github.com/QubesOS/qubes-core-admin commits | Ecosyste.ms: OpenCollective

tools/qubesd-query: add option to report failure with exit code

43fd1d76e8536ceebcc45354f3bd97693a451126 authored over 7 years ago

api/internal: add methods for handling host suspend

05ba73bb3aa864a2d4e0a2943a61fde8160950fa authored over 7 years ago

vm: restore code for suspending domains with PCI devices

f80fddf7ae9e4a849bd74c9be59157ced8712b6e authored over 7 years ago

templatevm: set default netvm to None for templates

Since we have qrexec-based updates proxy, we can even stronger isolate
templates from outside th...

d5cd58df51b5288e4cfd37e8a2be8ce928dec41f authored over 7 years ago

vm: make vm.hvm=True by default

QubesOS/qubes-issues#2185

1ed0b14d934e1f05fbf6178e16108f9358ad33ef authored over 7 years ago

vm: change kernel=None to kernel=''

vm.kernel property have type 'str'. Putting None there makes a lot of
troubles: it gets encoded ...

4c4f903fe3ee128b9e9a144e4221b6bf2a5a367e authored over 7 years ago

vm: remove prepare_dvm parameter from methods and events

It was related to DispVM savefile preparation, but it is no longer
applicable in Qubes 4.0

5d3204c730ef40d0970658aa90f12fa53696be46 authored over 7 years ago

vm: avoid starting the same VM multiple times simultaneously

While libvirt handle locking itself, there is also Qubes-specific
startup part. Especially start...

018877a19c36968b260e18e9a4224e2ebac5276e authored over 7 years ago

storage: remove DomainPool

Replaced by BlockDevice extension

b5a4573290670d1939ed4b88d65c4cbd5a96f077 authored over 7 years ago

systemd: use appropriate meminfo-writer service for dom0

0816f002ba6f0aeda2cb5ac59c84b0bdef048bf8 authored over 7 years ago

api/internal: make GetSystemInfo not crash on not set default DispVM

b08574acf30bdff1a4568114d82703c3527e1167 authored over 7 years ago

qubesd-query-fast: fix compile warnings, enable -Werror

866d908b6d4dcb6ad57d3bb0497f7f7d831d9628 authored over 7 years ago

ext: BlockDevices extension

Handle block devices exposed by VMs

9bb5054e5066089d76529c798ec69d6fa5b0c899 authored over 7 years ago

systemd: fix [email protected] - qvm-start no longer have --no-guid arg

79a8d9c58f7b9c2cb192f51fbec3107f5c6d15ae authored over 7 years ago

devices : make DeviceInfo sortable

257c8c0821f3ca2f64f643ed97ad25cb906c2b26 authored over 7 years ago

rpm: depend on linux-stubdom package

Install both stubdom implementations: mini-os one (xen-hvm) and linux
one (xen-hvm-stubdom-linux...

1f86c9253ccf83ea9286c027e20c2bf6c7a0d85e authored over 7 years ago

Cleanup qubes-block-cleaner from one more place

ae66d29aff03b9b0b358b665009311af2b399970 authored over 7 years ago

rpm: don't set default-kernel at installation time

qubesd isn't running at this stage yet.

05f70b8397b60e8f963da7ae7492058b4ab5009a authored over 7 years ago

version 4.0.0

882abf2fb5667083e2207037319be6287ada9f71 authored over 7 years ago

Merge remote-tracking branch 'qubesos/pr/108'

* qubesos/pr/108:
last fixes (thanks, @marmarek!)
ci/pylintrc: disable wrong-import-order
...

0e073bf17e1e5826bed8d9743e057c7839eb91d8 authored over 7 years ago

last fixes (thanks, @marmarek!)

d9f5192cc21810297466ecd336bda699053c15c4 authored over 7 years ago

travis: flag codecov.io uploads with 'unittests' flag

We may later upload also integrations tests coverage, ease
distinguishing those two.

f02f28f6d993a33d3e14a3ef20a581e16e3a4764 authored over 7 years ago

ci/pylintrc: disable wrong-import-order

This one has false positives across different Python versions and is not
that useful anyway.

dc14b839c6a8c5efb111e5571c31aa040b0917e0 authored over 7 years ago

Fixes from marmarek's review

dc793be81fe1233f656341a0adfe1670e0213380 authored over 7 years ago

qubes/tests: fix qrexec policy context

Now it removes policy file if it was created while entering the context.

