Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: QubesOS/qubes-core-agent-linux
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v4.2.41
Choose a base ref
...
head repository: QubesOS/qubes-core-agent-linux
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v4.2.42
Choose a head ref
  • 18 commits
  • 15 files changed
  • 5 contributors

Commits on Apr 24, 2025

  1. fix under_systemd function on debian 

    Read command name in /proc

(cherry picked from commit bfe56a8)
    @Guiiix @marmarek
    Guiiix authored and marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    675bd38 View commit details
    Browse the repository at this point in the history

  2. rpm: fix formating of %postun selinux macro 

    Unfortunately it can't handle wrapped lines (macro gets \ literally and
takes it as a policy name), do one long line.

QubesOS/qubes-issues#9663

(cherry picked from commit a682f51)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    cf030c2 View commit details
    Browse the repository at this point in the history

  3. Disable systemd-userdbd 

    It's not relevant a qube (that has only local user database). And also
it causes issues distribution upgrade (when the service is being
re-started, while socket is still up, all user lookups take a long time
eventually causing timeouts of service restart).

QubesOS/qubes-issues#9807

(cherry picked from commit 2fc6c54)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    9c15780 View commit details
    Browse the repository at this point in the history

  4. dom0-update: apply --installroot etc for --help calls too 

    When opening rpmdb fails, dnf --help doesn't print its message, so the
check for various options fail. Add --installroot etc options when
doing --help calls too.

This applies at least to the DNF version in Archlinux.

(cherry picked from commit e4ecb43)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    f4e9544 View commit details
    Browse the repository at this point in the history

  5. dom0-updates: do not pass --allowerasing to dnf clean 

    QubesOS/qubes-issues#9244

(cherry picked from commit ff11c49)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    55f5699 View commit details
    Browse the repository at this point in the history

  6. firewall: avoid crash on qubesdb long path errors 

    Long hostnames result in qubesdb paths that exceed the current 64
character limit.  Instead of crashing the firewall daemon, log the error
and continue without adding the hostname to the DNS records.

This is a workaround, not a fix, for
https://github.com/QubesOS/qubes-issues/9084.  The fix requires either
longer path support in qubesdb or using a different schema so that keys
will not exceed the qubesdb path length limit.

(cherry picked from commit 2c80b1c)
    @troyjfarrell @marmarek
    troyjfarrell authored and marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    582f830 View commit details
    Browse the repository at this point in the history

  7. Remove accidentally duplicated test function 

    (cherry picked from commit 86fecb9)
    @troyjfarrell @marmarek
    troyjfarrell authored and marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    6bcbff5 View commit details
    Browse the repository at this point in the history

  8. Fix the issue URL in the log message 

    (cherry picked from commit 7518028)
    @troyjfarrell @marmarek
    troyjfarrell authored and marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    97f7560 View commit details
    Browse the repository at this point in the history

  9. qubes-core-agent: add tar to dependencies 

    New template updater (core-admin-linux vmupdate)
uses tar for extracting update agent files.
But currently tar is not dependency of Qubes core components,
so people maybe remove it mistakenly.
Adding tar to core-agent dependencies will
reduces such risks.

(cherry picked from commit 5ab802b)
    @zpc0 @marmarek
    zpc0 authored and marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    2dd75d3 View commit details
    Browse the repository at this point in the history

  10. Assure script is installed for dom0 update 

    On Fedora 42, `script` executable is moved to `util-linux-script`
package. It is required for `qubes-download-dom0-update.sh` to work.

(cherry picked from commit f472cd0)
    @alimirjamali @marmarek
    alimirjamali authored and marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    fe055c1 View commit details
    Browse the repository at this point in the history

  11. Launch volumeicon and pasystray only for audiovm 

    fixes: QubesOS/qubes-issues#9158
(cherry picked from commit 1a3ffa0)
    @alimirjamali @marmarek
    alimirjamali authored and marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    c2459d0 View commit details
    Browse the repository at this point in the history

  12. Avoid de-configuring non-existing interface 

    When 'vif-route-qubes offline' is called, the interface (usually)
doesn't exist anymore. In that case, commands are called with
'do_without_error', but while it doesn't fail the script, it still logs
misleading error message.

Avoid calling 'ip' on non-existing interface to remove its
address/route, as those are removed by the kernel implicitly anyway.
But still call them on online action (if interface doesn't exist at this
point, it will fail, and that's intentional to get proper error
message), or when the interface still exist at the time the script is
called (in which case, it may still race against disappearing the
interface, but then there is 'do_without_error' prefix as the
last resort). This way, it avoids confusing error in the common case,
but still ensure things are cleaned up in the unusual case of interface
staying there.

(cherry picked from commit 99bd2ec)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    9fafe3b View commit details
    Browse the repository at this point in the history

  13. rpm: require python3-libdnf5 on F41+ 

    It's required for the qubes-vm-update tool to report progress of the
update.

QubesOS/qubes-issues#9244

(cherry picked from commit 51997c7)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    4e8846e View commit details
    Browse the repository at this point in the history

  14. Free some memory on resume before re-loading modules 

    Intel wifi driver wants to allocate large contiguous memory blocks
(for example with Intel BE200 it's 128k). Try to force some memory
(possibly pushing some apps into swap) and then force memory compaction
- just before loading wifi drivers back (depending on device, module
either gets loaded, or just bound to the device).

Do this by using dd to allocate 512MB of memory. The amount is large
enough to force swapping, but it's still significantly below the swap
size (1GB) so it doesn't trigger OOM.

Fixes QubesOS/qubes-issues#9869

(cherry picked from commit 56f5b0b)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    54aa72e View commit details
    Browse the repository at this point in the history

  15. apt: skip 'apt-get update' when running from apt already 

    Do not call 'apt-get update' in post-invoke hook, as APT database is
locked at this time. Since this happens after packages install/update,
it should be already up to date at that point.

Fixes QubesOS/qubes-issues#9673

(cherry picked from commit e3202dc)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    f19d374 View commit details
    Browse the repository at this point in the history

  16. Simplify logging apt-get update output 

    The 'apt_get_update_output' variable is unused, so avoid complexity with
saving apt-get update output and printing it at the same time. This
fixes checking updates on Debian, as 'tee /proc/self/fd/2' fails when
the script is called from systemd service (via systemd timer).

Fixes QubesOS/qubes-issues#9895

(cherry picked from commit bbea997)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    3cb3e36 View commit details
    Browse the repository at this point in the history

  17. tests: update yum.qubes-os.org IP 

    (cherry picked from commit 4fb6c15)
    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    f670719 View commit details
    Browse the repository at this point in the history

  18. version 4.2.42

    @marmarek
    marmarek committed Apr 24, 2025
    Configuration menu
    Copy the full SHA
    2f2a6cc View commit details
    Browse the repository at this point in the history
Loading