Commit Graph

601 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
7ac6902f1e livecd-tools: gitignore 2015-09-29 03:36:59 +02:00
Marek Marczykowski-Górecki
8ec82b09f7 livecd-tools: apply patches for verifying downloaded packages
Livecd-creator is one more example of program which happily installs
whatever downloads from the network, without any verification
(repository metadata consistency doesn't count)...

Patches sent upstream here:
https://github.com/rhinstaller/livecd-tools/pull/14
2015-09-29 03:35:14 +02:00
Marek Marczykowski-Górecki
ea9d843368 livecd-tools: plug it into qubes-builder scripts 2015-09-29 03:29:36 +02:00
Marek Marczykowski-Górecki
75bc4dbee8 livecd-tools: import unmodified package from Fedora 20 2015-09-29 03:24:01 +02:00
Marek Marczykowski-Górecki
dbb8ebcbe5 makefile: remove legacy targets 2015-09-29 03:22:19 +02:00
Marek Marczykowski-Górecki
0493bb717c liveusb: EFI support
Since livecd-tools doesn't support starting Xen in EFI mode, most of its
EFI support is rewritten here (overriden in LiveEFIImageCreator, based
on imgcreate.LiveImageCreator).

This all is still temporary solution, until Xen will have mutiboot2+EFI
support - then almost standard configuration could be used (almost the
same grub config as for legacy boot). So keep the changes here, and when
the proper solution would be implemented, pursue to having it upstream.

QubesOS/qubes-issues#794
2015-09-26 22:36:03 +02:00
Marek Marczykowski-Górecki
9a80875a5d
live: remove automatic swap discovery
We don't want to leave unencrypted memory dumps on some "random" disk
found in the system.
2015-09-25 15:31:12 +02:00
Marek Marczykowski-Górecki
d57c5e814a
live: place private.img of default VMs back on dm-snapshot device
Apparently those 350MB are critical on 4GB systems without a swap.
2015-08-09 20:43:06 +02:00
Marek Marczykowski-Górecki
012cad5b47
live: remove redundant livecd-creator --verbose flag
--debug already implies this. Actually only the last one is used.
2015-08-09 20:42:24 +02:00
Marek Marczykowski-Górecki
1408be322e
live: disable (currently broken) EFI 2015-08-09 14:05:15 +02:00
Marek Marczykowski-Górecki
f5673dbb49
liveusb: fix package name in build-deps 2015-08-07 02:27:42 +02:00
Marek Marczykowski-Górecki
ea884ac81d
liveusb: use more friendly output image name 2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
28fcfcc238
liveusb: overlayfs doesn't support sparse files, use tmpfs directly
This comes with some overhead, at least at the beginning, because all
private images are copied there at system startup (instead of first
use). This uses about 450MB of RAM.
Still better than non-sparse private.img (2GB...).
2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
2718c73c31
liveusb: include default appmenus based on default fedora-21 template 2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
823fecf988
liveusb: use offline-mode of qubes-set-updates 2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
ae670d0290
liveusb: mount /var/lib/qubes using overlayfs on tmpfs, instead of dm-snapshot
When dm-snapshot fills up, it is not recoverable situation. Also much
less flexible (for example deleting files does not free the space).
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
d8e4080015
liveusb: reset list of PCI devices assigned to sys-net before assigning new ones
Just in case of installation with persistent configuration.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
f69016ec5c
conf/liveusb: disable updates check - senseless on non-persistent system 2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
0b3058b1b7
liveusb: use qvm-pci --offline-mode
It is called before libvirtd start.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
1c1d8ba478
conf/liveusb: create default dispvm template 2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
4bf5169ad9
Make liveusb build compatible with qubes-builder - use 'iso' target
This commit introduces two new settings (for builder.conf):
ISO_INSTALLER - build installer ISO; enabled by default
ISO_LIVEUSB - build Live ISO; disabled by default
2015-08-03 17:52:05 +02:00
Marek Marczykowski-Górecki
6783a317c7
liveusb: add lightdm autologin 2015-08-03 17:52:05 +02:00
Marek Marczykowski-Górecki
d57620c96d
Add 'liveusb' make target 2015-08-01 23:20:46 +02:00
Marek Marczykowski-Górecki
9db56031f5
qubes-release: include R3.0 rpm keys symlinks
$releasever used in yum configuration points at "3.0", so make such keys
available.
2015-08-01 23:20:25 +02:00
Marek Marczykowski-Górecki
8eb5dba9bc
liveusb: fix rpm key import; tmp.mount is already enabled 2015-08-01 23:20:25 +02:00
Wojtek Porczyk
68a8e1777c
liveusb: add qubes-specific configuration 2015-08-01 23:20:02 +02:00
Wojtek Porczyk
ac5128e9b3
livecd-creator: fix /dev in chroot 2015-08-01 23:20:02 +02:00
Wojtek Porczyk
5553b98e2f
livecd-creator imported from rhinstaller/livecd-tools 2015-08-01 23:20:02 +02:00
Wojtek Porczyk
65ca4d222c
Move /etc/rc.d files from kickstart to package 2015-08-01 23:20:01 +02:00
Marek Marczykowski-Górecki
fa151f3261
Preliminary qubes-live package 2015-08-01 23:20:01 +02:00
Wojtek Porczyk
ecd43c43c4
liveusb: new ks stolen from fedora spins 2015-08-01 23:19:52 +02:00
Marek Marczykowski-Górecki
c254186978
qubes-release 3.0-0.4 2015-07-13 15:25:30 +02:00
Marek Marczykowski-Górecki
73748a3519
qubes-release: add security-testing repository definition 2015-07-13 15:24:58 +02:00
Marek Marczykowski-Górecki
40ba343677
lorax-templates-qubes-2.2 2015-07-13 00:12:52 +02:00
Marek Marczykowski-Górecki
9e8a70dfb8
anaconda 20.25.16-9 2015-07-13 00:11:14 +02:00
Marek Marczykowski-Górecki
57887fd90a
lorax: use even shorter file names for kernel/initrd
Apparently initrd-3.19.8-100.fc20.x86_64.img is still too long for
ISO9660.
2015-07-12 16:01:09 +02:00
Marek Marczykowski-Górecki
2726c5a9f5
anaconda: use kernel-install instead of grubby to regenerate initrd/grub.conf
Since we have own hook there, it properly handles Xen. This means we no
longer need post scripts in kickstart for that.
2015-07-12 16:01:02 +02:00
Marek Marczykowski-Górecki
20ec7c3935
lorax: no longer include 3.11 kernel 2015-07-10 16:58:00 +02:00
Marek Marczykowski-Górecki
f7ab7b217c
lorax: include kernels downloaded from Fedora repository
Do it by manually extracting packages from pungi cache instead of
redownloading, because we can't access yum configuration (repositories,
gpg keys etc) here, so it would be even more hacky...

