Commit Graph

975 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
9e354a6dfb
squashfs-tools: backport reproducible builds patches from squashfskit 5.0-rc1 2018-10-06 03:23:27 +02:00
Marek Marczykowski-Górecki
42fa533e79
Import unmodified squashfs-tools package 2018-10-06 03:23:27 +02:00
Marek Marczykowski-Górecki
54352136b8
lorax-templates-qubes: strip various non-determinisms from installer image
Remove various caches not really needed.
Sort group files and packages list.
Strip timestamps from gconf file.
Clamp mtime in fontconfig cache to SOURCE_DATE_EPOCH.
2018-10-06 03:23:27 +02:00
Marek Marczykowski-Górecki
94ccc1a19a
pungi: add patches for making the output reproducible 2018-10-06 03:23:27 +02:00
Marek Marczykowski-Górecki
45c201932b lorax: use $SOURCE_DATE_EPOCH for timestamps 2018-10-06 01:25:24 +02:00
Marek Marczykowski-Górecki
c74ac9b303 lorax-templates-qubes: drop dmsquash-live module in efi initrd image
Since moving to squashfs + overlay fs, it isn't needed anymore. And size
of initrd for efi is critical.
2018-10-04 21:50:53 +02:00
Marek Marczykowski-Górecki
332be8e1e3 anaconda, lorax: drop rootfs.img inside squashfs
Package root filesystem directly as squashfs image. The most important
gain is getting rid of greatly unreproducible ext4 image creation. But
also it makes the output image slightly smaller, and the build faster.
Also, dmsquash-live dracut module is not needed anymore, which reduce
initramfs size.
2018-10-04 21:46:15 +02:00
Marek Marczykowski-Górecki
285516599a Set SOURCE_DATE_EPOCH for the build as last commit time
This isn't exactly "last modification time of source", as the source for
the final ISO include also all rpm packages from other components (and
from Fedora), which may be newer than installer-qubes-os itself. But in
practice it shouldn't be a problem as most of them will be only included
as files without relying on any specific timestamps inside.
2018-10-04 21:30:25 +02:00
Marek Marczykowski-Górecki
acdcbfd6d0 Allow to override ISO_VERSION for devel builds from builder.conf
For devel builds we use current date as ISO version. Allow to provide
specific value, without marking the ISO as final.
2018-10-04 21:29:11 +02:00
Marek Marczykowski-Górecki
8ed5c0ae4c
lorax-templates-qubes 4.0.3, qubes-anaconda-addon 4.0.8, qubes-release 4.0-5 2018-09-17 15:40:39 +02:00
Marek Marczykowski-Górecki
4b8129a9c2
travis: don't build code-signing only tags 2018-09-16 03:41:10 +02:00
Marek Marczykowski-Górecki
2f3063da20
lorax-templates-qubes: break the build if efiboot.img is too big
Break the build instead of producing broken boot image.
2018-09-16 03:40:12 +02:00
Marek Marczykowski-Górecki
938578c2b2
anaconda: add smt=off xen option during installation
Defaults set during package installation do not apply, as booloader
configuration doesn't exist at that stage yet.

Reported by @rustybird
QubesOS/qubes-issues#4252
2018-09-11 05:15:22 +02:00
Marek Marczykowski-Górecki
b0fa5381c1
qubes-anaconda-addon: fix checking for versioned whonix templates
Use '*' in package name. This require using rpm -qa (instead of rpm -q).
In this case, checking exit code doesn't work, we need to check if any
package was actually listed.
2018-09-11 05:07:38 +02:00
Marek Marczykowski-Górecki
fa2ad03b0b
qubes-release: fix fedora repositories
Don't rely on legacy mirrorlist -> metalink automatic conversion.

