We have been doing this filtering already, but some paths have likely
changed and the filter was no longer effective.
So add two new filter strings:
"_intf.storage.ksdata"
"_intf.data"
After adding these two I was no longer able to find the plaintext password
anywhere in the traceback after manually triggering a crash with:
kill -USR1 `cat /var/run/anaconda.pid`
Resolves: rhbz#1519895
(cherry picked from commit fa4d491f88)
Do not fallback to text mode, which cannot property install the system
without kickstart file (missing LUKS passphrase prompt).
FixesQubesOS/qubes-issues#2996
(cherry picked from commit 2d3405de9a)
And unconditionally allow boot encryption and the lvmlv format.
(The user still has to fight the installer to actually set it up.)
FixesQubesOS/qubes-issues#2553
(cherry picked from commit 62cb1ca1e6)
When building not for ISO_LIVEUSB, the sources are not downloaded.
Liveusb build is broken anyway, but the upstream mirror is gone.
(cherry picked from commit 7b424ec65f)
Salt minion cache can be incomplete after initial installation. As it was
reported in #2213, just `qubesctl saltutil.sync_all` isn't enough to
refresh it in some cases - it may still lack of some files
(ext_module_qvm.py in this case). So, clear the cache completely before
initial configuration.
FixesQubesOS/qubes-issues#2213
If depsolve failed with some (or all) addons selected it wasn't cleared
by deselecting all of them because the package and group set were never
cleared.
Add a check to skip this if the addons have not been changed (or never
set, as is the case with kickstart).
(cherry picked from commit 2ad90e9294517770372f82a14792379a49bec6a2 from
anaconda)
FixesQubesOS/qubes-issues#2105
Currently kernel-qubes-vm is pulled in by template rpms. Since dnf
automatically remove "unneeded" packages, it would also remove
kernel-qubes-vm with the last template rpm (which isn't necessary last
template in general). To prevent this, install kernel-qubes-vm
regardless of templates.
FixesQubesOS/qubes-issues#2107
It isn't necessary for desktop environment as is, only for system
initial configuration. For example it doesn't make sense to install them
when adding some DE later.
This code caused transient build failures when there is more than one
package that provides /etc/system-release _available_ in any of the
repositories, irrespective of _any_ dependecies whatsoever. The failure
is non-deterministic, because depends on the order of packages returned
by search query.
Automatic branding install is stupid anyway and should instead be done
by package groups, kickstarts and/or whatever. But it does not surprise
me at all, because this is package is maintained as part of Fedora/RH.
fixesQubesOS/qubes-issues#2076
