Commit Graph

630 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
e842046273
anaconda 20.25.16-10, livecd-tools 20.6-2, lorax-templates-qubes 3.1-1, pungi 3.03-2
Also set epoch ridiculously high for pungi and livecd-tools to make sure
we use versions with enabled signature checking.
2015-09-30 00:40:53 +02:00
Marek Marczykowski-Górecki
ae8d7dbdb4
qubes-release 3.1-0.1
'master' branch now points to next major release
2015-09-29 16:37:26 +02:00
Marek Marczykowski-Górecki
bab6aa2fa2
Merge branch 'efi'
* efi:
  lorax: disable debug output from xen and kernel
  lorax: make initrd back to work without ifcfg module
  lorax: efi: improve using ESP for 'root' device
  lorax: fix legacy mode boot after EFI initrd tinyfication
  lorax: Add rescue entry to grub2-efi.cfg
  lorax: Provide correct device information to xen.efi
  anaconda: use correct root= kernel parameter when creating EFI xen.cfg
  anaconda: workaround efibootmgr bug (SIGABRT while removing entries)
  anaconda: fix dracut module to work with reduced dependencies
  lorax: drop plymouth label plugin
  lorax: exclude SCSI and misc modules from UEFI initrd
  lorax: remove SecureBoot files - save some space in efiboot.img
  lorax: do not create macboot.img - it will be too big anyway
  lorax: remove network support from UEFI initrd
  lorax: select xen.cfg section to enable/disable media check
  lorax: disable UEFI Secure Boot shim
  pungi: do not use isohybrid --offset as it isn't compatible with EFI
  anaconda: generate xen efi configuration
  lorax: preliminary EFI support

QubesOS/qubes-issues#794
2015-09-29 16:11:59 +02:00
Marek Marczykowski-Górecki
0e6649b6a5
Merge branch 'liveusb'
* liveusb: (31 commits)
  livecd-tools: gitignore
  livecd-tools: apply patches for verifying downloaded packages
  livecd-tools: plug it into qubes-builder scripts
  livecd-tools: import unmodified package from Fedora 20
  makefile: remove legacy targets
  liveusb: EFI support
  live: remove automatic swap discovery
  live: place private.img of default VMs back on dm-snapshot device
  live: remove redundant livecd-creator --verbose flag
  live: disable (currently broken) EFI
  liveusb: fix package name in build-deps
  liveusb: use more friendly output image name
  liveusb: overlayfs doesn't support sparse files, use tmpfs directly
  liveusb: include default appmenus based on default fedora-21 template
  liveusb: use offline-mode of qubes-set-updates
  liveusb: mount /var/lib/qubes using overlayfs on tmpfs, instead of dm-snapshot
  liveusb: reset list of PCI devices assigned to sys-net before assigning new ones
  conf/liveusb: disable updates check - senseless on non-persistent system
  liveusb: use qvm-pci --offline-mode
  conf/liveusb: create default dispvm template
  ...

QubesOS/qubes-ossues#1018
2015-09-29 16:10:30 +02:00
Marek Marczykowski-Górecki
7ac6902f1e livecd-tools: gitignore 2015-09-29 03:36:59 +02:00
Marek Marczykowski-Górecki
8ec82b09f7 livecd-tools: apply patches for verifying downloaded packages
Livecd-creator is one more example of program which happily installs
whatever downloads from the network, without any verification
(repository metadata consistency doesn't count)...