Fixes QubesOS/qubes-issues#4090
2018-09-10 15:16:34 +02:00
Marek Marczykowski-Górecki
88e43486b8
qubes-release: drop https from onion urls
Tor already provide encryption and authentication, we don't run https on
onion services.
2018-09-06 19:17:43 +02:00
0brand
53ec55a386
Comments to use qubes onion repository 2018-09-03 23:42:32 +02:00
0brand
f6e0d1e5e8
Comments to use qubes onion repository 2018-09-03 23:42:32 +02:00
Marek Marczykowski-Górecki
dc6f87461c
Update for Whonix 14 templates 2018-08-07 01:28:31 +02:00
Marek Marczykowski-Górecki
cb4a19ffcf
qubes-release 4.0-4, qubes-anaconda-addon 4.0.7 2018-07-15 20:51:58 +02:00
Marek Marczykowski-Górecki
217d223667
qubes-release: use metalinks for qubes repositories
This enables use of different mirrors. Specifify fastestmirror=1
explicitly for templates repository, as it has the biggest impact there.

QubesOS/qubes-issues#3935
2018-07-15 20:47:34 +02:00
Marek Marczykowski-Górecki
84717259ce
travis: use templates testing repositories 2018-07-15 16:15:34 +02:00
Marek Marczykowski-Górecki
21eb21b07d
qubes-release: add template testing repositories
Have them disabled by default.

QubesOS/qubes-issues#3935
2018-07-14 00:32:45 +02:00
Marek Marczykowski-Górecki
2c79b96c40
qubes-anaconda-addon, conf: update to Fedora 28 template
QubesOS/qubes-issues#4013
2018-07-13 17:30:00 +02:00
Marek Marczykowski-Górecki
cd7de5b1a6
qubes-release 4.0-3, anaconda 25.20.9-13 2018-07-03 21:13:52 +02:00
Marek Marczykowski-Górecki
017018b38e
anaconda: mark 'qubes' user name as reserved
'qubes' group is used internally, but useradd want to create a new group
named as new user, so 'qubes' user name should also be avoided.

Fixes QubesOS/qubes-issues#3777
2018-06-28 04:58:21 +02:00
Marek Marczykowski-Górecki
e572efedd4
anaconda: fix root password dialog
Properly save 'lock' state. Previously if it was unchecked, new password
was saved, but remained locked.

Fixes QubesOS/qubes-issues#3327
2018-06-28 04:47:15 +02:00
Marek Marczykowski-Górecki
806f2bc137
anaconda: save keyboard layout to udev
Xorg loads keyboard layout for new devices (or existing one re-detected)
only from its config, ignoring runtime changes done in the meantime
(setxkbmap etc). Since installation process calls udevadm trigger
somewhere, all input devices are re-discovered and reverted to default
keyboard layout (us). Avoid this by configuring current keyboard layout
also as udev rules, which are loaded by Xorg while discovering device.

Fixes QubesOS/qubes-issues#3352
2018-06-27 17:46:57 +02:00
Marek Marczykowski-Górecki
7d5bb6ff81
qubes-release: schedule keys import after update
It isn't possible to import rpm signing keys during update, because
rpm itself holds a lock. Schedule the operation after update using
systemd-run.

Fixes QubesOS/qubes-issues#3756
2018-05-30 04:04:59 +02:00
Andrew David Wong
f6bfe11ab8
Fix System Requirements URL and typo in hardware warnings
Fixes QubesOS/qubes-issues#3932
Related to QubesOS/qubes-issues#3208
2018-05-27 13:29:13 -05:00
Frédéric Pierret
2093dd1d78
Move comps-qubes.xml to qubes-release 2018-05-14 12:38:22 +02:00
Frédéric Pierret
bd0e0d5659
Support Mock based build 2018-05-14 12:38:22 +02:00
Marek Marczykowski-Górecki
92923cc453
qubes-release 4.0-2 2018-04-22 00:32:20 +02:00
Marek Marczykowski-Górecki
512af4bf76
qubes-release: switch qubes-dom0 repositories to https
This is needed for more reliable updates over tor, and also gives some
more privacy.

Fixes QubesOS/qubes-issues#3737
2018-04-22 00:30:45 +02:00
Marek Marczykowski-Górecki
0cc9f141ed
anaconda 25.20.9-12, qubes-release 4.0-1 2018-03-28 04:36:34 +02:00
Marek Marczykowski-Górecki
9d41b135ed
qubes-release: update release notes 2018-03-28 04:35:21 +02:00
Marek Marczykowski-Górecki
7c67b93468
anaconda: avoid adding duplicated kernel entries
List kernel versions without duplicates, even when there are multiple
files related to the same kernel version.
Duplicated kernel versions here caused regenerating initramfs multiple
times and duplicated entries in xen.cfg.