All this is needed because pungi does not support including multiple
versions of a single package.
2015-07-10 16:48:36 +02:00
Marek Marczykowski-Górecki
c792d42b22 comps: remove most of firmware packages
Leave only linux-firmware (containing firmware needed for some GPUs) and
alsa-firmware (as we need sound in dom0).
2015-07-10 02:56:12 +02:00
Marek Marczykowski-Górecki
569b48bcc1 gitignore pkgs 2015-05-14 23:42:11 +02:00
Marek Marczykowski-Górecki
73e8665a2b anaconda: add dom0_mem=min:1024M to default xen cmdline
This will solve #959 for new installations.

Related to qubesos/qubes-issues#959
2015-05-14 21:41:37 +02:00
Marek Marczykowski-Górecki
29fafe803e firstboot 18.6-8 2015-04-15 18:48:15 +02:00
Marek Marczykowski-Górecki
3ce7faca65 Ensure that installer repo is created with proper comps.xml 2015-04-15 14:24:23 +02:00
Marek Marczykowski-Górecki
62c94eb00b firstboot: fix catching error message 2015-04-15 14:21:58 +02:00
Marek Marczykowski-Górecki
73f06661bb firstboot: do not abort configuring other templates if one fails 2015-04-15 14:21:57 +02:00
Marek Marczykowski-Górecki
ed9a728235 rpm_verify: do not try to import key when run as normal user 2015-04-15 14:21:57 +02:00
Marek Marczykowski-Górecki
168e34510d firstboot: make initial setup more defensive
Do not abort the whole process when some part fails. Cleanup *-dvm if
DispVM preparation failed.
2015-04-15 14:21:54 +02:00
Marek Marczykowski-Górecki
3d5bcb5b18 anaconda 20.25.16-8 2015-04-12 03:06:55 +02:00
Marek Marczykowski-Górecki
6ec0a27683 anaconda: regenerate grub.cfg using grub2-mkconfig
Normally anaconda uses grubby to update bootloader configuration. But
unfortunately it breaks grub configuration (removes trailing "=", so
empty variable assignment xen_rm_opts= is broken). Instead of reworking
the whole bootloader support in anaconda, just regenerate grub.cfg at
the end.
2015-04-12 03:04:49 +02:00