Blacklist useless/danagerous updates in a VM

[marmarek]

Reported by joanna on 1 Jul 2011 12:14 UTC

• kernel
• Xorg

Migrated-From: https://wiki.qubes-os.org/ticket/250

[marmarek]

Modified by joanna on 1 Jul 2011 13:27 UTC

[marmarek]

Modified by joanna on 1 Jul 2011 13:27 UTC

[marmarek]

Comment by joanna on 17 Jul 2011 21:14 UTC
This is especially annoying now, when we do not install our own kernel in VMs and when we have read-only /lib/modules. Any update of the template will likely want to update the kernel, which however fails because of the above.

So, we should really black list installation of kernel via yum. Alternatively we should not install kernel package in the VM -- can this be done easily?

[marmarek]

Comment by joanna on 17 Jul 2011 21:14 UTC
This is especially annoying now, when we do not install our own kernel in VMs and when we have read-only /lib/modules. Any update of the template will likely want to update the kernel, which however fails because of the above.

So, we should really black list installation of kernel via yum. Alternatively we should not install kernel package in the VM -- can this be done easily?

[marmarek]

Comment by marmarek on 25 Jul 2011 00:04 UTC
exclude= setting in yum.conf should do the work.

[marmarek]

Comment by marmarek on 25 Jul 2011 00:04 UTC
exclude= setting in yum.conf should do the work.

[marmarek]

Comment by joanna on 25 Jul 2011 08:08 UTC
Indeed, adding:

exclude=kernel, xorg-*

at the end of /etc/yum.conf, solves the problem. Questions:

1. Do we want to add this option as part of e.g. qubes-corevm's %post?
2. Do we want to blacklist some more packages?

[marmarek]

Comment by joanna on 25 Jul 2011 08:08 UTC
Indeed, adding:

exclude=kernel, xorg-*

at the end of /etc/yum.conf, solves the problem. Questions:

1. Do we want to add this option as part of e.g. qubes-corevm's %post?
2. Do we want to blacklist some more packages?

[marmarek]

Modified by joanna on 30 Jul 2011 09:15 UTC

[marmarek]

Modified by joanna on 30 Jul 2011 09:15 UTC

[marmarek]

Comment by joanna on 30 Jul 2011 10:12 UTC
Implemented:

http://git.qubes-os.org/?p=joanna/core.git;a=commitdiff;h=4dde8f8661cf8bff817f6a3a147d413d8efcd190
http://git.qubes-os.org/?p=joanna/core.git;a=commitdiff;h=5932699d8f229c10539a56d4c3b7647ed762cc16

[marmarek]

Comment by joanna on 30 Jul 2011 10:12 UTC
Implemented:

http://git.qubes-os.org/?p=joanna/core.git;a=commitdiff;h=4dde8f8661cf8bff817f6a3a147d413d8efcd190
http://git.qubes-os.org/?p=joanna/core.git;a=commitdiff;h=5932699d8f229c10539a56d4c3b7647ed762cc16