* distro-metadata:
Allow qube (template) sending basic OS metadata

The nested virt adds significant overhead already, and audio for HVM
adds some too. After switch...

PipeWire version in debian-12 is too old for that, see
https://github.com/QubesOS/qubes-issues/i...

JSONDecoder.raw_decode() doesn't tolerate leading space, so strip it
off. It cames from indented...

With Pulseaudio in dom0, -d 0 used monitor stream, but with PipeWire it
isn't the case anymore. ...

pacmd does not work with PipeWire, but pactl does.

QubesOS/qubes-issues#8955

Save distribution, version and EOL date in features.

Fixes QubesOS/qubes-issues#8725

They are removed in Python 3.12.

asyncore is an external library now, install it, as pyinotify needs it.

debian-11-minimal isn't going to the there for much longer, and
furthermore, the debian-11-minim...

not full systemcheck run (which includes also check for updates, time
sync etc). This should dra...

QubesOS/qubes-issues#8491

GnuPG in F39 seems to use keyboxd and as a consequence, keyring choice
on import seems to be ign...

Allow updatevm checking updates signatures too.

* origin/pr/572:
Correct misleading check_with_* docstrings

fixes QubesOS/qubes-issues#8584

* origin/pr/571:
Fix error message for non-existing VM passed to a VMProperty

* origin/pr/570:
Fix error handling of non-positive/non-zero integers

* origin/pr/569:
Report an error message when the property value is invalid

Trying to set a VMProperty (netvm, template, ...) to a non-existing VM
previously raised a Qubes...

Add error message to QubesValueErrors raised by
qubes.property.sanitize(). Without this qvm-pref...

The property setter helpers for (non-zero) positive integer values
previously raised a ValueErro...

The previous format string used the repr() of the requested netvm. This
leads to a lengthy and h...

* origin/pr/566:
Improve docstrings for property.GetDefault

There may be some python warnings printed at the end (including
DeprecationWarning). Do not fail...

Taken from https://paste.opensuse.org/pastes/3523df06cbce (converted to
Unix line endings)

http...

* origin/pr/562:
Fix TypeError during reset of `provides_network`

- Use SIGINT instead of SIGTERM
- Check if parecord/pw-record ended early
- Give it a bit more t...

Check with longer sample (10s instead of 1s), and check also if recorded
sound length matches ex...

* ignore-extra-pci:
tests: check device on 1000 PCI domain
Ignore PCI devices on non-0000 do...

* qmemman-cleanup:
Reserve extra memory for Xen's metadata for future hotplug
tests: add bas...

When memory hotplug is used, Xen allocates metadata for the future
hotplugged memory at the VM s...

* devel20230828:
Do replace default policy on upgrade
Add forgotten admin.vm.volume.Clear se...

See https://github.com/QubesOS/qubes-issues/issues/6587.

Attempt to fix the rest of PCI device ...

QubesOS/qubes-issues#6932

This is a quick band-aid to unbreak Qubes on systems having such device.
Later change should imp...

At least some tests are prerequisite for touching balancing algorithm.

Always return a list.

There is no sense operating on fractional bytes here.
In practice, it should be rounded to whole...

This helps avoiding cyclic imports - some places (especially
qubes.vm.qubesvm) needs only some o...

If VM supports memory hotplug, start it with maxmem=memory and then use
memory hotplug to (poten...

QubesOS/qubes-issues#6354

Be consistent with QubesVM.run_service() and make the default user
normal local user, not root.
...

* origin/pr/556:
Add 'R' to qubes release in qubes-hcl-report

fixes QubesOS/qubes-issues#8507

They have comments at the beginning already, that user should not modify
them. Do update them wi...

* origin/pr/554:
Host support for high precision time

* origin/pr/552:
tests: extend pipewire support

This adds support for nanosecond precision in the host's qubes.GetDate.
Since Python only suppor...

libvirt since 6.8.0 supports setting permissive flag out of the box
(instead of via qubes local ...

Make _hvm audio tests working with pipewire too (unloading module isn't
implemented, but also - ...

PermissionDenied results in an unhelpful "Got empty response from
qubesd" error.

It used to be changed with a patch, but now we can configure the value
with unmodified kernel to...

Whonix 17 templates use full whonix-workstation name. Match them both by
whonix-w pattern.

Qube...

Whonix 17 templates use full whonix-gateway name. Match them both by
whonix-g pattern.

QubesOS/...

ip6tables is not installed in debian-12 anymore, so make the test working
with just nft.

QubesO...

iptables is not installed in debian-12 anymore, so make the test working
with just nft.

QubesOS...

* origin/pr/546:
tests: extend zenity bug workaround

https://forum.qubes-os.org/t/qubes-extremely-slow-due-to-numerous-qubes-getdate-tasks-created/19...

Depending on the version, alt+o may not work (but Return work). Try
both.

Fixes: 231f2b12 "test...

* origin/pr/536:
test: check blocking in-progress connections

* origin/pr/541:
Disallow creating qube named 'Domain-0'

* origin/pr/544:
storage/lvm: get actual size for snap_on_start volumes too

ThinVolume.size() always returned the nominal _size for snap_on_start
volumes, but the actual vo...

Workaround https://gitlab.gnome.org/GNOME/zenity/-/issues/59
(enter no longer accepting zenity -...

libxl refers to dom0 as 'Domain-0' and refuses to start a VM with that
name. Therefore, a qube ...

Include list of certified hardware.

It will be necessary for checking certified hardware.

Parse ":" as field separator, and then strip extra spaces (especially
the one directly after ":"...

* origin/pr/538:
tests: use correct template in devices_block tests

* origin/pr/537:
Enable changing netvm when old netvm is halted

* origin/pr/533:
Work around race condition in network tests

* origin/pr/535:
storage/reflink: implement usage_details(), handle absent pool

The test lacked setting init_default_template() call, so all the tests
were actually testing the...

The default user might not be named "user". Also massively cleanup the
script (tested locally o...

Do not try to detach device from a halted netvm.

fixes QubesOS/qubes-issues#6493

* origin/pr/528:
tests: convert network tests to use nft
tests: improve handling systemd-res...

Make only one statvfs() call to get consistent size and usage
information.

Also handle an absen...

Recently qrexec policy engine was separated from qrexec execution, which
changed the signature o...