Commit Graph

1348 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
846bdd11f8 rpm: mark service files as configuration to not override user changes
(cherry picked from commit 447bb4cd9c)
2015-05-16 00:57:44 +02:00
Marek Marczykowski-Górecki
ead7405b94 appmenus: hide message about missing /usr/local/share/applications
Debian template doesn't have this directory by default.

(cherry picked from commit 6c288d0ac2)
2015-05-16 00:57:27 +02:00
Marek Marczykowski-Górecki
370529b24f Tag for commit faf20db7ac
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIcBAABAgAGBQJVQ0GkAAoJEBu5sftaTG2tlMUQAKTq+kKcnB3TG42jfVUU82lM
 5VV6u+uXhEnSJXfyP7iyJuiWixYjF8/0VuXMZAVUpZFpmkQouNZZMJBEAeE4u9Qc
 O07BQLyGUgnNydl4zD/SeHQUnfoC4JeQ1cKEdPQFtbERTFE5xs6+mpzaRtNTstgl
 f9DKNvSEJnYS5TK4OOTr2cR7xkawmhaC0bnRpO5edGvDaCkiJgOby6kqgd5U4IlU
 taDvvCSbtGtKhOBbicPbWf8U/o9iZcsBQ8unitX3gkUvD/fj7zcdz8L3Llis19Oe
 7GTJcyryrq9V0Uqtxj+HO07TXsv8C9YuaX40fX5MuiNdpxC4msPSau4K0Fi22003
 JPVhQuW58e45B23acMxCf/gAqEIYw0dyNbqVh8zBmjPHyqPo3yoldmjUpsk9ibn8
 uV6cwUtBE0d2qa5wcR6RpcGOMu8TnhFG2mHA+dSp1hPz6VYat+LC+yWn/O9A3nhh
 9TIJ5T48b140rO3MjktGCB6D8pj2lbCbDp89J+L+WNVTEbVoqywztVUd8T/d0NYj
 lx/2KeAjzehyYJlq8ZDAycgjiGS6x8WVLDhOltOl8UoU5c9Pzd3dWPKceRgE/ae8
 1xKwCrekansig9kGd1CqqqcPB/3lsO0RVkSW561hWOiC0iEhciYNj8/4KJpLfhVD
 JfhWlZkm7LiLioGRtpP7
 =lSMY
 -----END PGP SIGNATURE-----

Merge tag 'jm_faf20db7' into release2

Tag for commit faf20db7ac

# gpg: Signature made Fri 01 May 2015 11:04:36 AM CEST using RSA key ID 5A4C6DAD
# gpg: Good signature from "Jason Mehring (Qubes OS Signing Key) <nrgaway@gmail.com>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: E0E3 2283 FDCA C1A5 1007  8F27 1BB9 B1FB 5A4C 6DAD

* tag 'jm_faf20db7':
  debian: Allow apt-get post hook to fail gracefully (won't work in chroot)
  debian: Only notify dom0 on apt-get post hook; don't update package index
2015-05-10 04:22:27 +02:00
Jason Mehring
faf20db7ac
debian: Allow apt-get post hook to fail gracefully (won't work in chroot) 2015-05-01 05:04:17 -04:00
Jason Mehring
d39112fa8c
debian: Only notify dom0 on apt-get post hook; don't update package index
There is a possiblilty of the apt-get post hook getting triggered
more than once for each apt-get session, therefore we only notify
dom0 that there are no updates available and do not perform an
apt-get update.