Patches sent upstream here:
https://github.com/rhinstaller/livecd-tools/pull/14
2015-09-29 03:35:14 +02:00
Marek Marczykowski-Górecki
ea9d843368 livecd-tools: plug it into qubes-builder scripts 2015-09-29 03:29:36 +02:00
Marek Marczykowski-Górecki
75bc4dbee8 livecd-tools: import unmodified package from Fedora 20 2015-09-29 03:24:01 +02:00
Marek Marczykowski-Górecki
dbb8ebcbe5 makefile: remove legacy targets 2015-09-29 03:22:19 +02:00
Marek Marczykowski-Górecki
a8b97177ae
Merge branch 'pungi-gpgcheck' 2015-09-29 02:31:40 +02:00
Marek Marczykowski-Górecki
10b346a1e1 pungi: verify downloaded (but not installed packages)
This way all the packages are verified, not only those installed in
installer image (by lorax). This makes manual rpm --checksig redundant.
2015-09-28 20:29:39 +02:00
Marek Marczykowski-Górecki
6438163c8c lorax: disable debug output from xen and kernel
Prepare for production-quality release.
2015-09-28 20:14:27 +02:00
Marek Marczykowski-Górecki
6adfe1e846 lorax: make initrd back to work without ifcfg module
Anaconda requires /etc/sysconfig/network-scripts directory (even if
empty). Do not remove it, because if wouldn't be recreated if we omit
ifcfg dracut module.
2015-09-28 20:10:03 +02:00
Marek Marczykowski-Górecki
0570ce7f6d lorax: efi: improve using ESP for 'root' device
Simply do nothing, instead of searching by filesystem label. This should
work even if there are multiple devices with the same label.
2015-09-28 20:09:58 +02:00
Marek Marczykowski-Górecki
0493bb717c liveusb: EFI support
Since livecd-tools doesn't support starting Xen in EFI mode, most of its
EFI support is rewritten here (overriden in LiveEFIImageCreator, based
on imgcreate.LiveImageCreator).

This all is still temporary solution, until Xen will have mutiboot2+EFI
support - then almost standard configuration could be used (almost the
same grub config as for legacy boot). So keep the changes here, and when
the proper solution would be implemented, pursue to having it upstream.

