Commit Graph

971 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
558bd2612a
Merge remote-tracking branch 'origin/pr/27'
* origin/pr/27:
  anaconda: autoreconf before configure as configure.ac is modified and autogen.sh is not present anymore
  anaconda: update spec with autosetup
  anaconda: switch to source + patches
2018-10-23 03:47:21 +02:00
Frédéric Pierret (fepitre)
1f93381780
anaconda: autoreconf before configure as configure.ac is modified and autogen.sh is not present anymore 2018-10-21 12:54:49 +02:00
Frédéric Pierret (fepitre)
799adbc2f7
anaconda: update spec with autosetup 2018-10-21 12:54:49 +02:00
Frédéric Pierret (fepitre)
ced2bf05a8
anaconda: switch to source + patches 2018-10-21 12:54:49 +02:00
Marek Marczykowski-Górecki
116bbc6a34
lorax-templates-qubes: use qubes kernel during installation
Don't try to install kernel-modules-extra, which force Fedora's kernel.
Qubes kernel package is not split into several packages.
Also, don't install gfs2-utils (not needed in Qubes case) which is said
to pull kernel-debuginfo package.

Fixes QubesOS/qubes-issues#3784
2018-09-30 22:31:04 +02:00
Marek Marczykowski-Górecki
8ed5c0ae4c
lorax-templates-qubes 4.0.3, qubes-anaconda-addon 4.0.8, qubes-release 4.0-5 2018-09-17 15:40:39 +02:00
Marek Marczykowski-Górecki
4b8129a9c2
travis: don't build code-signing only tags 2018-09-16 03:41:10 +02:00
Marek Marczykowski-Górecki
2f3063da20
lorax-templates-qubes: break the build if efiboot.img is too big
Break the build instead of producing broken boot image.
2018-09-16 03:40:12 +02:00
Marek Marczykowski-Górecki
938578c2b2
anaconda: add smt=off xen option during installation
Defaults set during package installation do not apply, as booloader
configuration doesn't exist at that stage yet.

Reported by @rustybird
QubesOS/qubes-issues#4252
2018-09-11 05:15:22 +02:00
Marek Marczykowski-Górecki
b0fa5381c1
qubes-anaconda-addon: fix checking for versioned whonix templates
Use '*' in package name. This require using rpm -qa (instead of rpm -q).
In this case, checking exit code doesn't work, we need to check if any
package was actually listed.
2018-09-11 05:07:38 +02:00
Marek Marczykowski-Górecki
fa2ad03b0b
qubes-release: fix fedora repositories
Don't rely on legacy mirrorlist -> metalink automatic conversion.

Fixes QubesOS/qubes-issues#4090
2018-09-10 15:16:34 +02:00
Marek Marczykowski-Górecki
88e43486b8
qubes-release: drop https from onion urls
Tor already provide encryption and authentication, we don't run https on
onion services.
2018-09-06 19:17:43 +02:00
0brand
53ec55a386
Comments to use qubes onion repository 2018-09-03 23:42:32 +02:00
0brand
f6e0d1e5e8
Comments to use qubes onion repository 2018-09-03 23:42:32 +02:00
Marek Marczykowski-Górecki
dc6f87461c
Update for Whonix 14 templates 2018-08-07 01:28:31 +02:00
Marek Marczykowski-Górecki
cb4a19ffcf
qubes-release 4.0-4, qubes-anaconda-addon 4.0.7 2018-07-15 20:51:58 +02:00
Marek Marczykowski-Górecki
217d223667
qubes-release: use metalinks for qubes repositories
This enables use of different mirrors. Specifify fastestmirror=1
explicitly for templates repository, as it has the biggest impact there.

QubesOS/qubes-issues#3935
2018-07-15 20:47:34 +02:00
Marek Marczykowski-Górecki
84717259ce
travis: use templates testing repositories 2018-07-15 16:15:34 +02:00
Marek Marczykowski-Górecki
21eb21b07d
qubes-release: add template testing repositories
Have them disabled by default.