The qubes-update-check.service will still perform an update so even
if the dist-upgrade failed and there was actually more files to update
the qubes-update-check.serivce would then at some point notify dom0
about those updates being available
2015-05-01 01:42:48 -04:00
Marek Marczykowski-Górecki
fc623f8586 version 2.1.61 2015-04-28 03:19:31 +02:00
Marek Marczykowski-Górecki
45ecc7a256 Tag for commit bbcfdd4c90
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIcBAABAgAGBQJVPJPkAAoJEBu5sftaTG2tTYcP/1fVgOL+VyvE3WLMn+8kql5q
 Nt4kLazCSUUQGKL3XIKf53RsQACbWPVPB+47Fzak9Jmr4ta8c4Q18ZfCdQ4mHUfJ
 r2z2VowmqEvqn2WYPfypqC4Z0sGUpRAVSpMN0lhEsSVtBHDwDanNAA2K2sSqLWfb
 591D38IiEzkFTMa/fv+4J9DBuPkByBWgHBjFwPGBPyiJl8yEls86yytiopzmGndM
 b3CeSUAphp17R1NLael8yTQYJG+NpwAvB17CYw7WTpzSE7601gxsN50nGI/okFt/
 guLLcJtx9jMTC/O2VpyBYNs7Hc9iPnL1DO+n3jdI8V30Lvs9RJJP+BEq6/OfjzpK
 mAo/x2pHjCPcwkOKoiXMpzoQk8C0aKii9cEElnmcOtzb/czhRinYjseu5pxFekAX
 oJRyQBkf12T0Kc06139vw9c4nyiiHb3lowOLoeoDnA2V1cD2kYFFnzilAXNhPLMW
 /H5o6ACqMWoxI+NcOBwyu79LZVWxhI5MPawRNlFPZlgrkUaewYWsz2oI1FruW/Y2
 Aai2UMgHZk0hNrzErNZ1kUg5cfnspD1lQ3haXDHZ+j/0EQJTDbvrR2+qOoC/lLMG
 ak/q9rOy8ThCuG5eGOyhrZCHvm0gxqx2YddIJmX/CE4tK8GzXABJrODZUPQe6Fz1
 EZLvVcI9YO5vd0aRtKrT
 =o9uA
 -----END PGP SIGNATURE-----

Merge tag 'jm_bbcfdd4c' into release2

Tag for commit bbcfdd4c90

# gpg: Signature made Sun Apr 26 09:29:40 2015 CEST using RSA key ID 5A4C6DAD
# gpg: Good signature from "Jason Mehring (Qubes OS Signing Key) <nrgaway@gmail.com>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: E0E3 2283 FDCA C1A5 1007  8F27 1BB9 B1FB 5A4C 6DAD

* tag 'jm_bbcfdd4c':
  debian: Update notification now notifies dom0 when an upgrade is completed
2015-04-28 03:07:12 +02:00
Jason Mehring
bbcfdd4c90
debian: Update notification now notifies dom0 when an upgrade is completed 2015-04-26 03:29:13 -04:00
Marek Marczykowski-Górecki
34fe857f9e version 2.1.60 2015-04-25 02:30:13 +02:00
Jason Mehring
482f003283 Changed location of PROTECTED_FILE_LIST to /etc/qubes/protected-files.d 2015-04-25 02:29:39 +02:00
Jason Mehring
24cfe20e1f whonix: Added protected-files file used to prevent scripts from modifying files that need to be protected
A file is created in /var/lib/qubes/protected-files.  Scripts can grep this file before modifying
known files to be protected and skip any modifications if the file path is within protected-files.

Usage Example:
    if ! grep -q "^/etc/hostname$" "${PROTECTED_FILE_LIST}" 2>/dev/null; then

Also cleaned up maintainer scripts removing unneeded systemd status functions and streamlined
the enable/disable systemd unit files functions
2015-04-25 02:29:38 +02:00
Marek Marczykowski-Górecki
24224496c1 network: restart updates proxy after network change to reload DNS address 2015-04-25 00:16:30 +02:00
Marek Marczykowski-Górecki
293ef14f90 upgrade: package for simplify upgrade from R2 to R3.0 2015-04-23 00:43:45 +02:00
Marek Marczykowski-Górecki
82eedd306e version 2.1.59 2015-04-16 15:55:55 +02:00
Marek Marczykowski-Górecki
d5a0e1985b systemd: disable avahi-daemon and dnf-makecache
Especially dnf-makecache is senseless as its state will not survive VM
restart, but it takes a lot of CPU time.

(cherry picked from commit 285071bd59)
2015-04-16 15:55:38 +02:00
Marek Marczykowski-Górecki
ab71ae9ae3 version 2.1.58 2015-04-16 03:40:01 +02:00
Marek Marczykowski-Górecki
592029ef83 Do not load xen-usbfront automatically
We no longer provide this module (it looks to be a dead project).
Instead in newer kernel USBIP can be used.

(cherry picked from commit 04b5bd1b0a)
2015-04-16 03:01:51 +02:00
Wojtek Porczyk
04fe5a524f sudoers: do not require TTY
This is required to run sudo from qubes-rpc.

(cherry picked from commit daf4a72f28)
2015-04-16 03:01:36 +02:00
Marek Marczykowski-Górecki
35b364dfac debian: fix handling SysV units in disableSystemdUnits
systemctl is-enabled always reports "disabled" for them (actually not a
real "disabled", but and error, but exit code is the same). So simply
always disable the unit, it is no-op for already disabled ones.
BTW systemctl preset also do not work for them.

