Commit Graph

449 Commits

Author SHA1 Message Date
Marek Marczykowski
b1d5b87e33 rpm_verify: verify all packages even with NO_SIGN
Do not stop verifyng on first not signed package.
2011-11-28 23:05:51 +01:00
Marek Marczykowski
f358ed6307 Makefile: Do not reset NO_SIGN variable
NO_SIGN is already present in environment, but NOT as makefile variable.
2011-11-28 23:00:28 +01:00
Joanna Rutkowska
c6dd34702b make iso: disable debugging 2011-11-10 18:34:33 +01:00
Joanna Rutkowska
88db331d6b rpm_verify: do not panic when the file doesn't exist
It turns out revisor attempts to verify some non-existent files, and this should
not cause an abort.
2011-11-10 18:33:04 +01:00
Joanna Rutkowska
3a30465f0d Remove reference to a non-existent group kde-desktop-qubes 2011-11-10 18:31:08 +01:00
Joanna Rutkowska
163c72df64 Set gpgcheck=0 for locally-built repos
This is needed for make iso to succeed with NO_SIGN=1 setting.

This doesn't compromise security, because:
1) These are local reports anyway,
2) They are additioanlly verified by update_repo when NO_SIGN is not set.
2011-11-10 18:03:17 +01:00
Joanna Rutkowska
a5f58a524f User rpm_verify instead of repeated manual parsing of rpm --checksign output
Additionally, rpm_verify understands the NO_SIGN enviroment variable.
2011-11-10 18:01:25 +01:00
Joanna Rutkowska
010f9648ca Move the nvidia prioprietary drivers to dom0-updates repo 2011-11-10 16:00:43 +01:00
Joanna Rutkowska
688beca297 Use gpgcheck=1 as a default
(Althugh it seems like this is ignored by revisor anyway)
2011-11-09 17:33:05 +01:00
Joanna Rutkowska
6763fb299d update_repo.sh: do not panic when a repo is empty 2011-11-09 17:32:14 +01:00
Joanna Rutkowska
770d48c63b Honor the global NO_SIGN in update_repo.sh 2011-11-09 17:31:10 +01:00
Joanna Rutkowska
1739ec74b5 We don't need rpm_list files anymore
In the past, when the build process was manual, these were hints for the packager
to ensure that all required rpm files have been copied to each repo.

Now, we have automated build that takes care about it.
2011-11-09 17:29:42 +01:00
Joanna Rutkowska
416aea1d23 Get rid of the local fedora repo
This repo must be creted manually, which is not good for the
"one click" make qubes target.

The rpms for this repo are downloaded by revisor anyway from the
fedora repo and are cached in build/work/revisor-yumchace anyway,
so subsequent make iso attempts do not need to download them again.
2011-11-09 17:26:41 +01:00
Joanna Rutkowska
d38be94a0a Disable local F13 repo by default
This allows the iso build process to automatically download packages
from the fedora repo, and doesn't require the user to manaully
prepare a local F13 repository by copying packages from the installation DVD.

If a user is willing to make such preparations manually, however,
it is always possible to enable this repo easily.
2011-11-06 14:51:51 +01:00
Joanna Rutkowska
74e33c4f14 R1-Beta3-pre1 2011-11-06 14:08:21 +01:00
Joanna Rutkowska
0bfe34a5e3 Keep only qubes-unrelated rpms in dom0-updates repo 2011-11-06 14:07:44 +01:00
Joanna Rutkowska
d799e571db .gitignore: ignore the installer/ directory created as part of the iso build process 2011-11-06 14:07:01 +01:00
Joanna Rutkowska
c08ff0a31c Explain the purpuse of each repo 2011-11-06 14:04:37 +01:00
Marek Marczykowski
3104b5da7c conf: rename kde-desktop set to not conflict with standard Fedora 2011-10-15 16:40:15 +02:00
Marek Marczykowski
dc1324c3ef qubes-logos/spec: fix plymouth requires 2011-10-14 12:24:44 +02:00
Marek Marczykowski
40fd364be6 anaconda: include all usb/input/scsi/ata modules in installer system (#369) 2011-10-14 12:23:12 +02:00
Marek Marczykowski
50caa8513f anaconda: enable crond in dom0 (#354) 2011-10-13 23:01:14 +02:00
Marek Marczykowski
d064feb31c anaconda: disable xend
Since we use libxl not needed any more.
2011-10-13 23:01:14 +02:00
Marek Marczykowski
4f525d173b firstboot: add all net devices to NetVM (#282)
This isn't done by qvm-create automatically now.
2011-10-13 23:01:14 +02:00
Marek Marczykowski
639faf029d anaconda: do not pass rdloaddriver=pciback to the kernel (#357) 2011-10-13 23:01:14 +02:00
Marek Marczykowski
dddf0f2dcf Sign all 3rdparty rpms, not only just builded
Dom0 have no keys for verify every signature, so resign packages with Qubes
keys (after verifying other signatures).
2011-10-13 23:01:14 +02:00
Joanna Rutkowska
a3005babfb R1-Beta2 2011-09-16 19:55:27 +02:00
Joanna Rutkowska
8094f99f1d Updates Dom0 core to 1.6.31 2011-09-16 19:54:59 +02:00
Joanna Rutkowska
d25f55e539 R1-Beta2-pre9 2011-09-15 15:34:14 +02:00
Joanna Rutkowska
0e1daef634 Update Qubes packages
core 1.6.30, gui 1.3.6, template 1.3.9