QubesOS/qubes-issues#3935
2018-07-14 00:32:45 +02:00
Marek Marczykowski-Górecki
2c79b96c40
qubes-anaconda-addon, conf: update to Fedora 28 template
QubesOS/qubes-issues#4013
2018-07-13 17:30:00 +02:00
Marek Marczykowski-Górecki
cd7de5b1a6
qubes-release 4.0-3, anaconda 25.20.9-13 2018-07-03 21:13:52 +02:00
Marek Marczykowski-Górecki
017018b38e
anaconda: mark 'qubes' user name as reserved
'qubes' group is used internally, but useradd want to create a new group
named as new user, so 'qubes' user name should also be avoided.

Fixes QubesOS/qubes-issues#3777
2018-06-28 04:58:21 +02:00
Marek Marczykowski-Górecki
e572efedd4
anaconda: fix root password dialog
Properly save 'lock' state. Previously if it was unchecked, new password
was saved, but remained locked.

Fixes QubesOS/qubes-issues#3327
2018-06-28 04:47:15 +02:00
Marek Marczykowski-Górecki
806f2bc137
anaconda: save keyboard layout to udev
Xorg loads keyboard layout for new devices (or existing one re-detected)
only from its config, ignoring runtime changes done in the meantime
(setxkbmap etc). Since installation process calls udevadm trigger
somewhere, all input devices are re-discovered and reverted to default
keyboard layout (us). Avoid this by configuring current keyboard layout
also as udev rules, which are loaded by Xorg while discovering device.

Fixes QubesOS/qubes-issues#3352
2018-06-27 17:46:57 +02:00
Marek Marczykowski-Górecki
7d5bb6ff81
qubes-release: schedule keys import after update
It isn't possible to import rpm signing keys during update, because
rpm itself holds a lock. Schedule the operation after update using
systemd-run.

Fixes QubesOS/qubes-issues#3756
2018-05-30 04:04:59 +02:00
Andrew David Wong
f6bfe11ab8
Fix System Requirements URL and typo in hardware warnings
Fixes QubesOS/qubes-issues#3932
Related to QubesOS/qubes-issues#3208
2018-05-27 13:29:13 -05:00
Frédéric Pierret
2093dd1d78
Move comps-qubes.xml to qubes-release 2018-05-14 12:38:22 +02:00
Frédéric Pierret
bd0e0d5659
Support Mock based build 2018-05-14 12:38:22 +02:00
Marek Marczykowski-Górecki
92923cc453
qubes-release 4.0-2 2018-04-22 00:32:20 +02:00
Marek Marczykowski-Górecki
512af4bf76
qubes-release: switch qubes-dom0 repositories to https
This is needed for more reliable updates over tor, and also gives some
more privacy.

Fixes QubesOS/qubes-issues#3737
2018-04-22 00:30:45 +02:00
Marek Marczykowski-Górecki
0cc9f141ed
anaconda 25.20.9-12, qubes-release 4.0-1 2018-03-28 04:36:34 +02:00
Marek Marczykowski-Górecki
9d41b135ed
qubes-release: update release notes 2018-03-28 04:35:21 +02:00
Marek Marczykowski-Górecki
7c67b93468
anaconda: avoid adding duplicated kernel entries
List kernel versions without duplicates, even when there are multiple
files related to the same kernel version.
Duplicated kernel versions here caused regenerating initramfs multiple
times and duplicated entries in xen.cfg.

QubesOS/qubes-issues#3624
2018-03-28 02:46:58 +02:00
Marek Marczykowski-Górecki
f452cca502
Add ucode=scan to default Xen command line
Try to update microcode as early as possible if provided.
This option will scan all multiboot modules besides dom0 kernel. In our
case this is perfect - there is only one other module and it is
initramfs which have microcode early cpio prepended.

QubesOS/qubes-issues#3703
2018-03-21 03:29:28 +01:00
Marek Marczykowski-Górecki
f466747949
anaconda: enable discard option for dom0 filesystems by default
This may have performance impact on some older SSD, but on the other
hand, without this option it's pretty easy to fill the whole LVM thin
pool even if there is plenty free space in dom0.
Note that this doesn't enable it on LUKS layer, this is still disabled
by default.

