Now we can update template and non-template at the same time.

1. Convert qubes.ReceiveUpdates to 90-default-linux.policy
2. Move qubes.SyncAppMenus to 90-defa...

Fedora 37 switched rpmdb path to /usr/lib/sysimage/rpm. Get it
dynamically instead of hardcoding...

- udisks2 is used by fwupd, so allow enabling it
- enable rpm-{migrate,rebuild} services, to han...

Use current dir - it's after chroot() already. And then, if it fails
anyway, use default limit a...

It conflicts with usbguard package itself.

This exists:
google-noto-sans-mono-fonts-20201206^1.git0c78c8329-7.fc37.noarch.rpm

QubesOS/qube...

* origin/pr/113:
spec: add BR python3-setuptools

Grub2 in R4.2 is made to include grub.cfg from primary /boot partition,
even on EFI systems - so...

use wait_for_domain_shutdown to wait for domains to shut down
use shutdown(force=True) instead o...

* origin/pr/109:
Remove unnecessary ImageMagick build requirement

* origin/pr/110:
qubes-vm-update: just print progress
qubes-vm-update: plugins

https://github.com/QubesOS/qubes-issues/issues/5009

* xen-rc:
dom0-update: fix handling -rc xen version

* origin/pr/106:
Improve wording for failures of qubes-dom0-update

Do not refuse update of release candidate of Xen.

Make it clear that you can use --clean to just start over.

* origin/pr/105:
qubes-vm-update: unify log options in dom0 and in qube
qubes-vm-update: pro...

add class for handling return codes, stdout and stderr.

use only one inter-process queue

* origin/pr/104:
Update manpage for qvm-sync-appmenus

add python3-devel to rpm requirements
add docs
add hard_fail argument in refresh() (dnf)
move re...

How it works?
1. Parse args (should be run in parallel/sequential etc.)
2. Transfer `age...

* origin/pr/98:
.qubesbuilder: replace 'spec' by 'build'
Add Qubes Builder v2 integration

* origin/pr/101:
Add cpu-microcode-info

This is a small script to read the CPU model info and the loaded
microcode version in the format...

Fixes https://github.com/QubesOS/qubes-issues/issues/7561

* bochs-5.15:
dracut: adjust 'bochs-drm' module name

* unbreak-native:
dracut: avoid subprocess when reading /sys/hypervisor/type
dracut: do not ...

In Linux 5.15 it got renamed to 'bochs'. Adjust the dracut module to
include both - instmods wil...

Suggested by @DemiMarie

* origin/pr/95:
Drop Travis CI

When booting Linux directly, binding devices to xen-pciback will fail.
Do not fail the boot in t...

This may mess with exit code (critical for setting updates-available
flag), but also may be conf...

* origin/pr/93:
qubes-dom0-update: print message when updates are available
qubes-dom0-updat...

With UpdateVM output hidden by default, --check-only results in no
message at all (only exit cod...

When --check-only is used, skip installing updates phase.

Fixes QubesOS/qubes-issues#7417

The updatevm script does need this option too, for two reasons:
- to skip downloading updates i...

* origin/pr/89:
qubes-pciback: remove nonexisting initdir var
qubes-pciback: better error me...

Fixes QubesOS/qubes-issues/issues/7275

The old code incorrectly always attempted to start usbguard as
`usb_in_dom0=true` was always set...

Previously usbguard was started both by systemd and qubes-pciback.
This commit disables systemd ...

* origin/pr/84:
Allow viewing the UpdateVM output on success

* origin/pr/88:
usbguard: rip out rules.conf
usbguard: make logging work

* origin/pr/87:
Make qubes.repo.* services handle new template repos location

Only use the rules.d folder to specify rules.
Reasons:
a) rules.conf is maintained by upstream F...

Backport from usbguard 1.1.0.

USBGuard/usbguard/pull/462

QubesOS/qubes-issues/issues/7248

Template repositories are now defined in /etc/qubes/repo-templates -
handle this location too.

...

The way the dracut module is currently structured requires usbguard to
be installed, otherwise b...

Checking vendor of 00:02.0 device will fail usually on AMD system, which
is fine - the point of ...

rescue.target already pulls in sysinit.target. debug-shell.service is
started in parallel to oth...

Don't print systemctl (info) messages.

This allows manually exposing a USB device to dom0.

Part of QubesOS/qubes-issues#2116.

This adds USBguard to dom0, to provide a modicum of protection from USB
attacks on systems where...

This provides an option to prevent the UpdateVM's console window from
exiting until the user tak...

* origin/pr/83:
Disable repo_gpgcheck for dom0 cached repository
Fix GPG key for dom0 cached...

dom0 generates its own metadata, which obviously isn’t signed.