Marek Marczykowski-Górecki
10b346a1e1
pungi: verify downloaded (but not installed packages)
...
This way all the packages are verified, not only those installed in
installer image (by lorax). This makes manual rpm --checksig redundant.
2015-09-28 20:29:39 +02:00
Marek Marczykowski-Górecki
6438163c8c
lorax: disable debug output from xen and kernel
...
Prepare for production-quality release.
2015-09-28 20:14:27 +02:00
Marek Marczykowski-Górecki
6adfe1e846
lorax: make initrd back to work without ifcfg module
...
Anaconda requires /etc/sysconfig/network-scripts directory (even if
empty). Do not remove it, because if wouldn't be recreated if we omit
ifcfg dracut module.
2015-09-28 20:10:03 +02:00
Marek Marczykowski-Górecki
0570ce7f6d
lorax: efi: improve using ESP for 'root' device
...
Simply do nothing, instead of searching by filesystem label. This should
work even if there are multiple devices with the same label.
2015-09-28 20:09:58 +02:00
Marek Marczykowski-Górecki
0493bb717c
liveusb: EFI support
...
Since livecd-tools doesn't support starting Xen in EFI mode, most of its
EFI support is rewritten here (overriden in LiveEFIImageCreator, based
on imgcreate.LiveImageCreator).
This all is still temporary solution, until Xen will have mutiboot2+EFI
support - then almost standard configuration could be used (almost the
same grub config as for legacy boot). So keep the changes here, and when
the proper solution would be implemented, pursue to having it upstream.
QubesOS/qubes-issues#794
2015-09-26 22:36:03 +02:00
Marek Marczykowski-Górecki
229da77d7e
lorax: fix legacy mode boot after EFI initrd tinyfication
2015-09-25 16:25:47 +02:00
Marek Marczykowski-Górecki
4d7e45103d
lorax: Add rescue entry to grub2-efi.cfg
2015-09-25 16:25:47 +02:00
Marek Marczykowski-Górecki
7cf4f825e5
lorax: Provide correct device information to xen.efi
...
xen.efi needs to call EFI services to access kernel and initramfs
images. For that it needs correct device handle. Grub set it to 'root'
device, regardless of which device was really used to load xen.efi.
2015-09-25 16:25:47 +02:00
Marek Marczykowski-Górecki
f29979be41
anaconda: use correct root= kernel parameter when creating EFI xen.cfg
2015-09-25 16:25:46 +02:00
Marek Marczykowski-Górecki
bdba0f99d0
anaconda: workaround efibootmgr bug (SIGABRT while removing entries)
2015-09-25 16:25:46 +02:00
Marek Marczykowski-Górecki
447ba8ab42
anaconda: fix dracut module to work with reduced dependencies
...
Do not fail because of not present url-lib. Also 'loop' module requires manual
loading now.
2015-09-25 16:25:46 +02:00
Marek Marczykowski-Górecki
4868764d81
lorax: drop plymouth label plugin
...
It's not used by installer theme but pulls a lot of libraries into initrd.
2015-09-25 16:25:46 +02:00
Marek Marczykowski-Górecki
4fa5c591f8
lorax: exclude SCSI and misc modules from UEFI initrd
...
One more time - save on efiboot.img size.
2015-09-25 16:25:43 +02:00
Marek Marczykowski-Górecki
7e867fd810
lorax: remove SecureBoot files - save some space in efiboot.img
2015-09-25 16:25:06 +02:00
Marek Marczykowski-Górecki
44dc8e0278
lorax: do not create macboot.img - it will be too big anyway
2015-09-25 16:25:05 +02:00
Marek Marczykowski-Górecki
b024e93e40
lorax: remove network support from UEFI initrd
...
Reduce its size to have efiboot.img under 32MB.
This needs rebuilding initrd and we need kernel version for that - so pass it
down from x86.tmpl.
2015-09-25 16:24:53 +02:00
Marek Marczykowski-Górecki
9a80875a5d
live: remove automatic swap discovery
...
We don't want to leave unencrypted memory dumps on some "random" disk
found in the system.
2015-09-25 15:31:12 +02:00
Marek Marczykowski-Górecki
c4b965ed88
lorax: select xen.cfg section to enable/disable media check
...
Apparently all but first parameters are passed to xen.efi, so it is possible to
select which config section should be used. This makes xen.efi copy
unnecessary.
2015-09-21 18:09:34 +02:00
Marek Marczykowski-Górecki
49b3630362
lorax: disable UEFI Secure Boot shim
...
We don't have signed xen/kernel/initramfs binaries. And more
importantly, we don't have MS-signed key...