cb3c9a82b30be56eab88c391f8e0471649527a97 authored over 7 years ago

qubespolicy: fix import order

00a81b75a31dbd31a44faac053fd9d9cecd19d5e authored over 7 years ago

travis: enable sending coverage data to codecov.io

8dd4258d432765b3ec3abd8f926e0ffe62e912bc authored over 7 years ago

Make pylint very ♥

bbe757d0a7baaba909bae94e72506b23f12b7c76 authored over 7 years ago

qubes.tests asyncio, part 2

QubesOS/qubes-issues#2622

42cbd9ff689b5f7bb53da5ee58c7eff07bd3fbf9 authored over 7 years ago

Fix miscellaneous warnings

Among them:
- explicitly close files (possibly using with: syntax)
- use non-deprecated methods

df03800278984bc7b415425b4480ff913e48be4e authored over 7 years ago

qubes/vm/qubesvm: don't use .run_service() for .run()

QubesOS/qubes-issues#2622

b212a75ba3e8d7b7d383a20d7a2f7bb394adb601 authored over 7 years ago

qubes.tests asyncio

QubesOS/qubes-issues#2622

b256af3bfbc9e4ab1c29b03435ee9436e2a25cc0 authored over 7 years ago

qubes/ext/gui: remove is-fully-usable and is_guid_running

a9755ed76a8776f10a880f11e8b3365c32c0e479 authored over 7 years ago

qubes-rpc/admin.vm.volume.Import: fix dd flags

QubesOS/qubes-issues#2622

0fdcbfc237bdcf27a39634305bac05ad1b09fa81 authored over 7 years ago

doc/manpages: fix qubes-create.1

The --property option went out in
83eef56f9dcf8115189a0e0d331d234f12ad1491.

345c16aa47cf1361ee326a5cc9ed0b3813085284 authored over 7 years ago

storage: don't fail on import if lvm is not installed

7f3dd8b3d7d7b180d0a0ea218e7538d4640127cd authored over 7 years ago

vm: expose to VM only features with 'service/' prefix

And place them in /qubes-service/ QubesDB directory. This allows
extensions to easily store some...

e54cc11a2ca0e602cde4e404c131cb272c5acb64 authored over 7 years ago

Add default policy for qubes.UpdatesProxy service

QubesOS/qubes-issues#1854

2c01504a50020f82925e7c18a9c53d8967d7acea authored over 7 years ago

rpm: drop dependency on now obsolete qubes-core-dom0-doc package

6297919a72884466e96a2e5cd698ba83035af8f9 authored over 7 years ago

admin-api: fix handling admin.vm.property.Set with None VM value

Setting VMProperty to None VM should be encoded as '' value (according
to VMProperty._none_value...

607dcbaf37c5a39a8cb28422c7855f6f6c93a4f7 authored over 7 years ago

make 'mgmt-permission:' event compatible with check-events script

It doesn't support str.format().

d42197e94c90c2a49107e6e7af9efbe34a66c5cd authored over 7 years ago

Move qvm-template-postprocess tool to core-admin-client

Since implementing admin.vm.volume.Import, this migrated to Admin API.

305fb5b6d00a061d4ae7895c68c48a4f3b96719f authored over 7 years ago

Update contrib/check-events for python 3

afdfbe4eed3f5e0aa6ab58d858a44309252fc2d5 authored over 7 years ago

tests: basic tests for admin.vm.volume.Import

3177fc504ff57e17d8408ba397596d303b6b6a06 authored over 7 years ago

storage: minor error handling fix

d7af67d87506412b0b9b24dcc4c4bb7bd9de49ce authored over 7 years ago

tests: improve qubes_basdir_patching

File storage pool use qubes.config.qubes_base_dir, not
qubes.config.system_path, so patch that too.

6c29c653a0bd58a69f5233ebe321f31527025af4 authored over 7 years ago

admin: implement admin.vm.volume.Import

Implement this in two parts:
1. Permissions checks, getting a path from appropriate storage pool...

3cacf290bb72c19f91cde0883b3a80f1c4e9eb7d authored over 7 years ago

storage: add Pool.import_data to the API

Allow importing not only from another volume, but also raw data. In
practice, for all currently ...

46b60dbf42cb9f04a5c00e4d466ff5a4cc7d32b3 authored over 7 years ago

typo fix

1692601fcd1f582be0a665eeeadeee77cbcb8f99 authored over 7 years ago

qubesd: reduce verbosity

Remove debug prints, log full traceback (of handled exception) only when
debug mode enabled (--d...

74689dd9981f3df61332e84564bda3f06f4e1add authored over 7 years ago

admin: raise QubesNoSuchPropertyError for non-existing properties

Accessing non-existing property is a common action (for example
hasattr() do try to access the p...

