Adriaan de Groot
5f6efd2822
[initcpio] Improve security by making initramfs files not world-readable
2019-07-05 13:17:55 +02:00
Adriaan de Groot
43eb664e7d
[initramfs] Configure mkinitramfs to be safe
...
SEE #1191
2019-07-05 11:43:40 +02:00
Adriaan de Groot
315e1ac54e
[luksbootkeyfile] Improve logging to distinguish from other modules
2019-07-04 22:08:36 +02:00
Adriaan de Groot
bb6530577d
[initcpio] Replace Python implementation with C++
...
- This is a simple variation on the theme of things-that-call-a-
initramfs-updater, so the code is mostly a copy of initramfs/
module. I didn't even bother to strip out the configuration-
handling (I figure it might be good for *something*) so now
"" and "$uname" are valid kernel names as well.
- Fixes security issue where the initramfs ends up readable
by all, and that includes the cryptfile for LUKS.
SEE #1190
2019-07-04 20:23:40 +02:00
Adriaan de Groot
d5340f9743
[initramfs] Drop timeout entirely, even two minutes too short
2019-07-04 20:05:48 +02:00
Adriaan de Groot
efd409cf78
[luksbootkeyfile] Refactor static function to outside class
2019-07-04 19:38:10 +02:00
Adriaan de Groot
7d7d4c69ef
[luksbootkeyfile] Don't log passphrase
2019-07-04 19:37:37 +02:00
Adriaan de Groot
8a7884d476
[luksbootkeyfile] More debugging of the crypt file
2019-07-04 19:30:11 +02:00
Adriaan de Groot
97e44f971d
[initramfs] That's not a safety setting
...
- Don't confuse a method declaration with an object.
- Thanks clang for warning me.
2019-07-04 16:23:21 +02:00
Adriaan de Groot
af2a900276
[luksbootkeyfile] Fix lax permissions on file.
2019-07-04 16:05:58 +02:00
Adriaan de Groot
856a2eaa1d
[luksbootkeyfile] Implement keyfile creation and use
...
- Just copy the commands from the existing Python code,
including nonsensical dd.
2019-07-04 16:05:54 +02:00
Adriaan de Groot
8706b579ec
[luksbootkeyfile] Stub out an implementation
...
- stubs for the actual work to be done
- program-flow for looping over all the work
2019-07-04 16:05:54 +02:00
Adriaan de Groot
f6c50564cd
[luksbootkeyfile] Extract devices that need cryptsetup
...
- Rename classes and functions to be more descriptive
(a LuksDevice is .. information for a LUKS device, for instance).
- Move the smarts of unpacking a QVariantMap to LuksDevice.
- Apply code formatting
2019-07-04 16:05:54 +02:00
Adriaan de Groot
745b4b1693
[luksbootkeyfile] Extract partitioning keyphrases from GS
2019-07-04 16:05:48 +02:00
Adriaan de Groot
676df86712
[luksbootkeyfile] Stub job implementation in C++
2019-07-04 16:05:47 +02:00
Adriaan de Groot
c2fa315735
[luksbootkeyfile] Prepare for C++-ification
...
- Mess around with the CMakeFile in preparation of new code
- Drop the Python implementation already
2019-07-04 16:05:47 +02:00
Adriaan de Groot
1be81ec3b0
[initramfs] Bump the timeout much higher
...
- Use 120 seconds for update-initramfs, instead of 10. Previous
Python code had no timeout at all, which wasn't so hot either.
10 seconds, though, is too short for slow CPU & slow disk.
2019-07-03 21:20:08 +02:00
Adriaan de Groot
0030966986
[initramfs] Set umask before update-initramfs
...
SEE #1191
2019-07-03 00:43:40 +02:00
Adriaan de Groot
c0cd14df47
[initramfs] Fix sample config file for tests
...
- the tests want a non-empty config, so put something in there:
a kernel setting that matches the legacy behavior.
2019-06-28 13:04:40 +02:00
Adriaan de Groot
f7cbb7b5ea
Changes: Note modified initramfs module
...
- Also add note about $uname handling.
2019-06-24 16:47:20 +02:00
Adriaan de Groot
6ae8bd82fa
[initramfs] Log what kernel will be passed to update-initramfs
2019-06-24 16:37:58 +02:00
Adriaan de Groot
a2d7fdcb8a
[initramfs] Document settings
...
- Move the README text into the config file
- Document the *kernel* setting
2019-06-24 16:35:54 +02:00
Adriaan de Groot
8d712276ad
[initramfs] Replace module with C++ implementation
...
- new implementation handles blank (maps to "all") configuration,
- allows specifying "$uname" as kernel name, to use `uname -r`,
- allows specifying a specific kernel.
2019-06-24 14:38:56 +02:00
Adriaan de Groot
b216daf574
[initramfs] Prepare for C++-ification
2019-06-24 13:19:24 +02:00
Calamares CI
42bd638667
i18n: [dummypythonqt] Automatic merge of Transifex translations
2019-06-21 16:43:01 +02:00
Adriaan de Groot
5876c3fdd7
[partition] Warn about storage setting in partition.conf
...