QubesOS/qubes-issues#3624
2018-03-28 02:46:58 +02:00
Marek Marczykowski-Górecki
f452cca502
Add ucode=scan to default Xen command line
Try to update microcode as early as possible if provided.
This option will scan all multiboot modules besides dom0 kernel. In our
case this is perfect - there is only one other module and it is
initramfs which have microcode early cpio prepended.

QubesOS/qubes-issues#3703
2018-03-21 03:29:28 +01:00
Marek Marczykowski-Górecki
f466747949
anaconda: enable discard option for dom0 filesystems by default
This may have performance impact on some older SSD, but on the other
hand, without this option it's pretty easy to fill the whole LVM thin
pool even if there is plenty free space in dom0.
Note that this doesn't enable it on LUKS layer, this is still disabled
by default.

Fixes QubesOS/qubes-issues#3226
2018-03-21 03:29:21 +01:00
Marek Marczykowski-Górecki
38fdf4bbe3
blivet 2.1.6-5, anaconda 25.20.9-11, lorax-templates-qubes 4.0.2, qubes-anaconda-addon 4.0.6 2018-03-04 02:40:17 +01:00
Marek Marczykowski-Górecki
3cc0b2fb56
qubes-anaconda-addon: require new enough qubes-mgmt-salt-dom0-virtual-machines
The one using pillar for setting combined sys-usb + sys-net.
2018-03-04 02:31:15 +01:00
Marek Marczykowski-Górecki
425a82ed2e
qubes-anaconda-addon: adjust usbvm setup to simplified states
Don't use separte state for combined sys-net+sys-usb. Instead, use
pillar to adjust sys-usb state.

QubesOS/qubes-issues#3516
2018-03-02 20:55:43 +01:00
Marek Marczykowski-Górecki
e83c0b4edc
Merge branch 'travis-full'
* travis-full:
  travis: disable unit tests during full ISO build
  travis: switch to ukfast mirror
  travis: ignore groups from online repositories
  travis: build full ISO, including templates
  Add config with templates repositories included
2018-02-27 13:35:38 +01:00
Marek Marczykowski-Górecki
fbc011f01c
anaconda: use proper subvolume argument when booting from btrfs (EFI)
Kernel command line in legacy mode is constructed by grub scripts and
properly handle btrfs subvolumes. For EFI, it is built directly by
anaconda and 'rootflags=subvol=...' argument need to be added manually.

Fixes QubesOS/qubes-issues#1871
2018-02-27 04:52:24 +01:00
Marek Marczykowski-Górecki
7dbbe7c5c4
Merge remote-tracking branch 'qubesos/pr/20'
* qubesos/pr/20:
  Fix macOS EFI Installation
2018-02-26 01:04:06 +01:00
Marek Marczykowski-Górecki
e93f5fe216
travis: disable unit tests during full ISO build
Save some time - especially those in pykickstart are time consuming. And
we need to fit in 50min available on Travis-CI - currently the build is
very close to that limit (most times on the wrong side of it).
2018-02-24 19:59:43 +01:00
Marek Marczykowski-Górecki
8c28205eba
travis: switch to ukfast mirror 2018-02-24 16:14:30 +01:00
Marek Marczykowski-Górecki
e810ec8bb0
travis: ignore groups from online repositories
Use only those from locally generated one, to guarantee usage up to date
comps.xml
2018-02-24 15:04:11 +01:00
Marek Marczykowski-Górecki
3d54b98be9
travis: build full ISO, including templates
Such ISO could be used for further tests, in contrary to the previous
one which had no templates.
2018-02-24 14:36:10 +01:00
Marek Marczykowski-Górecki
e63d2d179f
Add config with templates repositories included
This allows performing full ISO build without building any component
locally.
2018-02-24 14:34:29 +01:00