And previously (for pre8) updated to: xen 4.1.1-5, kernel 2.6.38.3-10
2011-09-15 15:32:25 +02:00
Joanna Rutkowska
99f1ab6b23 R1-Beta2-pre8 2011-09-11 17:22:38 +02:00
Joanna Rutkowska
810972c3ba anaconda: try to fix the broken progress bar 2011-09-11 16:19:36 +02:00
Joanna Rutkowska
6ad43624e6 anaconda: fix initramfs regenerating code 2011-09-11 16:03:01 +02:00
Joanna Rutkowska
3339e61ee1 Install libgnomeui to make gtk apps in Dom0 look nicers 2011-09-11 15:16:52 +02:00
Joanna Rutkowska
3d07b5bc6b Revert "Install Anti Evil Maid packages in Dom0"
This reverts commit 1ffabfde5b.

Because of the problems with adding i686 repos, we cannot install
this package (anti-evil-maid-trustedgrub is a 32-bit rpm).

We will offer this via Qubes yum repos to install via qvm-dom0-upgrade.
2011-09-11 15:15:06 +02:00
Joanna Rutkowska
a42e706d97 Revert "Add Fedora 32-bit repos, as some packages might require them as well"
This reverts commit ae81c85ea4.

Apparently this break way too many things with the installer, such as:
1) makes the resulting ISO not having proper isoconfig and xen.gz installed
2) conflicts with kde packages

I spent some time trying to solve those issues (e.g. using exclude= added
to i686 repos), but without much success. Perhaps somebody with better
understanding of revisor/anaconda could do this one time...
2011-09-11 15:12:30 +02:00
Joanna Rutkowska
ae81c85ea4 Add Fedora 32-bit repos, as some packages might require them as well
(e.g. anti-evil-maid-trustedgrub requires libc.i686)
2011-09-09 15:10:21 +02:00
Joanna Rutkowska
e0154f079d Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/installer 2011-09-09 14:53:41 +02:00
Marek Marczykowski
1fe4aa8183 anaconda: call dracut manually
Anaconda does use own version, not from installed system (so without needed
modules).
2011-09-09 11:23:02 +02:00
Marek Marczykowski
97d0f39f38 Revert "anaconda: Regenerate initramfs at the installation end"
This reverts commit bf57b2a3f5.
This script is not needed any more. Perhaps dracut should be called here
directly, but I believe that anaconda does it automatically.

Conflicts:

	anaconda/installclasses/qubes.py
2011-09-09 11:22:44 +02:00
Joanna Rutkowska
bf0d674a8c R1-Beta2-pre7 2011-09-08 23:12:42 +02:00
Joanna Rutkowska
5ac59f4046 Update Qubes packages
core 1.6.20, gui 1.3.5, kernel-dom0 2.6.38.3-9-xenlinux, kernel-vm 3.0.4-2-pvops, xen 4.1.1-2
2011-09-08 23:12:02 +02:00
Joanna Rutkowska
1ffabfde5b Install Anti Evil Maid packages in Dom0 2011-09-08 23:09:10 +02:00
Joanna Rutkowska
008d85b5c5 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/installer 2011-09-08 17:35:50 +02:00
Marek Marczykowski
c0446b9845 Include rsyslog in dom0 installed packages (#322) 2011-08-31 23:53:38 +02:00
Joanna Rutkowska
c111608f3f Install gnome-packagekit in Dom0
This provides gpk-update-viewer that is used by qubes-watch-updates to
display a list of available updates for Dom0.
2011-08-02 13:08:20 +02:00
Joanna Rutkowska
e869947630 Revert "Install kpackagekit in Dom0"
This reverts commit e1734354eb.

We prefer gpk-update-viewer actually.
2011-08-02 13:06:38 +02:00
Joanna Rutkowska
72f19c3490 R1-Beta2-pre6 2011-08-01 16:32:38 +02:00
Joanna Rutkowska
30e5933c3d Update Qubes packeges
core 1.6.17, xen 4.1.0-8
2011-08-01 16:31:47 +02:00
Joanna Rutkowska
e1734354eb Install kpackagekit in Dom0 2011-08-01 16:03:54 +02:00