CentOS 7 template

426 views
Skip to first unread message

Frédéric Pierret (Epitre)

unread,
Sep 3, 2017, 12:36:46 PM9/3/17
to qubes-devel
Hi,

From requests of Qubes users (https://github.com/QubesOS/qubes-issues/issues/2745 https://groups.google.com/d/topic/qubes-devel/CgaPqYD63Gc/discussion), I made a builder for CentOS 7 (https://github.com/fepitre/qubes-builder-centos). This is mainly based on the Fedora builder adapted to CentOS. Moreover, I had to adapt a little bit package name for Python3, which is Python34 in CentOS, in components qubes-core-agent-linux and qubes-gui-agent-linux. Briefly I put several "if" conditions in the specs depending if we are building Fedora or CentOS (rhel rpmmacro). Finally, using an 'equivalence' between Fedora and RHEL (https://fedoraproject.org/wiki/Red_Hat_Enterprise_Linux), I set a 'fedora' rpmmacro to 20 (prepare-chroot-base) in order to not rewrite things for CentOS, at least as a first release (and also because I'm not going necessarily to use CentOS as template so any help is welcome from those who want to use CentOS).

In order to build the template, you need to pick a default Qubes 3.2 config in the qubes-builder and put the override.conf attached into the qubes-builder folder with the builder.conf.

This a first release and there is probably things to adapt and to optimize. Notably I'm not a big fan of GNOME and I will include the choice of having XFCE like I have done for the Fedora template (builder-fedora spins branch).

Thank you for your feedback!
Frédéric

override.conf

Marek Marczykowski-Górecki

unread,
Sep 3, 2017, 3:43:00 PM9/3/17
to Frédéric Pierret (Epitre), qubes-devel
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Nice work!

I left you few comments on github. Feel free to submit pull requests
with those changes - having it merged will greatly ease maintenance.

If you want to have CentOS 7 template in templates-community repository,
it needs to have working update mechanism. Including maintaining a
repository with those updates. I'll look if we have spare resources to
add additional target distribution to our "build infrastructure", but
for now lets assume we don't. This is how we do it:
https://github.com/QubesOS/qubes-infrastructure/

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJZrFs8AAoJENuP0xzK19cs2qcH/jauQ5NqLPmQ9Y5S9YTlMdkZ
vb9/YsMjtiwM9dQWwW5ssLKjHnOFrK7ahMtkBQl1WQRhuAVcb+Gq7od8FVprj8li
guqLGikU5CtG7jhtj8bShSCEyymW7bbulqf0XXXOOZ9qgiCCqIfMMSC/HiWQEbEO
FYBRiy3qp/75phHz/bIty3vAmzDg2Pq3bTu1qsux3H6rxdEC+S6Go8ZcvZt6bA8P
8hRKGzKBQE0r1bKS5q/kJWUUAz76ECjqMg6BqS1gRJkwaG741Qf2r7VRCLaemGSo
Po9/EQ6ZF5Lq4laoCpG4tj5yvFcHC1TETeagzEVGao7wqqgYzhG+DybUIGG9MJU=
=uzot
-----END PGP SIGNATURE-----
Message has been deleted

Frédéric Pierret (Epitre)

unread,
Sep 5, 2017, 11:03:49 AM9/5/17
to qubes-devel
Some news: A python dependency (python-xcffib) is required in qubes-core-agent-linux, which replace python-xpyb, and is (not yet?) neither in the officials CentOS nor EPEL repositories. As it was simply not included in the version of my first post, one has to add in the override.conf:

GIT_URL_python_xcffib = $(GIT_BASEURL)/fepitre/qubes-python-xcffib.git
BRANCH_python_xcffib = master

and also TEMPLATE += python-xcffib just before TEMPLATE += core-agent-linux

Best,

0spin...@gmail.com

unread,
Sep 27, 2017, 8:51:37 AM9/27/17
to qubes-devel
usage report: the builder (in qubes r4) fails while building mgmt-salt, complains about it being unable to import setuptools (python). :)

Frédéric Pierret (fepitre)

unread,
Sep 27, 2017, 5:49:13 PM9/27/17
to qubes-devel
I check tomorrow. I will write template conf and upload it.

Frédéric Pierret (fepitre)

unread,
Sep 28, 2017, 3:09:43 PM9/28/17
to qubes-devel
It is now good for 4.0. You can use my repos https://github.com/fepitre/qubes-builder and select the centos template builder. I have not put my repos in the setup because I'm waiting to know if  Marek is ok.

Notice that there is still not the CentOS repository in the official Qubes yum server.

For Marek: this is why Travis-ci actually fails before building anything due to an error of yum on the repo vm for CentOS.

0spin...@gmail.com

unread,
Oct 1, 2017, 6:08:40 AM10/1/17
to qubes-devel
Thank you, and Marek. :)

0spin...@gmail.com

unread,
Oct 1, 2017, 7:00:41 AM10/1/17
to qubes-devel
fyi: I'm getting the Xorg-related 'failed to set default C locale' error after installing, discussed here: https://groups.google.com/forum/#!searchin/qubes-users/failed$20to$20set$20locale$20xenial|sort:relevance/qubes-users/2nnjwPJNgIs/v7aGLTLKDgAJ

Frédéric Pierret (fepitre)

unread,
Oct 1, 2017, 2:07:38 PM10/1/17
to qubes-devel
Could you be more specific? I don't have(find) such error.

0spin...@gmail.com

unread,
Oct 1, 2017, 3:59:15 PM10/1/17
to qubes-devel
when I launch xterm inside a CentOS-based VM, and then execute any command (e.g. yum update, or 'gnome-terminal') I always get error messages like that.

Frédéric Pierret (fepitre)

unread,
Oct 1, 2017, 5:11:38 PM10/1/17
to qubes-devel
This is what I suspected. But I don't have such a behavior. I just made another fresh build (today with correction of appmenus again...) and everything seems fine. What are your locales when building the template?

0spin...@gmail.com

unread,
Oct 1, 2017, 5:23:01 PM10/1/17
to qubes-devel
I've not really customized anything on that front, so I'm more puzzled than you are. :)
Reply all
Reply to author
Forward
0 new messages