(cherry picked from commit 52d502bce2)
2015-04-16 03:00:14 +02:00
Marek Marczykowski-Górecki
fc646bc71b debian: update NetworkManager configuration
Especially add unmanaged-devices, otherwise NM will break vif*
configuration.

(cherry picked from commit d41ae5bc7f)
2015-04-16 02:59:18 +02:00
Marek Marczykowski-Górecki
48715ef863 debian: install qubes-download-dom0-updates.sh
(cherry picked from commit ab38410f5c)

Conflicts:
	debian/control
2015-04-16 02:57:13 +02:00
Marek Marczykowski-Górecki
7f2683580d Fix resizing of /rw partition (private.img)
Offline resize requires to run fsck -f first. Because we support only
growing that image, we can simply use online resize instead.

This finally fixes qubesos/qubes-issues#772

(cherry picked from commit 65bc22fd1d)

Conflicts:
	vm-init.d/qubes-core
	vm-systemd/mount-home.sh
2015-04-16 02:56:19 +02:00
Matt McCutchen
f955dba590 Switch to preset file for systemd units to disable.
(cherry picked from commit 377e0b4cd4)
2015-04-16 02:54:41 +02:00
Matt McCutchen
a732008296 Make qvm-run bidirectional and document its limitations.
(cherry picked from commit b37d391f91)
2015-04-16 02:54:41 +02:00
Marek Marczykowski-Górecki
f2665db67b version 2.1.57 2015-04-04 18:57:40 +02:00
Marek Marczykowski-Górecki
1393f849d5 rpm: add missing BuildRequires: libX11-devel
misc/close-window.c requires it.

(cherry picked from commit 0f67930d0e)

Conflicts:
	rpm_spec/core-vm.spec
2015-04-04 18:47:23 +02:00
Marek Marczykowski-Górecki
de0b4b73f7 qrexec: move qrexec-client-vm to /usr/bin 2015-03-15 01:53:03 +01:00
Marek Marczykowski-Górecki
21cb5bc512 qrexec: add simple stdio handling in qrexec-client-vm without a child process
This way simple qrexec services like qubes.VMShell would be much easier
to implement - no need to do anything at client side.
2015-03-15 01:40:05 +01:00
Marek Marczykowski-Górecki
6160ae8230 qrexec: expand tabs, no functional change 2015-03-15 00:54:43 +01:00
Marek Marczykowski-Górecki
4a7928212b version 2.1.56 2015-03-05 03:40:08 +01:00
Jason Mehring
e549897f57 debian: Remove 'exit 0' in maintainer section scripts to all other debhelpers (if any) to also execute
(cherry picked from commit 328430d3bf)
2015-03-05 01:00:05 +01:00
Marek Marczykowski-Górecki
c304933fb7 dispvm: close only visible windows during DispVM preparation
Closing some invisible window can cause e.g. Firefox crash. Send the
message to visible windows and others should be cleaned up by the
application.

(cherry picked from commit 5c4e88a765)
2015-03-05 00:55:00 +01:00
Marek Marczykowski-Górecki
7d3797eb15 dispvm: kill all process after populating caches
Do not longer rely on killing X server.

(cherry picked from commit 8118037820)
2015-03-05 00:54:53 +01:00
Marek Marczykowski-Górecki
63e4b76169 fc21: fix DispVM preparation - Xorg has new name
(cherry picked from commit fdca69ae78)
2015-03-05 00:54:43 +01:00
Jason Mehring
5146fe6481 Removed code that deleted original nautilus actions
dpkg/rpm should handle this automatically on upgrading package

(cherry picked from commit da2b0cde16)
2015-03-05 00:54:37 +01:00
Jason Mehring
4c031ef786 Removed nautilus-actions depend and replaced with nautilus-python
nautilus-actions was orphaned in fc21, so all nautilus context menus have
been re-written as nautilus-python extensions

(cherry picked from commit 6836420c3c)

Conflicts:
	debian/control
2015-03-05 00:54:18 +01:00
Jason Mehring
8dcf61ba33 Switched qvm-move-to-vm.{gnome,kde} scripts to use bash not sh
Both these scripts contain `pipefail` which is a bash option and will
fail in dash

