lorax-templates-qubes 3.2.1, qubes-anaconda-addon 3.2.1 2016-06-07 06:27:35 +02:00
Marek Marczykowski-Górecki
a88c7f0b61
anaconda: sync xen options in UEFI mode with legacy one 2016-06-07 06:12:07 +02:00
Marek Marczykowski-Górecki
72765538f7
anaconda: reset all services to default state
Some preset files may be installed when actual services are already
enabled/disabled. To not worry about package installation order, simply
reset all the services to default state when all the packages are
installed.

Fixes QubesOS/qubes-issues#2049
2016-06-06 02:28:47 +02:00
Marek Marczykowski-Górecki
1c80b74083
anaconda: drop useless on Qubes dependencies on network filesystems
Installing Qubes on network drive is not supported, so drop those
dependencies.
2016-06-06 00:58:32 +02:00
Marek Marczykowski-Górecki
7ff84cf133
anaconda: do not have any requirements on /boot in EFI mode
EFI boot uses only /boot/efi, so /boot may be even on encrypted volume,
LVM, btrfs or anything else. Instead of allowing just LVM, override the
whole check for /boot.

Fixes QubesOS/qubes-issues#1721
2016-06-05 22:21:03 +02:00
Marek Marczykowski-Górecki
13f17526ed
anaconda 23.19.10-2, lorax-templates-qubes 3.2.0, lorax 23.20-2, qubes-anaconda-addon 3.2.0-1 2016-05-18 03:22:57 +02:00
Marek Marczykowski-Górecki
b7d9d54a1e
Revert "anaconda: workaround efibootmgr bug (SIGABRT while removing entries)"
This reverts commit bdba0f99d0.

The workaround is not needed anymore - efibootmgr is new enough.
2016-05-17 14:18:19 +02:00
Marek Marczykowski-Górecki
76e5589adf
anaconda: PasswordSpoke merge fix
QubesOS/qubes-issues#1807
2016-04-24 23:41:16 +02:00
Marek Marczykowski-Górecki
d576319578
anaconda: enable only initial-setup.service variant
It should take care of choosing the right one.

QubesOS/qubes-issues#1807
2016-04-24 23:40:32 +02:00
M. Vefa Bicakci
ef60bed5c9
anaconda: Do not depend on chrony 2016-04-10 00:00:00 -04:00
M. Vefa Bicakci
29a50e7def
anaconda: Disable the NTP configuration spoke 2016-04-10 00:00:00 -04:00
M. Vefa Bicakci
fd37700c14
anaconda: Make sure that a user is created at installation time
This way, Qubes OS-specific initial-setup procedures will always have
a user to work with.
2016-04-10 00:00:00 -04:00
M. Vefa Bicakci
ed17da5dc6
anaconda: Modify user configuration spoke for Qubes OS 2016-04-10 00:00:00 -04:00
M. Vefa Bicakci
dfc0db0a09
anaconda: Do not fail during initramfs start-up due to missing url-lib 2016-04-10 00:00:00 -04:00