64b83fa95a85ba4902f8dbd396989add46d37980 authored over 7 years ago

admin-api: create and install actual Admin API RPC endpoints

Install files in /etc/qubes-rpc for all methods defined in API
documentation, even if not yet im...

f42cd28901d0caaaf8171544ae12172014ed94d1 authored over 7 years ago

devices: adjust XML serialization of device options

Use '<option name="option_name">option_value</option>' instead of
'<options option_name="option_...

f93583e2bea54a7206097284edbf83be6a64be69 authored over 7 years ago

pci: adjust PCIDeviceExtension device identifier syntax

':' is not allowed in device identifier, replace it with '_'.

Warning: this breaks existing qub...

6bc44b43de714d4eace592a7cbf96eca930ec05e authored over 7 years ago

vm: don't try to define libvirt domain when just checking its state

When libvirt domain is not defined, it isn't running for sure.
This commit fixes the case when v...

29f3c9b58fdb7ebd0a32e8509df8c0cd6e72aed1 authored over 7 years ago

vm: fix autostart-related events handling

event signature contains 'name', not 'prop' (it's no longer positional
argument).

dde90859206371bbc1f8be056aa7ed4ec4c6f33a authored over 7 years ago

pci: use device attach options for disabling strict reset

Since we have now per-device options, it's more logical to use it here,
instead of features with...

402afa19258ae520573703da786acea2180ce2ac authored over 7 years ago

Devices-related formating fixes

QubesOS/qubes-issues#

fe37e0933e601a0dd5d7018a921b8af70fc3876f authored over 7 years ago

devices: add assignment.device property

Make it easy to retrieve DeviceInfo object out of DeviceAssignment
object. The only missing piec...

d0b89333744f10a87678a47b89901e5461dd387a authored over 7 years ago

pci: fix device-pre-attach event signature

Now it contains also options. PCI extension do not use it, yet.

227010d433a0e22e697d946e72cc91aeb405a171 authored over 7 years ago

admin: add admin.vm.Remove method

QubesOS/qubes-issues#2622

f7cb8f27c5f3ef7fa2a55bea9f6b514dac855a77 authored over 7 years ago

property: add property.__str__

f9fa27dacceb45b9cd1b00fd14f72ea05d9ea1f7 authored over 7 years ago

systemd: prevent killing VM-daemons on service restart/stop

Kill only main qubesd process, not all the control group (which include
all qrexec-daemon and qu...

880c19058798906a6bd27cb6205c0465970f0b73 authored over 7 years ago

qmemman: fix list/filter handling on python3

Filter in python3 returns a generator, can be iterated only once.
This is about list of existing...

0ef010cc704d5bab5526797d86fd0bbd4f89e294 authored over 7 years ago

qubespolicy: improve logging

Include actual target to which service was allowed (either overriden by
policy, or chosen by use...

58e58e0ca76c7f1632b16f098c7196d95757ca30 authored over 7 years ago

api/internal: don't try to start dom0

qrexec-policy do try to start a VM before executing service. Avoid this
here, instead of qrexec-...

1831088c9b6bac5845c29baaba94a9421b9b39a0 authored over 7 years ago

rpm: cleanup scripts, use %systemd_* macros to handle services

4c7dafe85e2b64c7c2b6a6867bf5c93cf75c2291 authored over 7 years ago

qubesd: make sure NOTIFY_SOCKET variable is not propagated

qubesd do start other daemons - make sure they will not try to signal
systemd about it. In some ...

4d6d6c913aa99fea6e706127ebf2d236e8774a24 authored over 7 years ago

tests: very basic tests for LinuxKernel pool

dc2563271c7ff3fe3c3c7b64c518f3985467ced2 authored over 7 years ago

vm/net: fix IP address calculation

7 is not the same as 7 bits...

e5daf902b3e159e242d57b3e5a328296e85ec9ba authored over 7 years ago

vm: make sure qmemman connection is closed even on failed VM startup

Qmemman hold global lock while serving requests, so not closing
connection will prevent any furt...

ae28d32af7c8e45a32cd4c217b9c0d1a14519645 authored over 7 years ago

admin.vm.Start: report libvirt errors to caller

Convert them to QubesException for that.

d57aef96e5f1f854376da003bc5163df3ac814b1 authored over 7 years ago

storage: make LinuxKernel pool track vm kernel version

Do not initialize it only at qubes.xml load time, but re-read vm.kernel
property each time the p...

0b64e3fbe031b87bea04516636b66bd08b71c561 authored over 7 years ago

storage: make verify() asyncio aware

595d983659200e0ea75c5f9370a3d39c92174508 authored over 7 years ago

Remove block-cleaner-daemon

This service currently does more harm (desync libvirt state with
reality) than good. Since we ha...

