Commit Graph

863 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
eaaafe0d50
anaconda 23.19.10-5, lorax-templates-qubes 3.2.4, qubes-anaconda-addon 3.2.4, qubes-release 3.2-3 2018-09-17 15:02:47 +02:00
Marek Marczykowski-Górecki
683556b7fe
anaconda: fix kernel command line building on EFI
In this anconda (or rather blivet) version it is 'device.fstabSpec', not
'device.fstab_spec'.

Fixes 39699e6 "anaconda: use proper subvolume argument when booting from
btrfs (EFI)"
Fixes QubesOS/qubes-issues#1871
2018-09-16 14:57:41 +02:00
Marek Marczykowski-Górecki
6ffdf8a95a
lorax-templates-qubes: make initrd for EFI smaller
Skip system-wide dracut config, specifically
/etc/dracut.conf.d/plymouth-missing-fonts.conf, which loads 'label'
plymouth plugin, which in turn pulls a lot of libraries (including
libX11).

QubesOS/qubes-issues#2412

(cherry picked from commit f9bb3b2f33)
2018-09-16 03:42:47 +02:00
Marek Marczykowski-Górecki
688010eed8
lorax-templates-qubes: break the build if efiboot.img is too big
Break the build instead of producing broken boot image.

(cherry picked from commit 2f3063da20)
2018-09-16 03:42:47 +02:00
Marek Marczykowski-Górecki
4e74523491
anaconda: add smt=off xen option during installation
Defaults set during package installation do not apply, as booloader
configuration doesn't exist at that stage yet.

Reported by @rustybird
QubesOS/qubes-issues#4252

(cherry picked from commit 938578c2b2)
2018-09-11 05:29:37 +02:00
Marek Marczykowski-Górecki
c030eba49a
qubes-anaconda-addon: fix checking for versioned whonix templates
Use '*' in package name. This require using rpm -qa (instead of rpm -q).
In this case, checking exit code doesn't work, we need to check if any
package was actually listed.

(cherry picked from commit b0fa5381c1)
2018-09-11 05:28:52 +02:00
Marek Marczykowski-Górecki
715aaae11b
qubes-release: fix fedora repositories
Don't rely on legacy mirrorlist -> metalink automatic conversion.

Fixes QubesOS/qubes-issues#4090

(cherry picked from commit fa2ad03b0b)
2018-09-11 05:28:43 +02:00
Marek Marczykowski-Górecki
fa88c5d481
Update for Whonix 14 templates
(cherry picked from commit dc6f87461c)
2018-09-11 05:28:30 +02:00
Marek Marczykowski-Górecki
7466f77f8c
qubes-release: use metalinks for qubes repositories
This enables use of different mirrors. Specifify fastestmirror=1
explicitly for templates repository, as it has the biggest impact there.

QubesOS/qubes-issues#3935

(cherry picked from commit 217d223667)
2018-09-11 05:26:42 +02:00
Marek Marczykowski-Górecki
42b8e8449d
travis: use templates testing repositories
(cherry picked from commit 84717259ce)
2018-09-11 05:25:06 +02:00
Marek Marczykowski-Górecki
ea3f48422b
qubes-anaconda-addon, conf: update to Fedora 28 template
QubesOS/qubes-issues#4013

(cherry picked from commit 2c79b96c40)
2018-09-11 05:22:56 +02:00
Marek Marczykowski-Górecki
770c67cebb
qubes-release 3.2-2 2018-07-14 02:00:42 +02:00
Marek Marczykowski-Górecki
e22c41cdf7
qubes-release: schedule keys import after update
It isn't possible to import rpm signing keys during update, because
rpm itself holds a lock. Schedule the operation after update using
systemd-run.

Fixes QubesOS/qubes-issues#3756

(cherry picked from commit 7d5bb6ff81)
2018-07-14 01:07:01 +02:00
Marek Marczykowski-Górecki
30cdd9c34b
qubes-release: add template testing repositories
Have them disabled by default.

QubesOS/qubes-issues#3935

(cherry picked from commit 21eb21b07d)
2018-07-14 00:33:36 +02:00
Marek Marczykowski-Górecki
808d508e21
conf: fix repository url in travis-iso-full.ks
This fixes commit db9e2ae9ec
2018-05-28 23:40:18 +02:00
Marek Marczykowski-Górecki
f09f2c9e93
qubes-release: switch qubes-dom0 repositories to https
This is needed for more reliable updates over tor, and also gives some
more privacy.

Fixes QubesOS/qubes-issues#3737

(cherry picked from commit 512af4bf76)
2018-05-23 23:53:55 +02:00
Marek Marczykowski-Górecki
9756fb6904
anaconda: avoid adding duplicated kernel entries
List kernel versions without duplicates, even when there are multiple
files related to the same kernel version.
Duplicated kernel versions here caused regenerating initramfs multiple
times and duplicated entries in xen.cfg.