QubesOS/qubes-issues#794
2015-09-26 22:36:03 +02:00
Marek Marczykowski-Górecki
229da77d7e lorax: fix legacy mode boot after EFI initrd tinyfication 2015-09-25 16:25:47 +02:00
Marek Marczykowski-Górecki
4d7e45103d lorax: Add rescue entry to grub2-efi.cfg 2015-09-25 16:25:47 +02:00
Marek Marczykowski-Górecki
7cf4f825e5 lorax: Provide correct device information to xen.efi
xen.efi needs to call EFI services to access kernel and initramfs
images. For that it needs correct device handle. Grub set it to 'root'
device, regardless of which device was really used to load xen.efi.
2015-09-25 16:25:47 +02:00
Marek Marczykowski-Górecki
f29979be41 anaconda: use correct root= kernel parameter when creating EFI xen.cfg 2015-09-25 16:25:46 +02:00
Marek Marczykowski-Górecki
bdba0f99d0 anaconda: workaround efibootmgr bug (SIGABRT while removing entries) 2015-09-25 16:25:46 +02:00
Marek Marczykowski-Górecki
447ba8ab42 anaconda: fix dracut module to work with reduced dependencies
Do not fail because of not present url-lib. Also 'loop' module requires manual
loading now.
2015-09-25 16:25:46 +02:00
Marek Marczykowski-Górecki
4868764d81 lorax: drop plymouth label plugin
It's not used by installer theme but pulls a lot of libraries into initrd.
2015-09-25 16:25:46 +02:00
Marek Marczykowski-Górecki
4fa5c591f8 lorax: exclude SCSI and misc modules from UEFI initrd
One more time - save on efiboot.img size.
2015-09-25 16:25:43 +02:00
Marek Marczykowski-Górecki
7e867fd810 lorax: remove SecureBoot files - save some space in efiboot.img 2015-09-25 16:25:06 +02:00
Marek Marczykowski-Górecki
44dc8e0278 lorax: do not create macboot.img - it will be too big anyway 2015-09-25 16:25:05 +02:00
Marek Marczykowski-Górecki
b024e93e40 lorax: remove network support from UEFI initrd
Reduce its size to have efiboot.img under 32MB.
This needs rebuilding initrd and we need kernel version for that - so pass it
down from x86.tmpl.
2015-09-25 16:24:53 +02:00
Marek Marczykowski-Górecki
9a80875a5d
live: remove automatic swap discovery
We don't want to leave unencrypted memory dumps on some "random" disk
found in the system.
2015-09-25 15:31:12 +02:00
Marek Marczykowski-Górecki
c4b965ed88 lorax: select xen.cfg section to enable/disable media check
Apparently all but first parameters are passed to xen.efi, so it is possible to
select which config section should be used. This makes xen.efi copy
unnecessary.
2015-09-21 18:09:34 +02:00
Marek Marczykowski-Górecki
49b3630362 lorax: disable UEFI Secure Boot shim
We don't have signed xen/kernel/initramfs binaries. And more
importantly, we don't have MS-signed key...
2015-09-21 18:09:33 +02:00
Marek Marczykowski-Górecki
3df2363093
Merge remote-tracking branch 'qubesos/master' 2015-09-16 17:08:46 +02:00
Marek Marczykowski-Górecki
d08f0cf0a4 conf: drop debian-7 template from ISO image
Fixes qubesos/qubes-issues#1070
2015-09-16 16:53:16 +02:00
Marek Marczykowski-Górecki
d57c5e814a
live: place private.img of default VMs back on dm-snapshot device
Apparently those 350MB are critical on 4GB systems without a swap.
2015-08-09 20:43:06 +02:00
Marek Marczykowski-Górecki
012cad5b47
live: remove redundant livecd-creator --verbose flag
--debug already implies this. Actually only the last one is used.
2015-08-09 20:42:24 +02:00
Marek Marczykowski-Górecki
1408be322e
live: disable (currently broken) EFI 2015-08-09 14:05:15 +02:00
Marek Marczykowski-Górecki
f5673dbb49
liveusb: fix package name in build-deps 2015-08-07 02:27:42 +02:00
Marek Marczykowski-Górecki
67cda610e7
pungi: do not use isohybrid --offset as it isn't compatible with EFI 2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
b3d04825a2
anaconda: generate xen efi configuration 2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
ff30f25718
lorax: preliminary EFI support 2015-08-05 02:12:11 +02:00
Marek Marczykowski-Górecki
5796c78979
anaconda: disable os prober
It tries to mount every existing block device, including VM images.
2015-08-05 02:11:23 +02:00
Marek Marczykowski-Górecki
a0060ff53f
pungi: do not generate upgrade.img
We do not support in-place upgrades this way.
2015-08-05 02:11:11 +02:00
Marek Marczykowski-Górecki
ea884ac81d
liveusb: use more friendly output image name 2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
28fcfcc238
liveusb: overlayfs doesn't support sparse files, use tmpfs directly
This comes with some overhead, at least at the beginning, because all
private images are copied there at system startup (instead of first
use). This uses about 450MB of RAM.
Still better than non-sparse private.img (2GB...).
2015-08-04 20:57:11 +02:00
Marek Marczykowski-Górecki
2718c73c31
liveusb: include default appmenus based on default fedora-21 template 2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
823fecf988
liveusb: use offline-mode of qubes-set-updates 2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
ae670d0290
liveusb: mount /var/lib/qubes using overlayfs on tmpfs, instead of dm-snapshot
When dm-snapshot fills up, it is not recoverable situation. Also much
less flexible (for example deleting files does not free the space).
2015-08-04 05:23:56 +02:00
Marek Marczykowski-Górecki
d8e4080015
liveusb: reset list of PCI devices assigned to sys-net before assigning new ones
Just in case of installation with persistent configuration.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
f69016ec5c
conf/liveusb: disable updates check - senseless on non-persistent system 2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
0b3058b1b7
liveusb: use qvm-pci --offline-mode
It is called before libvirtd start.
2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
1c1d8ba478
conf/liveusb: create default dispvm template 2015-08-03 17:52:06 +02:00
Marek Marczykowski-Górecki
4bf5169ad9
Make liveusb build compatible with qubes-builder - use 'iso' target
This commit introduces two new settings (for builder.conf):
ISO_INSTALLER - build installer ISO; enabled by default
ISO_LIVEUSB - build Live ISO; disabled by default
2015-08-03 17:52:05 +02:00