does anyone have a useable FC26 core domU built ...ive been waiting 1.5 years just to get qubes reloaded... and so far nothing is working
On Wed, Sep 27, 2017 at 11:14 AM, Frédéric Pierret (Epitre) <epitre.frede...@gmail.com> wrote: > Almost but be patient. Note that Qubes with FC26 (or maybe FC27) as dom0 is > planed to might be 4.1. This is still in current development and debug. > > At the release point of view, there is still some adjustments to do for > Anaconda because there is some of changes in the code with FC>=26: > - the check of lock root account > - the check of non empty user password > was done in each spokes respectively. > > Now they merged the check classes in helper.py. So we need to adapt it. This > is only what is is missing the series of patches: > https://github.com/fepitre/qubes-installer-qubes-os/tree/devel-f26/anaconda > But as I said, there is still things to debug for dom0. So if you want to > try and help: > - pick a qubes-os-master.conf > - put dom0 to fc26 > - override branch for the installer with my repository and devel-f26 branch > - all others modifications should now be in the Qubes master repository > > Another point: stable Qubes 4.0 is almost released and you can now build > Fedora 26 template for 3.2 and 4.0 (check last commits on Qubes master > branches). > > Best, > > Le mercredi 27 septembre 2017 10:57:59 UTC+2, Outback Dingo a écrit : >> >> So curious now, is this duplicable? do you havea working iso image? >> did it install properly? it is functional ? >> >> On Fri, Sep 22, 2017 at 5:41 PM, Marek Marczykowski-Górecki >> <marm...@invisiblethingslab.com> wrote: >> > -----BEGIN PGP SIGNED MESSAGE----- >> > Hash: SHA256 >> > >> > On Fri, Sep 22, 2017 at 02:23:14PM -0700, Frédéric Pierret (Epitre) >> > wrote: >> >> I finally succeeded to build Qubes with Fedora 26 as dom0 and template. >> > >> > Yay! >> > >> >> Globally, it was a matter of some fixes with respect to GCC7 for xen >> >> and >> >> other small minor corrections in qubes packages. >> >> There is quite a lot small changes in codes between Fedora 25 and 26+ >> >> with >> >> respect the installer packages (Pungi, Lorax, Pykickstart and >> >> Anaconda). >> > >> > One very important part of patches there is checking signatures of >> > downloaded packages. Unfortunately, upstream maintainers don't care >> > about >> > it. Besides porting patches, it's a good idea to test it. See >> > .travis.yml and conf/travis*.ks - there are configs intentionally >> > including repositories with unsigned packages. >> > >> >> So to debug it was (still) long because I have not found a shortcut to >> >> bypass the whole build of the iso (which is about ~20min on my servers >> >> each >> >> time), neither a way to debug easily Anaconda. >> > >> > I don't have way around it. But for testing anaconda, it is useful to >> > have: >> > 1. PXE boot, like here: >> > https://unix.stackexchange.com/questions/186302/fedora-network-install-via-pxe-boot >> > 2. kickstart file - look at /root/anaconda-ks.cfg after installation >> > 3. wake on lan. >> > >> > This way, it's possible to automate the whole workflow, so you hit >> > "build" and come back half an hour later to see result of the test. >> > >> > For trivial fixes, you can do that from tty2 (edit files in >> > /usr/...). Make sure to kill crashed >> > anaconda with SIGKILL, otherwise it will shutdown the system. And AFAIR >> > you also need to kill X server before starting new one. >> > >> >> In other words, in order to not do all the stages of Pungi, it seems >> >> that >> >> we have to comment several things it the Makefile. Notably, I rewrite >> >> all >> >> the necessary code (patches) for Anaconda with respect to the previous >> >> commits to have, like the others, a source package, a spec file and >> >> patches >> >> (In fact, I have done it for Fedora 26 and 27). In my opinion, it is >> >> more >> >> clear and consistent. >> >> >> >> For the Fedora 26 template (Qubes 3.2 and 4.x), one has to take into >> >> account a very slight modification in the qubes dnf plugin due to newer >> >> version (a temporarly fix >> >> >> >> https://github.com/fepitre/qubes-core-agent-linux/commit/8fffaadb41b9fb5ef5231287483040b31e02d57b). >> >> >> >> I should push everything on github on devel branches in the next days, >> >> a >> >> time to polish and debug a bit more. Stay tuned ! >> >> >> >> Le dimanche 10 septembre 2017 01:43:33 UTC+2, Marek >> >> Marczykowski-Górecki a >> >> écrit : >> >> > >> >> > -----BEGIN PGP SIGNED MESSAGE----- >> >> > Hash: SHA256 >> >> > >> >> > On Sun, Sep 10, 2017 at 12:31:03AM +0200, Frédéric Epitre wrote: >> >> > > Hi, >> >> > > >> >> > > Just to give you some news about what I have done these days on >> >> > > Qubes: >> >> > >> >> > Thanks! Please cc qubes-devel