Skip system-wide dracut config, specifically
/etc/dracut.conf.d/plymouth-missing-fonts.conf, which loads 'label'
plymouth plugin, which in turn pulls a lot of libraries (including
libX11).
QubesOS/qubes-issues#2412
In practice it's mostly about updating translations. But there are also
few differences in packages - for example optional fonts.
Also, remove "whiteout" section (as in upstream version).
And unconditionally allow boot encryption and the lvmlv format.
(The user still has to fight the installer to actually set it up.)
FixesQubesOS/qubes-issues#2553
Upstream kernel packages works too. But in any case, it isn't place to
choose it - if one want to have specific kernel version, need to
configure appropriate repositories (including 'exclude' option).
Wait with this to the end, to make sure that all keys will be imported
and also have all required tools (gpg, rpmkeys etc) in place. We can't
add them as dependencies, because qubes-release package needs to be
installed very early.
QubesOS/qubes-issues#2574
Updated dracut don't like not having /proc/modules - modules
installation routines fails then, producing initramfs without kernel
modules at all. Empty /proc/modules is enough to avoid this.
QubesOS/qubes-issues#2574
-----BEGIN PGP SIGNATURE-----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=igp8
-----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=Lu40
-----END PGP SIGNATURE-----
Merge tag 'jpo_g355e8d0'
Tag for commit 355e8d032e
# gpg: Signature made Thu 13 Oct 2016 08:16:43 AM CEST using RSA key ID E7E455013D042EA1
# gpg: Good signature from "Jean-Philippe Ouellet (Temporary Qubes OS signing key) <jpo@vt.edu>" [unknown]
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg: There is no indication that the signature belongs to the owner.
# Primary key fingerprint: E6B7 1EE7 0211 437B 12D4 A49B E7E4 5501 3D04 2EA1
Salt minion cache can be incomplete after initial installation. As it was
reported in #2213, just `qubesctl saltutil.sync_all` isn't enough to
refresh it in some cases - it may still lack of some files
(ext_module_qvm.py in this case). So, clear the cache completely before
initial configuration.
FixesQubesOS/qubes-issues#2213