QubesOS/qubes-issues#3624

(cherry picked from commit 7c67b93468)
2018-05-23 23:53:36 +02:00
Marek Marczykowski-Górecki
2a1a2a2830
Add ucode=scan to default Xen command line
Try to update microcode as early as possible if provided.
This option will scan all multiboot modules besides dom0 kernel. In our
case this is perfect - there is only one other module and it is
initramfs which have microcode early cpio prepended.

QubesOS/qubes-issues#3703

(cherry picked from commit f452cca502)
2018-05-23 23:53:24 +02:00
Marek Marczykowski-Górecki
39699e6a35
anaconda: use proper subvolume argument when booting from btrfs (EFI)
Kernel command line in legacy mode is constructed by grub scripts and
properly handle btrfs subvolumes. For EFI, it is built directly by
anaconda and 'rootflags=subvol=...' argument need to be added manually.

Fixes QubesOS/qubes-issues#1871

(cherry picked from commit fbc011f01c)
2018-05-23 23:52:08 +02:00
Marek Marczykowski-Górecki
544e4db337
travis: disable unit tests during full ISO build
Save some time - especially those in pykickstart are time consuming. And
we need to fit in 50min available on Travis-CI - currently the build is
very close to that limit (most times on the wrong side of it).

(cherry picked from commit e93f5fe216)
2018-05-23 23:50:34 +02:00
Marek Marczykowski-Górecki
ad63e91a55
travis: switch to ukfast mirror
(cherry picked from commit 8c28205eba)
2018-05-23 23:49:44 +02:00
Marek Marczykowski-Górecki
50f525338d
travis: ignore groups from online repositories
Use only those from locally generated one, to guarantee usage up to date
comps.xml

(cherry picked from commit e810ec8bb0)
2018-05-23 23:48:43 +02:00
Marek Marczykowski-Górecki
936625f225
travis: build full ISO, including templates
Such ISO could be used for further tests, in contrary to the previous
one which had no templates.

(cherry picked from commit 3d54b98be9)
2018-05-23 23:47:34 +02:00
Marek Marczykowski-Górecki
db9e2ae9ec
Add config with templates repositories included
This allows performing full ISO build without building any component
locally.

(cherry picked from commit e63d2d179f)
2018-05-23 23:46:06 +02:00
Marek Marczykowski-Górecki
dfcecc611a
Update kernel parameters for i915.preliminary_hw_support -> i915.alpha_support
This option has been renamed in kernel 4.10.

(cherry picked from commit ad42bdc95b)
2018-05-23 23:43:56 +02:00
Eric Duncan
b24c9e383e
Fix macOS EFI Installation
Typical GRUB2 installations would execute the script
located at /usr/libexec/mactel-boot-setup which would
modify the HFS+ ESP files and bless the specified efi.
However, we are not using GRUB at this time which would
cause that script to exit earlier.

These changes will execute the relevant commands
to symlink the efi file in the /System directory as well
the cfg file.  Lastly, macOS requires the bootable efi
file to be blessed.

We also attempt to place some user-friendly icons
for Qubes to show to the user.

Lastly, we add a README with some instructions on how
to get into rescue mode from macOS.

(cherry picked from commit 1c57cfd615)
2018-05-23 23:38:20 +02:00
Marek Marczykowski-Górecki
2f9d47ed67
anaconda: really set default paritioning layout
setDefaultPartitioning is called when executing kickstart "autopart"
command - which is the case if one choose to not change disk
partitioning. But in manual partitioning there is also an option to
start with automatic layout and in that case setDefaultPartitioning
isn't called at all. Which results in failed partitioning (missing '/'
and bootable partition).

Similar thing is already fixed in master commit
378cfc44dd.

QubesOS/qubes-issues#2294
Fixes QubesOS/qubes-issues#3334
2018-03-27 03:43:42 +02:00
Martin Kolman
e3e3f18184
Remove in-memory kickstart representation from traceback file (#1519895)
We have been doing this filtering already, but some paths have likely
changed and the filter was no longer effective.

So add two new filter strings:
"_intf.storage.ksdata"
"_intf.data"

After adding these two I was no longer able to find the plaintext password
anywhere in the traceback after manually triggering a crash with:

kill -USR1 `cat /var/run/anaconda.pid`

Resolves: rhbz#1519895
(cherry picked from commit fa4d491f88)
2018-01-15 16:16:58 +01:00
Marek Marczykowski-Górecki
676ef266d8
anaconda: make sure the latest version is placed as xen.efi
os.listdir returns files in filesystem order, not sorted.

QubesOS/qubes-issues#2990

(cherry picked from commit c834daa176)
2018-01-15 16:16:58 +01:00
Freddie Rice
12466386d7
xen.efi upgraded during each install
(cherry picked from commit e3a4a46958)
2018-01-15 16:16:58 +01:00
Marek Marczykowski-Górecki
408590f0d4
anaconda: abort installation on X startup fail
Do not fallback to text mode, which cannot property install the system
without kickstart file (missing LUKS passphrase prompt).

