This is needed for make iso to succeed with NO_SIGN=1 setting.
This doesn't compromise security, because:
1) These are local reports anyway,
2) They are additioanlly verified by update_repo when NO_SIGN is not set.
This repo must be creted manually, which is not good for the
"one click" make qubes target.
The rpms for this repo are downloaded by revisor anyway from the
fedora repo and are cached in build/work/revisor-yumchace anyway,
so subsequent make iso attempts do not need to download them again.
This allows the iso build process to automatically download packages
from the fedora repo, and doesn't require the user to manaully
prepare a local F13 repository by copying packages from the installation DVD.
If a user is willing to make such preparations manually, however,
it is always possible to enable this repo easily.
This reverts commit 1ffabfde5b.
Because of the problems with adding i686 repos, we cannot install
this package (anti-evil-maid-trustedgrub is a 32-bit rpm).
We will offer this via Qubes yum repos to install via qvm-dom0-upgrade.
This reverts commit ae81c85ea4.
Apparently this break way too many things with the installer, such as:
1) makes the resulting ISO not having proper isoconfig and xen.gz installed
2) conflicts with kde packages
I spent some time trying to solve those issues (e.g. using exclude= added
to i686 repos), but without much success. Perhaps somebody with better
understanding of revisor/anaconda could do this one time...
* Updated libdrm (2.4.21) and mesa* (7.8.2) packages for Dom0.
Apparently with the default F13 drm/mesa packages the Xorg crashes
every so often when OpenGL is enabled in KDE on Intel IGDs (Core i5).
This is a known issue and I remember having this problem on baremetal
F13 some months ago.
We're not planning to support any other langs than en in Dom0 anytime soon,
so those packages are essentially useless. Users are not supposed to use
any apps in Dom0 (except for the Window Manager).
1) Use /tmp/qubes-installer-workdir instead of the ugly /Devel/Qubes
2) Use local fedora repo instead of the remote one
3) Still keep the remote fedora repo for extra packages (with higher cost though)
4) Use local repo keys!!!
5) Use nice update_repo.sh script
All in all now use 5 repos during installation:
* build/yum/installer (installer-related rpms)
* build/yum/qubes-dom0 (all the Qubes stuff)
* build/yum/dom0-updates (for select 3rd party packages, e.g. Xorg)
* build/fedora13-repo (local fedora 13 repo, copy from DVD, we don't
keep it uder build/yum, because we don't want our update script
to process it every time)
* remote fedora repo for extra packages (usually deps for qubes-dom0)