- This is really a specialised setting, not something for
general use. People should be using `welcome.conf` instead.
2019-06-21 13:43:02 +02:00
Adriaan de Groot
0f66a89236
[welcome] Only do GeoIP query if it's useful
...
- If badly-configured, then type is none; this is warned about
in the constructor of Handler()
- Only run the query if it's a useful type.
2019-06-18 12:34:52 +02:00
Adriaan de Groot
3967f6c5ae
[welcome] Log where GeoIP information came from, if it's unusable
...
- This helps chase down broken GeoIP configurations, since you
can check the URL and handler type shown in the log.
2019-06-18 12:24:30 +02:00
Adriaan de Groot
e94bbc5e0c
[dummyprocess] Add some delay in the dummy
2019-06-17 15:53:02 +02:00
Calamares CI
1d01253249
i18n: [dummypythonqt] Automatic merge of Transifex translations
2019-06-17 15:35:07 +02:00
Adriaan de Groot
74432f698f
[partition] Allow the requiredStorage setting to propagate
...
- store into globalStorage if the welcome module hasn't already done so.
- this ends up used in PartUtils (via globalStorage).
2019-06-08 14:36:11 +02:00
Adriaan de Groot
e6a2cb607f
[partition] Add setting for requiredstorage
...
- If the welcome module isn't used, can set a required amount
of storage for the installation here.
2019-06-08 07:48:47 -04:00
Adriaan de Groot
b5c50c8d04
[partition] Update canBeReplaced
...
- Use GiB consistently
- Provide same kind of debugging information as canBeResized()
2019-06-07 23:19:24 +02:00
Adriaan de Groot
79934aa513
[partition] Use GiB consistently in code
2019-06-07 23:04:24 +02:00
Adriaan de Groot
acf3dbcdcb
[partition] Refactor getting the globalStorage value
2019-06-07 22:55:50 +02:00
Adriaan de Groot
3548792d1b
[partition] Improve check canBeResized
...
- Report the globalSettings name properly (with "GiB")
- Bail out on bad conversion early.
2019-06-07 22:51:33 +02:00
Calamares CI
bbc0edecd3
i18n: [dummypythonqt] Automatic merge of Transifex translations
2019-06-07 10:44:01 +02:00
Adriaan de Groot
3335c2003e
[fsresizer] Fix tests
...
- Again? The checks on the job name (using filesystem or device
name) all looked very bogus, unless it was previously not
setting them at all.
2019-06-03 15:00:04 +02:00
Adriaan de Groot
f54b7dee9f
[welcome] Use convenience image loader from Branding
2019-05-31 17:27:11 +02:00
Adriaan de Groot
07c638ed48
[welcome] Allow theming the international language-select icon
2019-05-31 17:27:11 +02:00
Adriaan de Groot
a263381996
[partition] Avoid an assert when running Calamares as user.
2019-05-31 12:27:32 +02:00
Adriaan de Groot
4a6b9f3528
[partition] Call update from init() in BootLoaderModel
...
- update() (might) add some extra rows for boot and root,
which otherwise vanish temporarily when calling init.
2019-05-31 12:11:48 +02:00
Adriaan de Groot
d5f0bdd28c
[partition] Simplify negative logic
...
- Instead of multiple continue statements to avoid negative cases,
state the one positive case instead.
2019-05-31 12:08:58 +02:00
Adriaan de Groot
3bdbfe6bff
[partition] Avoid crash if combobox is gone and model resets
...
- Since the lambda is connected to the model only, it should
check that the target combo exists as well.
2019-05-31 12:08:58 +02:00
Adriaan de Groot
2ce2b08027
[partition] Indent lambdas to tab-stop.
...
- Lambdas are all over the place in this codebase, formulate
a standard and start adjusting code to it in passing.
2019-05-31 12:08:58 +02:00
Adriaan de Groot
353e713f81
[partition] Complain loudly on dangling Partition pointers
...
- Don't crash if a bad pointer gets into colorutils.
2019-05-31 12:08:58 +02:00
Adriaan de Groot
2bc95d11d3
[partition] Unrelated typo in comment
2019-05-31 12:08:58 +02:00
Adriaan de Groot
f1f5b6c1bb
[partition] Restore BootLoader path in Choice Page
...
- after model resets, restore what was previously selected.
- This avoids having an **empty** combobox, SEE #1141 but does
not actually set it back to the value the user had previously
picked (e.g. changing swap settings **still** breaks the
selection).
2019-05-31 12:08:58 +02:00
Adriaan de Groot
0ebabfafd4
[partition] Move BootLoaderModel convenience functions
...
- These were hidden inside PartitionPage, but are useful elsewhere.
2019-05-31 12:08:58 +02:00
Adriaan de Groot
8d451622db
[partition] Idiomatic use of Calamares::JobList
2019-05-28 16:39:00 +02:00