Fixes QubesOS/qubes-issues#3226
2018-03-21 03:29:21 +01:00
Marek Marczykowski-Górecki
38fdf4bbe3
blivet 2.1.6-5, anaconda 25.20.9-11, lorax-templates-qubes 4.0.2, qubes-anaconda-addon 4.0.6 2018-03-04 02:40:17 +01:00
Marek Marczykowski-Górecki
3cc0b2fb56
qubes-anaconda-addon: require new enough qubes-mgmt-salt-dom0-virtual-machines
The one using pillar for setting combined sys-usb + sys-net.
2018-03-04 02:31:15 +01:00
Marek Marczykowski-Górecki
425a82ed2e
qubes-anaconda-addon: adjust usbvm setup to simplified states
Don't use separte state for combined sys-net+sys-usb. Instead, use
pillar to adjust sys-usb state.

QubesOS/qubes-issues#3516
2018-03-02 20:55:43 +01:00
Marek Marczykowski-Górecki
e83c0b4edc
Merge branch 'travis-full'
* travis-full:
  travis: disable unit tests during full ISO build
  travis: switch to ukfast mirror
  travis: ignore groups from online repositories
  travis: build full ISO, including templates
  Add config with templates repositories included
2018-02-27 13:35:38 +01:00
Marek Marczykowski-Górecki
fbc011f01c
anaconda: use proper subvolume argument when booting from btrfs (EFI)
Kernel command line in legacy mode is constructed by grub scripts and
properly handle btrfs subvolumes. For EFI, it is built directly by
anaconda and 'rootflags=subvol=...' argument need to be added manually.

Fixes QubesOS/qubes-issues#1871
2018-02-27 04:52:24 +01:00
Marek Marczykowski-Górecki
7dbbe7c5c4
Merge remote-tracking branch 'qubesos/pr/20'
* qubesos/pr/20:
  Fix macOS EFI Installation
2018-02-26 01:04:06 +01:00
Marek Marczykowski-Górecki
e93f5fe216
travis: disable unit tests during full ISO build
Save some time - especially those in pykickstart are time consuming. And
we need to fit in 50min available on Travis-CI - currently the build is
very close to that limit (most times on the wrong side of it).
2018-02-24 19:59:43 +01:00
Marek Marczykowski-Górecki
8c28205eba
travis: switch to ukfast mirror 2018-02-24 16:14:30 +01:00
Marek Marczykowski-Górecki
e810ec8bb0
travis: ignore groups from online repositories
Use only those from locally generated one, to guarantee usage up to date
comps.xml
2018-02-24 15:04:11 +01:00
Marek Marczykowski-Górecki
3d54b98be9
travis: build full ISO, including templates
Such ISO could be used for further tests, in contrary to the previous
one which had no templates.
2018-02-24 14:36:10 +01:00
Marek Marczykowski-Górecki
e63d2d179f
Add config with templates repositories included
This allows performing full ISO build without building any component
locally.
2018-02-24 14:34:29 +01:00
Marek Marczykowski-Górecki
735ce70dc9
Apply upstream fix for AttributeError in fsminsize
Fixes QubesOS/qubes-issues#3050
2018-02-24 12:10:23 +01:00
Marek Marczykowski-Górecki
3a93e8a2bb
lorax-templates-qubes: don't fail when no extra kernel is selected
It should be possible to build the ISO with just one kernel from
repository, instead of locally built.
2018-02-24 05:06:25 +01:00
Marek Marczykowski-Górecki
ad42bdc95b
Update kernel parameters for i915.preliminary_hw_support -> i915.alpha_support
This option has been renamed in kernel 4.10.
2018-02-24 03:58:40 +01:00
Eric Duncan
1c57cfd615
Fix macOS EFI Installation
Typical GRUB2 installations would execute the script
located at /usr/libexec/mactel-boot-setup which would
modify the HFS+ ESP files and bless the specified efi.
However, we are not using GRUB at this time which would
cause that script to exit earlier.

These changes will execute the relevant commands
to symlink the efi file in the /System directory as well
the cfg file.  Lastly, macOS requires the bootable efi
file to be blessed.

We also attempt to place some user-friendly icons
for Qubes to show to the user.

Lastly, we add a README with some instructions on how
to get into rescue mode from macOS.
2018-02-20 10:52:57 -05:00