ML for such things. I've added it here >> >> > now. >> >> > >> >> > > - I succeed to build all the components (dom0 and vm) for the >> >> > > release >> >> > > 4.0 with Fedora 26. For xen-4.8 I had to fix few lines in the >> >> > > patches of >> >> > > xen-4.6 for GCC7 and also to add two patches of the version 4.8.2 >> >> > > for >> >> > > the current 4.8.1. >> >> > >> >> > Oh, there is already 4.8.2. I'll check how feasible is updating to >> >> > 4.8.2. >> >> > >> >> > > - I solved one more fallthrough in the core-admin and everything is >> >> > good. >> >> > > >> >> > > - The last thing I'm currently stuck is the installer. I have to >> >> > > create >> >> > > a fedora 26 branch and import the new version of anaconda and also >> >> > > new >> >> > > version of pykickstart(>=1.33 for fedora 26 support) : >> >> > >> >> > This isn't needed for fc26 template, and it's too late to change dom0 >> >> > distribution version for 4.0. So, don't bother. For Qubes 4.1, there >> >> > will be probably newer version at that time. >> >> > >> >> > > * I tried to build pykickstart but tests create errors (need to add >> >> > > more >> >> > > than you first patch to skip all the errors). So skipping errors, >> >> > > it >> >> > > allows to obtain the packages. >> >> > > >> >> > > * Then, PUNGI...........During the nosetests, it bothers me with >> >> > > something like Pungi:INFO: <type 'exceptions.AttributeError'> >> >> > > AttributeError("'F27_RepoData' object has no attribute 'gpgkey'",), >> >> > > or >> >> > > other erros always related to "'F27_RepoData' object has no >> >> > > attribute >> >> > > 'gpgkey'". I don't understand neither why it is talking about FC27 >> >> > > nor >> >> > > gpgkey because this supplementary parameter added should not be >> >> > > considered in the test right? >> >> > >> >> > Looks related to a patch adding package signature verification. >> >> > Probably >> >> > needs to be updated. But as said above - don't worry about it now. >> >> > >> >> > > I will debug in the next days with a new fresh branch for fedora 26 >> >> > > in >> >> > > the installer. >> >> > > >> >> > > Best, >> >> > > >> >> > > Frédéric >> >> > > >> >> > > >> >> > >> >> > - -- >> >> > Best Regards, >> >> > Marek Marczykowski-Górecki >> >> > Invisible Things Lab >> >> > A: Because it messes up the order in which people normally read text. >> >> > Q: Why is top-posting such a bad thing? >> >> > -----BEGIN PGP SIGNATURE----- >> >> > Version: GnuPG v2 >> >> > >> >> > iQEcBAEBCAAGBQJZtHyeAAoJENuP0xzK19csP64H/RHDPGvk2toK18ibmP9MZV5c >> >> > vLYp6NtHSU6zZrIxqcc+6/yXWEykhYT2FbNx+elJeB+k5dRpJoeZ0e9CnZtFSV9X >> >> > CsfN9j5IH59xm2mMUeXxWC4ObgHYVQDcxEtPWeOU4IYq02G45XBdYd4TVk/COtmR >> >> > NFJV5lHpzGqeCiDY3O1Sq2VKHbU4DMbXOlz00x6PADAT3GTErC/JcCiEVyoXzN6b >> >> > ItiG/qgP8QsqA6VkVDazjvyopRyuNsn3HkLMl/NK8iUlOwIdoDyGgaYT2zgeah38 >> >> > 3pnWcUAJ8LmV79JGH9i39NHI2Ww+px7hVAVTbT7eXQgdn3sta9CZ3ZKAae2iHbQ= >> >> > =3RbI >> >> > -----END PGP SIGNATURE----- >> >> > >> >> >> > >> > >> > - -- >> > Best Regards, >> > Marek Marczykowski-Górecki >> > Invisible Things Lab >> > A: Because it messes up the order in which people normally read text. >> > Q: Why is top-posting such a bad thing? >> > -----BEGIN PGP SIGNATURE----- >> > Version: GnuPG v2 >> > >> > iQEcBAEBCAAGBQJZxYOYAAoJENuP0xzK19cs1D4IAIQRz3s3DNlCjsNlhcliMD1i >> > bVt0SOIFpG6QLMIzADHq5m7vcEzvBUdfn/ULEdyrulKgPZkj+Tx+ZbHmMP4+SLqi >> > DypdXyvjBOJLAjMHfhTgVQ4D36ywN+ZYjBtwDaJAb2oYHMBmO1+fYPPM3ZJpSI23 >> > Q3xYDFv0DUqQBuNL39uHN+VJdnWZxbtay+F4DfgptlajiLmsax0tbwcqrx6qGtfO >> > 1s3uxTvASv8MojE5Lpw3ZpFFV3kuLzKx6C8862KK1/vsXqsfCtLrKhuYp22X+d/8 >> > +gGixjaIRUhCL/EZiDE+Tot7A+Eq5Rh2meryrg01y4wRqO3BtI00vZE6B/imLyw= >> > =/9AM >> > -----END PGP SIGNATURE----- >> > >> > -- >> > You received this message because you are subscribed to the Google >> > Groups "qubes-devel" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an email to qubes-devel...@googlegroups.com. >> > To post to this group, send email to qubes...@googlegroups.com. >> > To view this discussion on the web visit >> > https://groups.google.com/d/msgid/qubes-devel/20170922214145.GV1116%40mail-itl. >> > For more options, visit https://groups.google.com/d/optout. > > > -- > You received this message because you are subscribed to the Google Groups > "qubes-devel" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-devel+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-devel@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-devel/ccc9617f-5dd2-4e21-b3e4-54e317a8c3b4%40googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To post to this group, send email to qubes-devel@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/CAKYr3zx4jEopMumFA1y156a3-PeLm3SQMBvfu7q0q9B-EVqiiw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
