Qubes R3.3

[Frédéric Pierret (fepitre)]

Hi,

Just a copy on the devel list to follow a topic in the user list (https://groups.google.com/d/msg/qubes-users/KYl6FWhP_IQ/e1pMgfc9AwAJ)

I succeed to build an ISO based on release3.2 with Fedora 25 as dom0, Fedora 26 as default template, Stretch as default template and kernel-4.9.

It is done with some adjustments:
- xen-4.6.6 with a gmp patch (need to check if it is related to the fact I'm using a KVM VM to build the packages)
- core-libvirt v3.1.0 (due to python version),
- back port of some commits related to mgmt-salt,
- and also, some backport in the installer to handle Fedora 25 and for default template Fedora 26 and Debian 9.

In my repos I named it release3.3 instead of 3.2.1 because it goes just a bit far than the targeted goal with dom0 as FC25.

Marek: Should I do a complete report for let you rebuild the whole thing or you would like to skip this release?

There is still small polish to do like putting the proper Qubes R3.2 tag in the system (like in /etc/fedora-release) and the case, to create release3.3 branch on all the packages. Before doing this, I'm waiting for your feedback.

[Outback Dingo]

> --

very nice work


> You received this message because you are subscribed to the Google Groups "qubes-devel" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel...@googlegroups.com.
> To post to this group, send email to qubes...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/42c9382f-8338-43a7-9a3c-eec8c473be91%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Frédéric Pierret (fepitre)]

Thank you. I'm doing this because I know there is more and more people who are concerns with new hardware and also newer templates (first of all me ;)! ). Notably, I hope it will release a bit of pressure on the core-team to release the R4.0 for which there is still long and hard work to do.

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Thanks for the report. Generally, we don't have plans for 3.x with any
newer dom0 distribution. 3.2.x is meant to be stable, including not
risky updates. In place upgrade fc23->fc25 does not meet this
criteria. And surely we don't want to support both 3.2 and "3.3"...

But having newer kernel and templates does qualify for 3.2.x.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlpDba4ACgkQ24/THMrX
1yxBdQf9FzHg67pkwAmZOWaWHPaLNYsEeGbFBUalDnfAqae568GE1GYwziZ1j/KY
ilvsnD9UMzVi4xHkZCOjV0671UX1DSe4rWCGXrNhp6TaDb7GXkzH6V0vIhq1KQfQ
qJJ98I5TkQoPhvHbjPdNh2U4pPekgN7tMUqLj7BpDQoiJ7R0TzBOUU0glagRiODG
avgAs54R62vzVS4F1T6jQpHsBQXEbJHAgqFrnGW4xxxxh6OgnGAIScrW75Exxokg
dLUt1vN5ziLm55tGconryhaP1D+LDlcOSJVjf1sixhcEQfP3e5QZnajOelpy71MJ
/O/GYT/yh4L+zdPwr7lJGhI3phQhLg==
=O3PV
-----END PGP SIGNATURE-----

[Frédéric Pierret (fepitre)]

Ok.

For those who are interested, I will put a builder conf until end of the day.

[awokd]

On Wed, December 27, 2017 10:05 am, Frédéric Pierret (fepitre) wrote:

>
> For those who are interested, I will put a builder conf until end of the
> day.

I'd like to see it! Where should I look?

[Frédéric Pierret (fepitre)]

I will put it before the end of the day. I'm rebuilding again an ISO to test some adjustments.

[Frédéric Pierret (fepitre)]

For those who want to try:

1: git clone -b master-fepitre https://github.com/fepitre/qubes-builder
2: use the builder-R3.3.conf joined to this message
3: make qubes template ISO
4: burn the ISO and have fun :)


The master-fepitre branch is just the master one with my signing key added in the trusted key when verifying the git tags (check it!)

Of course, you will not have any update from the officials repositories. You can do your own repos or if there is really a need, I could do something about it.

Please keep in mind this is an UNOFFICIAL release. This is not polish as it should be and I have not had time to test everything (e.g. backup). Also, the few problems with Debian 9 (X not starting etc, I have not took the time to correct it as it will be done in the officials repositories very soon).

As I said in my initial post, only few backports was needed with respect to the master branches. From my side, using a more recent version of core-libvirt lead me to recover the use of dispvm! The use of dom0 FC25 allows me to finally use more recent packages for some dom0 custom things.

Next step, wait for the great R4.0 :)