This is needed for make iso to succeed with NO_SIGN=1 setting.
This doesn't compromise security, because:
1) These are local reports anyway,
2) They are additioanlly verified by update_repo when NO_SIGN is not set.
This repo must be creted manually, which is not good for the
"one click" make qubes target.
The rpms for this repo are downloaded by revisor anyway from the
fedora repo and are cached in build/work/revisor-yumchace anyway,
so subsequent make iso attempts do not need to download them again.
This allows the iso build process to automatically download packages
from the fedora repo, and doesn't require the user to manaully
prepare a local F13 repository by copying packages from the installation DVD.
If a user is willing to make such preparations manually, however,
it is always possible to enable this repo easily.
This reverts commit 1ffabfde5b.
Because of the problems with adding i686 repos, we cannot install
this package (anti-evil-maid-trustedgrub is a 32-bit rpm).
We will offer this via Qubes yum repos to install via qvm-dom0-upgrade.
This reverts commit ae81c85ea4.
Apparently this break way too many things with the installer, such as:
1) makes the resulting ISO not having proper isoconfig and xen.gz installed
2) conflicts with kde packages
I spent some time trying to solve those issues (e.g. using exclude= added
to i686 repos), but without much success. Perhaps somebody with better
understanding of revisor/anaconda could do this one time...
* Updated libdrm (2.4.21) and mesa* (7.8.2) packages for Dom0.
Apparently with the default F13 drm/mesa packages the Xorg crashes
every so often when OpenGL is enabled in KDE on Intel IGDs (Core i5).
This is a known issue and I remember having this problem on baremetal
F13 some months ago.