2015-09-21 18:09:33 +02:00
Marek Marczykowski-Górecki
3df2363093
Merge remote-tracking branch 'qubesos/master'
2015-09-16 17:08:46 +02:00
Marek Marczykowski-Górecki
d08f0cf0a4
conf: drop debian-7 template from ISO image
...
Fixes qubesos/qubes-issues#1070
2015-09-16 16:53:16 +02:00
Marek Marczykowski-Górecki
d57c5e814a
live: place private.img of default VMs back on dm-snapshot device
...
Apparently those 350MB are critical on 4GB systems without a swap.
2015-08-09 20:43:06 +02:00
Marek Marczykowski-Górecki
012cad5b47
live: remove redundant livecd-creator --verbose flag
...
--debug already implies this. Actually only the last one is used.
2015-08-09 20:42:24 +02:00
Marek Marczykowski-Górecki
1408be322e
live: disable (currently broken) EFI
2015-08-09 14:05:15 +02:00
Marek Marczykowski-Górecki
f5673dbb49
liveusb: fix package name in build-deps
2015-08-07 02:27:42 +02:00
Marek Marczykowski-Górecki
67cda610e7
pungi: do not use isohybrid --offset as it isn't compatible with EFI
2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
b3d04825a2
anaconda: generate xen efi configuration
2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
ff30f25718
lorax: preliminary EFI support
2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
5796c78979
anaconda: disable os prober
...
It tries to mount every existing block device, including VM images.
2015-08-05 02:11:23 +02:00
Marek Marczykowski-Górecki
a0060ff53f
pungi: do not generate upgrade.img
...
We do not support in-place upgrades this way.
2015-08-05 02:11:11 +02:00
Marek Marczykowski-Górecki
ea884ac81d
liveusb: use more friendly output image name
2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
28fcfcc238
liveusb: overlayfs doesn't support sparse files, use tmpfs directly
...
This comes with some overhead, at least at the beginning, because all
private images are copied there at system startup (instead of first
use). This uses about 450MB of RAM.
Still better than non-sparse private.img (2GB...).
2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
2718c73c31
liveusb: include default appmenus based on default fedora-21 template
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
823fecf988
liveusb: use offline-mode of qubes-set-updates
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
ae670d0290
liveusb: mount /var/lib/qubes using overlayfs on tmpfs, instead of dm-snapshot
...
When dm-snapshot fills up, it is not recoverable situation. Also much
less flexible (for example deleting files does not free the space).
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
d8e4080015
liveusb: reset list of PCI devices assigned to sys-net before assigning new ones
...
Just in case of installation with persistent configuration.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
f69016ec5c
conf/liveusb: disable updates check - senseless on non-persistent system
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
0b3058b1b7
liveusb: use qvm-pci --offline-mode
...
It is called before libvirtd start.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
1c1d8ba478
conf/liveusb: create default dispvm template
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
4bf5169ad9
Make liveusb build compatible with qubes-builder - use 'iso' target
...
This commit introduces two new settings (for builder.conf):
ISO_INSTALLER - build installer ISO; enabled by default
ISO_LIVEUSB - build Live ISO; disabled by default
2015-08-03 17:52:05 +02:00
Marek Marczykowski-Górecki
6783a317c7
liveusb: add lightdm autologin
2015-08-03 17:52:05 +02:00
Marek Marczykowski-Górecki
d57620c96d
Add 'liveusb' make target
2015-08-01 23:20:46 +02:00
Marek Marczykowski-Górecki
9db56031f5
qubes-release: include R3.0 rpm keys symlinks
...
$releasever used in yum configuration points at "3.0", so make such keys
available.
2015-08-01 23:20:25 +02:00
Marek Marczykowski-Górecki
8eb5dba9bc
liveusb: fix rpm key import; tmp.mount is already enabled
2015-08-01 23:20:25 +02:00
Wojtek Porczyk
68a8e1777c
liveusb: add qubes-specific configuration
2015-08-01 23:20:02 +02:00
Wojtek Porczyk
ac5128e9b3
livecd-creator: fix /dev in chroot
2015-08-01 23:20:02 +02:00
Wojtek Porczyk
5553b98e2f
livecd-creator imported from rhinstaller/livecd-tools
2015-08-01 23:20:02 +02:00
Wojtek Porczyk
65ca4d222c
Move /etc/rc.d files from kickstart to package
2015-08-01 23:20:01 +02:00
Marek Marczykowski-Górecki
fa151f3261
Preliminary qubes-live package
2015-08-01 23:20:01 +02:00
Wojtek Porczyk
ecd43c43c4
liveusb: new ks stolen from fedora spins
2015-08-01 23:19:52 +02:00