(cherry picked from commit 53fc7955f9)
2015-03-05 00:52:49 +01:00
Marek Marczykowski-Górecki
26a4d12990 Fix "backup: fix qubes.Restore service - do not send garbage as backup data"
(cherry picked from commit fda293f09a)
2015-03-05 00:52:43 +01:00
Marek Marczykowski-Górecki
0e7936006a backup: fix qubes.Restore service - do not send garbage as backup data
Do not send 'which' command output to stdout, as it will mess real
backup data.
This fixes regression introduced by this commit:
commit dad5bfbd18
Author: HW42 <hw42@ipsumj.de>
Date:   Thu Feb 5 03:14:41 2015 +0100

    remove 'bashisms' or explicit use bash

(cherry picked from commit b560596f1b)
2015-03-05 00:52:37 +01:00
Marek Marczykowski-Górecki
a04bcf602b updates-proxy: allow xz compressed metadata (fc21)
(cherry picked from commit b655d968c4)
2015-03-05 00:52:31 +01:00
Marek Marczykowski-Górecki
36d9330f36 network: fix handling newline in firewall rules
Since the rules are no more directly handed to echo -e, sed needs to
handle all escape sequences used in rules (newline only, but in
different notations).

(cherry picked from commit 4dbd9e205c)

Conflicts:
	network/qubes-firewall
2015-03-05 00:52:14 +01:00
Marek Marczykowski-Górecki
866344b28b version 2.1.55 2015-02-10 17:17:29 +01:00
Marek Marczykowski-Górecki
fcb0fdb6ab debian: change systemctl set-default back to manual symlink
systemd in wheezy is old enough to not have this option.
2015-02-10 17:15:37 +01:00
Marek Marczykowski-Górecki
13f7e49ff5 version 2.1.54 2015-02-10 14:57:57 +01:00
Marek Marczykowski-Górecki
ca2e837540 tag for commit 62a0b065ab
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJU0uQnAAoJEIwFIWzgnAk8/RkP/jpxwugpbPGSZwEl6X3P4D7D
 MI7kh6sMatIaqj/+vHok165OVtsxZsQZURvlZ5FSh9YFKPcly+ibnSEV5cUf0RxZ
 n0BytRVHV4ZLzP00uEnYpvsvc22qP4CzeUbbM1t8QA4BncNDkqTrMGDF8ZE6CueA
 DtMXRWCpMUxzIfDMOTYntG1ohet+evY1Ymy4acwfxb0XSzwCzewfe1sUZeIXd9oz
 Mez/ddeBmty37uJUJd233uCrH/lpG3Zpr+1aWziPpZtxm9IyICIDqG2cWG1+KDaa
 KBPFqOHtJ6xylCqARNfzkiPlvnuFP0Ojt8f9dUTK62JBzd4zOczXZlHLhfkVIEOp
 3d5oDNI9c6OTGunUTdz5Yvi2YQ4uKqu3dAGPRyYA4MjsVaRuFqfcMqGT/gJD9ffB
 7tybYAsvGT104cVQXQpiduLMw1Ki7wimzmeD2u4bq9L0mdG2zZ1aFZmIOdP7wf9c
 1ShPLIo5MayQ3qKMSjgi7pF/LMt5+RGUjeoaCPs+6T+dIM1XOkpsbMEwoOxiCTN5
 CssC97h0MFhFI30oluJuHRJMxAro+NTVc+CCVPMX16HKVHzlkwPRDx60mLmtlda8
 hjjoPZ46vlwcaUJPY7YrvKGzsS+LWvbx21FKNADzHz8ySbimqjAff9VUb3dZyC9k
 1upOvyF+jkD+zU+HRZwn
 =zO0z
 -----END PGP SIGNATURE-----

