-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Fri, Sep 22, 2017 at 02:23:14PM -0700, Frédéric Pierret (Epitre) wrote: > I finally succeeded to build Qubes with Fedora 26 as dom0 and template.
Yay! > Globally, it was a matter of some fixes with respect to GCC7 for xen and > other small minor corrections in qubes packages. > There is quite a lot small changes in codes between Fedora 25 and 26+ with > respect the installer packages (Pungi, Lorax, Pykickstart and Anaconda). One very important part of patches there is checking signatures of downloaded packages. Unfortunately, upstream maintainers don't care about it. Besides porting patches, it's a good idea to test it. See .travis.yml and conf/travis*.ks - there are configs intentionally including repositories with unsigned packages. > So to debug it was (still) long because I have not found a shortcut to > bypass the whole build of the iso (which is about ~20min on my servers each > time), neither a way to debug easily Anaconda. I don't have way around it. But for testing anaconda, it is useful to have: 1. PXE boot, like here: https://unix.stackexchange.com/questions/186302/fedora-network-install-via-pxe-boot 2. kickstart file - look at /root/anaconda-ks.cfg after installation 3. wake on lan. This way, it's possible to automate the whole workflow, so you hit "build" and come back half an hour later to see result of the test. For trivial fixes, you can do that from tty2 (edit files in /usr/...). Make sure to kill crashed anaconda with SIGKILL, otherwise it will shutdown the system. And AFAIR you also need to kill X server before starting new one. > In other words, in order to not do all the stages of Pungi, it seems that > we have to comment several things it the Makefile. Notably, I rewrite all > the necessary code (patches) for Anaconda with respect to the previous > commits to have, like the others, a source package, a spec file and patches > (In fact, I have done it for Fedora 26 and 27). In my opinion, it is more > clear and consistent. > > For the Fedora 26 template (Qubes 3.2 and 4.x), one has to take into > account a very slight modification in the qubes dnf plugin due to newer > version (a temporarly fix > https://github.com/fepitre/qubes-core-agent-linux/commit/8fffaadb41b9fb5ef5231287483040b31e02d57b). > > I should push everything on github on devel branches in the next days, a > time to polish and debug a bit more. Stay tuned ! > > Le dimanche 10 septembre 2017 01:43:33 UTC+2, Marek Marczykowski-Górecki a > écrit : > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA256 > > > > On Sun, Sep 10, 2017 at 12:31:03AM +0200, Frédéric Epitre wrote: > > > Hi, > > > > > > Just to give you some news about what I have done these days on Qubes: > > > > Thanks! Please cc qubes-devel ML for such things. I've added it here > > now. > > > > > - I succeed to build all the components (dom0 and vm) for the release > > > 4.0 with Fedora 26. For xen-4.8 I had to fix few lines in the patches of > > > xen-4.6 for GCC7 and also to add two patches of the version 4.8.2 for > > > the current 4.8.1. > > > > Oh, there is already 4.8.2. I'll check how feasible is updating to > > 4.8.2. > > > > > - I solved one more fallthrough in the core-admin and everything is > > good. > > > > > > - The last thing I'm currently stuck is the installer. I have to create > > > a fedora 26 branch and import the new version of anaconda and also new > > > version of pykickstart(>=1.33 for fedora 26 support) : > > > > This isn't needed for fc26 template, and it's too late to change dom0 > > distribution version for 4.0. So, don't bother. For Qubes 4.1, there > > will be probably newer version at that time. > > > > > * I tried to build pykickstart but tests create errors (need to add more > > > than you first patch to skip all the errors). So skipping errors, it > > > allows to obtain the packages. > > > > > > * Then, PUNGI...........During the nosetests, it bothers me with > > > something like Pungi:INFO: <type 'exceptions.AttributeError'> > > > AttributeError("'F27_RepoData' object has no attribute 'gpgkey'",), or > > > other erros always related to "'F27_RepoData' object has no attribute > > > 'gpgkey'". I don't understand neither why it is talking about FC27 nor > > > gpgkey because this supplementary parameter added should not be > > > considered in the test right? > > > > Looks related to a patch adding package signature verification. Probably > > needs to be updated. But as said above - don't worry about it now. > > > > > I will debug in the next days with a new fresh branch for fedora 26 in > > > the installer. > > > > > > Best, > > > > > > Frédéric > > > > > > > > > > - -- > > Best Regards, > > Marek Marczykowski-Górecki > > Invisible Things Lab > > A: Because it messes up the order in which people normally read text. > > Q: Why is top-posting such a bad thing? > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v2 > > > > iQEcBAEBCAAGBQJZtHyeAAoJENuP0xzK19csP64H/RHDPGvk2toK18ibmP9MZV5c > > vLYp6NtHSU6zZrIxqcc+6/yXWEykhYT2FbNx+elJeB+k5dRpJoeZ0e9CnZtFSV9X > > CsfN9j5IH59xm2mMUeXxWC4ObgHYVQDcxEtPWeOU4IYq02G45XBdYd4TVk/COtmR > > NFJV5lHpzGqeCiDY3O1Sq2VKHbU4DMbXOlz00x6PADAT3GTErC/JcCiEVyoXzN6b > > ItiG/qgP8QsqA6VkVDazjvyopRyuNsn3HkLMl/NK8iUlOwIdoDyGgaYT2zgeah38 > > 3pnWcUAJ8LmV79JGH9i39NHI2Ww+px7hVAVTbT7eXQgdn3sta9CZ3ZKAae2iHbQ= > > =3RbI > > -----END PGP SIGNATURE----- > > > - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJZxYOYAAoJENuP0xzK19cs1D4IAIQRz3s3DNlCjsNlhcliMD1i bVt0SOIFpG6QLMIzADHq5m7vcEzvBUdfn/ULEdyrulKgPZkj+Tx+ZbHmMP4+SLqi DypdXyvjBOJLAjMHfhTgVQ4D36ywN+ZYjBtwDaJAb2oYHMBmO1+fYPPM3ZJpSI23 Q3xYDFv0DUqQBuNL39uHN+VJdnWZxbtay+F4DfgptlajiLmsax0tbwcqrx6qGtfO 1s3uxTvASv8MojE5Lpw3ZpFFV3kuLzKx6C8862KK1/vsXqsfCtLrKhuYp22X+d/8 +gGixjaIRUhCL/EZiDE+Tot7A+Eq5Rh2meryrg01y4wRqO3BtI00vZE6B/imLyw= =/9AM -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/20170922214145.GV1116%40mail-itl. For more options, visit https://groups.google.com/d/optout.