207d497bfeb5974eb71848eb9fc9fe636cae0d51 authored over 7 years ago

devices: pass attach options to device handling extension

Otherwise options would be ignored...

2c0d79af4a90336e3d4f84e87129372f1e157cf0 authored almost 8 years ago

devices: list persistent devices also when not currently attached

When device extension do not return some "persistent" device as
currently attached, still return...

661752bbc136103a88651e34bf7a0c010c9d1c53 authored almost 8 years ago

tests: admin.vm.devices.* Admin API

QubesOS/qubes-issues#2622

774f4c8d492499d4c35c8476b8a0521c38135bb8 authored almost 8 years ago

admin: admin.vm.device.* methods

QubesOS/qubes-issues#2622

75ac611c90562052667b8aec4373f8b8d500d597 authored almost 8 years ago

devices: add clone method

Copy DeviceAssignment object

8533ec97730a2b242be1d2cda16fe2204d902325 authored almost 8 years ago

tests: minor formatting

e598735c3b06680e74f3f5ff00bf1da4bbd8ea4e authored almost 8 years ago

admin: fix handling default template in admin.vm.Create.* methods

0160d6e2f00ff5e198bb4b77af4d54c005a199e9 authored almost 8 years ago

admin: add methods for global properties

QubesOS/qubes-issues#2622

68a426f0ba631c6347444fef42cd71ce104c093f authored almost 8 years ago

firewall: add clone and comparing methods, missing docstrings

b4ad5f014983294dd05b76a0eaa1a44215a31835 authored almost 8 years ago

tests: more for admin.Events method

fcfb2e004a59652f4b09375602f0e860afdd3af8 authored almost 8 years ago

admin: add missing parts to admin.vm.Clone

Clone all the things.

f3c7fb812940c63f53be615f50dac2966e13a4ab authored almost 8 years ago

vm: Features fixes

clear: dict should not be mutated during interation.

680dbf432c9eb0ae899dc86fc3b0909f7a323920 authored almost 8 years ago

vm: implement tag manager to fire events on change

While at it, adjust implementation to specification: tags don't have
value, only one bit of info...

ba86d6da794f00935ac5f47c8366964dd5981d5a authored almost 8 years ago

tests: Tags() and Features()

8de82f390eea9c9491e743f86ef2740d655eec8e authored almost 8 years ago

vm: stubdom_xid: use canonical method for checking VM state

Don't depend on xid==-1 for not running VM.
This breaks some tests, as xid can be a mock object ...

3c7d2289ce1730b15b73bee5202d7a289ac60068 authored almost 8 years ago

Enable linux-stubdom by default

Also, make it possible to set default on a template for its VMs.

QubesOS/qubes-issues#2185

d4353c2a306e7fd75e3af0da3099925d0a5a79a1 authored almost 8 years ago

add support for linux stubdoms

(cherry picked from commit e14ac1500a05162b3c07a5f44b4f0223f43fe90c)

f7094bec4f95749f66a0bd9de322edbc3792f16a authored almost 8 years ago

Merge branch 'core3-devel'

This concludes over two years of rewriting Qubes' core.
Thank God it's now merged to master. --@...

eaf5c27b277ae3ccadca984569ef884ffadf0a71 authored almost 8 years ago

doc: remove documentation for removed metaclass

72b29e8fe139b0f7e58fde91d4c3ddece3238fe6 authored almost 8 years ago

Rename MgmtAPI to AdminAPI - part 3: Admin API

QubesOS/qubes-issues#853

625c03c5046b509b2493409061f5d00a6e61ebe8 authored almost 8 years ago

Rename MgmtAPI to AdminAPI - part 2: internal API

QubesOS/qubes-issues#853

258d268a3aa22168d86e22397423b1bde9e318f1 authored almost 8 years ago

Rename MgmtAPI to AdminAPI - part 1: classes

QubesOS/qubes-issues#853

cd489f46e1208a0610b6950f066b79581ee676e2 authored almost 8 years ago

Remove tools that are moved to -client repository

QubesOS/qubes-issues#853

83eef56f9dcf8115189a0e0d331d234f12ad1491 authored almost 8 years ago

rpm: integrate -doc package into main one

It doesn't really make sense to keep man pages in separate package.
Previously it was done to av...

e5596fe1ba361c62434b410f3c3dce804c072f96 authored almost 8 years ago

Remove unused helper scripts

81162a699bab334a5abe469c4e2ce71cf87bd734 authored almost 8 years ago