Merge tag 'hw42_62a0b065' into release2

tag for commit 62a0b065ab

# gpg: Signature made Thu Feb  5 04:31:51 2015 CET using RSA key ID E09C093C
# gpg: Good signature from "HW42 (Qubes Signing Key) <hw42-qubes@ipsumj.de>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: FC1A C023 76D0 4C68 341F  406F 8C05 216C E09C 093C
2015-02-05 05:13:18 +01:00
Marek Marczykowski-Górecki
e33722c3dd tag for commit de9b3b55a6
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJU0t3QAAoJEIwFIWzgnAk8vuwP/RahfA4Zxm4RA5sstvcodVOO
 nArqQOQ8G3oawttNDbRa4VZ0fSRXGYinGNH79Z5s26LFwu1NTWq7RoyDDc2N8CS8
 VLhAV+jUE2EmouTC0ZL4ytLOdQefstoO2c9YkOFHdeWvzlUxwsf05SoqaHGDIiaq
 k6BAv1/kcCMJfVXgj8z/5nwdefjju+O/91mF0H1cLzW2EdcH2chmll9gKFHlg4iA
 rUUROzHQPrwmqNGlZYBddB2Pr6HgVWACnpTjXs1rzY87JcGs/0iiUCOW6tKd2RuU
 JwRGQ9ITTdHB1YFjB644iG9TH9l8gf/K9ZgmNxT194oDSh26LuWtX7hYFY4geVxv
 CEJa2XiND9sevlHF5bBWEU/Q4ToOJd+d4HtrWODFMRX3eQKFdMLYDYsGPZLIeUEV
 0VO01lFuPgOp9PYemr52tnRMHxOJuAB1GA3s7SKxu9uJAK3/GMZpdDfcOBGVTksG
 X/jtfGAZmvPvionmuGLgVjjtOosEohh5gQwKmHxVRLckN9uE0ble2et4Ib7r54NS
 FmIfVr2f5FPGfCv9jAwAsyVzrVAf0VfQpzmnmAPG0o/WK6hsyovim2CLHs2E3sfS
 rQXzTf+SU8Jhpl7uDV9gqMtaeCkGtBGnlfTGP1YTGW4g0oqZvAQhf1tHQiiXnX7H
 7m0aBNPxkTH0V3p5Ttpm
 =EloY
 -----END PGP SIGNATURE-----

Merge tag 'hw42_de9b3b55' into release2

tag for commit de9b3b55a6

# gpg: Signature made Thu Feb  5 04:04:48 2015 CET using RSA key ID E09C093C
# gpg: Good signature from "HW42 (Qubes Signing Key) <hw42-qubes@ipsumj.de>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: FC1A C023 76D0 4C68 341F  406F 8C05 216C E09C 093C
2015-02-05 05:11:27 +01:00
HW42
62a0b065ab debian: preinst: cleanup user creation
Generate user-groups via -U instead of explicit via groupadd. This also
fix the problem that the tinyproxy group were not gererated as
"system"-group.

Also suppress unneeded output of the existence test.
2015-02-05 04:22:48 +01:00
Marek Marczykowski-Górecki
92b544fd9b tag for commit 413d6ffa0e
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJU0tR+AAoJEIwFIWzgnAk88SMQAKdutkGwOt9gYIcoZ95JsxCP
 h7Bj8ZU1t8oZUN7RXuQlqRD6iOL5/VThhCr7TCQcoZQzAUrjIBUkQ7uoTxGocdsO
 uBOlT8MCXQsd3K0n1loHtdmVGGuQSeLO/sg+l0BOhW0PPwEPoGCQOWWK3uyfnwnC
 pQTSryRQQaCzqJLrNdJk7HPZ7RT5K0vhggsTs9f0FfK557QQIFwr6cFyPmuV4611
 1cmDXVGUGMZOW+HTbty+jvcw6xGE64Mph2YC7HM6dxmPppOSnWmpGQu99LE3DY9e
 nM/roi7JOHmswTo7PBh5yZyKtuovUs1PLfTW+G0XoBO2wcCcnzncishdamv/E5uF
 NdbLYaY/5qIbxb7GERJoreRnYyLq1n5ksvSfAJgD2aXwkbXNlqjh9vcZGX5oxERf
 AmpkDYKJFMp63iSPZS1tQxVWET2mhqUAOyEF+E/+4fonYGi04J4leeVlEAX1jyIH
 fmhCPlzyJQTgMQi+elJISNi+2IevIyon10yZqGbZDX0OmCywEjub5UVdSnkyMUnd
 MyEHXjKi1/pOUbtbH7V9PJaz3K14fVfW3eDHnsz/va+KWUOKVgBuvIpO56Ni3/VL
 /8QTBQj5z5dkxvvSDGZaL3Odnsmx8pAPZazNZTlxhwOxlPCd49P3dnAt7OJpxJTR
 VSEc276o4piogx6Icg8S
 =XUGP
 -----END PGP SIGNATURE-----

Merge tag 'hw42_413d6ffa' into release2

tag for commit 413d6ffa0e

# gpg: Signature made Thu Feb  5 03:25:02 2015 CET using RSA key ID E09C093C
# gpg: Good signature from "HW42 (Qubes Signing Key) <hw42-qubes@ipsumj.de>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: FC1A C023 76D0 4C68 341F  406F 8C05 216C E09C 093C
2015-02-05 04:19:28 +01:00
HW42
de9b3b55a6 debian: prerm: remove obsolete code
this code has been obsoleted by commit 56607800, eb18af4c and 707be87a.
2015-02-05 04:03:49 +01:00
HW42
413d6ffa0e debian: preinst: don't force the default shell to bash 2015-02-05 03:15:36 +01:00