Fixes QubesOS/qubes-issues#2996

(cherry picked from commit 2d3405de9a)
2018-01-15 16:16:57 +01:00
Marek Marczykowski-Górecki
7bbc01a7f2
comps: add description to groups
(cherry picked from commit aa9ea0f301)
(fixed tag syntax, updated debian version name)
2018-01-15 16:15:54 +01:00
Marek Marczykowski-Górecki
716636d622
qubes-anaconda-addon: enable USB VM by default and drop 'experimental'
Fixes QubesOS/qubes-issues#2665

(cherry picked from commit 4f8e2227e5)
2018-01-15 16:15:03 +01:00
Marek Marczykowski-Górecki
58e275a0c3
pykickstart: remove unused patches
(cherry picked from commit 6d2960e25a)
2018-01-15 16:15:02 +01:00
Rusty Bird
9c7837a6ec
Remove coreboot detection, add skip_grub parameter
And unconditionally allow boot encryption and the lvmlv format.
(The user still has to fight the installer to actually set it up.)

Fixes QubesOS/qubes-issues#2553

(cherry picked from commit 62cb1ca1e6)
2018-01-15 16:15:02 +01:00
Marek Marczykowski-Górecki
c24a62adb6
makefile: keep whole 'work' directory
Don't remove most of it - it's useful for diagnostics - for example
'logs' subdir.

(cherry picked from commit 16b7346023)
2018-01-15 16:15:02 +01:00
Marek Marczykowski-Górecki
6f14d9ec28
Remove obsolete 'keys' dir
(cherry picked from commit 93b0a69ba4)
2018-01-15 16:15:01 +01:00
awokd
a1cda1d705
Build 3.2.1 2017-12-24 00:04:18 -07:00
Wojtek Porczyk
f91d96a3f4
Makefile: download live-only sources just for ISO_LIVEUSB
When building not for ISO_LIVEUSB, the sources are not downloaded.
Liveusb build is broken anyway, but the upstream mirror is gone.

(cherry picked from commit 7b424ec65f)
2017-03-07 02:01:22 +01:00
Rusty Bird
1c9bf859b7
Add missing cvs dependency
(cherry picked from commit 63606ac179)
2017-03-07 02:01:22 +01:00
Jean-Philippe Ouellet
753d2cdd8d
Make prompt reflect actual VMs to be created
(cherry picked from commit 3747bca7ba)
2017-03-07 02:01:22 +01:00
Jean-Philippe Ouellet
9b4695f6c9
comps: install xorg-x11-drv-libinput by default
Libinput has superior input handling than default synaptics drivers.

Fixes https://github.com/QubesOS/qubes-issues/issues/2375

(cherry picked from commit 355e8d032e)
2017-03-07 02:01:21 +01:00
Marek Marczykowski-Górecki
2d273eb439
Merge remote-tracking branch 'qubesos/pr/7'
* qubesos/pr/7:
  live: fix kickstart file path
2016-09-22 11:07:36 +02:00
HW42
bf64e801ec live: fix kickstart file path 2016-09-22 05:41:34 +02:00
Marek Marczykowski-Górecki
4d1a471402
comps: install xfce4-pulseaudio-plugin instead of xfce4-volumed and mixer
xfce4-volumed is no longer maintained, so switch to pulseaudio plugin.

Fixes QubesOS/qubes-issues#2321
Fixes QubesOS/qubes-issues#2291
2016-09-16 00:03:25 +02:00
Marek Marczykowski-Górecki
6db292e3a0
Merge remote-tracking branch 'qubesos/pr/6'
* qubesos/pr/6:
  Fix crashing build
2016-09-03 20:16:24 +02:00
Marek Marczykowski-Górecki
e4cf87c537
anaconda: drop removed files from po/POTFILES.in
Fixes QubesOS/qubes-issues#2288
2016-09-02 19:18:13 +02:00
Bahtiar `kalkin-` Gadimov
1fc941eecf
Fix crashing build 2016-09-02 17:37:39 +02:00
Marek Marczykowski-Górecki
121e31cf70
qubes-anaconda-addon 3.2.3 2016-08-08 00:35:46 +02:00
Marek Marczykowski-Górecki
2a0a180be9
qubes-anaconda-addon: clear salt minion cache before running configuration
Salt minion cache can be incomplete after initial installation. As it was
reported in #2213, just `qubesctl saltutil.sync_all` isn't enough to
refresh it in some cases - it may still lack of some files
(ext_module_qvm.py in this case). So, clear the cache completely before
initial configuration.

Fixes QubesOS/qubes-issues#2213
2016-08-05 11:23:56 +02:00