qubes-linux-utils/udev/udev-qubes-block.rules

# Expose all (except xen-frontend) block devices via Qubes DB

# Only block devices are interesting
SUBSYSTEM!="block", GOTO="qubes_block_end"

# Hide qubes-internal drives from udisks, so file selection dialogs
ENV{MAJOR}=="7", ENV{UDISKS_IGNORE}="1"
KERNEL=="xvda|xvdb|xvdc*|xvdd", ENV{UDISKS_IGNORE}="1"

# Skip xen-blkfront devices
ENV{MAJOR}=="202", GOTO="qubes_block_end"

# Skip device-mapper devices
KERNEL=="dm-*", ENV{DM_NAME}=="snapshot-*", GOTO="qubes_block_end"
KERNEL=="dm-*", ENV{DM_NAME}=="origin-*", GOTO="qubes_block_end"
KERNEL=="dm-*", ENV{DM_NAME}=="", GOTO="qubes_block_end"

ACTION=="add", RUN+="/usr/lib/qubes/udev-block-add-change"
ACTION=="change", RUN+="/usr/lib/qubes/udev-block-add-change"
ACTION=="remove", RUN+="/usr/lib/qubes/udev-block-remove"

LABEL="qubes_block_end"
Use Qubes DB instead of Xenstore 2013-06-07 03:21:41 +00:00			`# Expose all (except xen-frontend) block devices via Qubes DB`
Qrexec common code, qubes.Filecopy common code, udev scripts 2013-03-20 05:27:32 +00:00
			`# Only block devices are interesting`
			`SUBSYSTEM!="block", GOTO="qubes_block_end"`

udev: hide internal drives from file-selection dialogs 2014-02-04 03:38:57 +00:00			`# Hide qubes-internal drives from udisks, so file selection dialogs`
			`ENV{MAJOR}=="7", ENV{UDISKS_IGNORE}="1"`
			`KERNEL=="xvda\|xvdb\|xvdc*\|xvdd", ENV{UDISKS_IGNORE}="1"`

Qrexec common code, qubes.Filecopy common code, udev scripts 2013-03-20 05:27:32 +00:00			`# Skip xen-blkfront devices`
			`ENV{MAJOR}=="202", GOTO="qubes_block_end"`

			`# Skip device-mapper devices`
udev: do not assume static device-mapper major number It is not static. QubesOS/qubes-issues#1586 2016-01-06 03:22:50 +00:00			`KERNEL=="dm-", ENV{DM_NAME}=="snapshot-", GOTO="qubes_block_end"`
			`KERNEL=="dm-", ENV{DM_NAME}=="origin-", GOTO="qubes_block_end"`
			`KERNEL=="dm-*", ENV{DM_NAME}=="", GOTO="qubes_block_end"`
Qrexec common code, qubes.Filecopy common code, udev scripts 2013-03-20 05:27:32 +00:00
udev: major cleanup in block devices handling 1. Do not detach device forcefully when it's removed. This breaks libvirt (which thinks the device is still there). After this change, it is possible to detach device using libvirt, even if it was already removed physically from backend domain (unless it is dom0 - in which case it is still broken). So, this is partial fix for QubesOS/qubes-issues#1082. 2. Do not trigger "change" udev event when only QubesDB state needs to be updated - this leads to massive udev events queue, and heavy I/O usage - for example scanning all LVM many times. In some cases it even caused infinite event queue. 3. Do not use QUBES_EXPOSED udev property - it was needed a while back before QubesDB, because concurrent xenstore accesses are expensive (because of transactions). It isn't the problem on QubesDB. 4. Cache information about device-mapper, so it is possible to reconstruct it at device remove - when the actual device cannot be queried anymore. This is specifically about list of lower layer devices used. 5. Allow excluding loop devices pointing at a file in directory marked with ".qubes-exclude-block-devices" file. This is more generic than hardcoding /var/lib/qubes. QubesOS/qubes-issues#3084 Fixes QubesOS/qubes-issues#3073 QubesOS/qubes-issues#1082 2017-09-12 02:25:34 +00:00			`ACTION=="add", RUN+="/usr/lib/qubes/udev-block-add-change"`
			`ACTION=="change", RUN+="/usr/lib/qubes/udev-block-add-change"`
Move udev scripts to /usr/lib/qubes, move rules to /lib/udev/ Resolve udev-rule-in-etc, non-standard-dir-in-usr, file-in-unusual-dir lintian warnings. QubesOS/qubes-issues#1416 2015-11-26 21:18:03 +00:00			`ACTION=="remove", RUN+="/usr/lib/qubes/udev-block-remove"`
Qrexec common code, qubes.Filecopy common code, udev scripts 2013-03-20 05:27:32 +00:00
			`LABEL="qubes_block_end"`