Marek Marczykowski-Górecki
3923a4c3f6
admin-api: document backup profile
2017-06-27 16:01:57 +02:00
Andrew David Wong
f23bca5bff
Remove old link
2017-06-26 22:12:55 -05:00
Andrew David Wong
c591cabd82
Merge mgmt-design into admin-api
2017-06-26 22:02:29 -05:00
Marek Marczykowski-Górecki
9cd7cee04f
admin-api: remove separate methods for firewall policy
...
QubesOS/qubes-issues#2869
2017-06-26 06:05:31 +02:00
Marek Marczykowski-Górecki
7756a5353a
Add Qubes 4.0 policy keywords
2017-06-25 13:02:48 +02:00
Marek Marczykowski-Górecki
caf8dfb91a
admin-api: fix default= definition in property.Get
...
The actual value used there is `True` or `False`
2017-06-25 01:31:38 +02:00
Marek Marczykowski-Górecki
b3b91c8baf
admin-api: clone operation with a token
...
This way complete operation require policy approval for both source and
destination volumes
2017-06-25 01:31:38 +02:00
Marek Marczykowski-Górecki
b160399f9b
admin-api: add volume.Clone
...
It is needed for VM clone operation: we have volume.Import, but not
volume.Export - at least not yet. And doing export+import would be very
inefficient, especially on smart storage pools (like LVM).
2017-06-19 00:16:24 +02:00
Marek Marczykowski-Górecki
3d6870656b
admin-api: remove clone operation
...
Can be achieved using other operations.
2017-06-19 00:08:07 +02:00
Wojtek Porczyk
a43d14339e
admin-api: fix html ents
2017-06-14 11:26:07 +02:00
Wojtek Porczyk
feeeb6da8d
admin-api: description of the tags
2017-06-14 11:22:52 +02:00
Marek Marczykowski-Górecki
ecbfeb2e73
admin-api update
...
1. Drop separate admin.vm.microphone.* calls - lets use
admin.vm.device.mic.* for this. Yes, this means microphone cannot
be attached to multiple VMs at the same time (which is regression vs
Qubes 3.2). But this is a good thing from security point of view.
2. Drop admin.backup.Restore - use standard Admin API methods
(admin.vm.Create, admin.vm.volume.Import etc)
Cc: @kalkin
2017-05-23 00:10:10 +02:00
Marek Marczykowski-Górecki
fa79d40d66
admin-api: fix misplaced comment about device assignment options
2017-05-15 14:25:05 +02:00
Marek Marczykowski-Górecki
eb484c383b
Rename Mgmt API to Admin API
...
QubesOS/qubes-issues#853
2017-05-11 22:39:53 +02:00
Marek Marczykowski-Górecki
c1cc28b3c4
mgmt: add two notes
...
As discussed here:
https://github.com/QubesOS/qubes-core-admin/pull/100#discussion_r115726151
https://github.com/QubesOS/qubes-core-admin/pull/100#discussion_r115725705
2017-05-10 15:16:21 +02:00
Marek Marczykowski-Górecki
fe3bcf2d89
Merge remote-tracking branch 'origin/pr/414' into https
...
* origin/pr/414:
blogspot -> https://blog.invisiblethings.org/
2017-05-06 23:38:04 +02:00
Marek Marczykowski-Górecki
301fc9f312
Merge remote-tracking branch 'origin/pr/413' into https
...
* origin/pr/413:
blogspot -> https://blog.invisiblethings.org/
2017-05-06 23:38:04 +02:00
InstantGratimification
49e4af2262
blogspot -> https://blog.invisiblethings.org/
2017-05-03 15:26:39 +00:00
InstantGratimification
e0837e6180
blogspot -> https://blog.invisiblethings.org/
2017-05-03 15:25:31 +00:00
InstantGratimification
03cbaa5b84
Update qmemman.md
2017-05-03 15:00:56 +00:00
Marek Marczykowski-Górecki
ea7c0b280c
mgmt1: clarify devices handling, add options support
...
- devices can be attached with some options (like 'ro=True' for block
devices)
- clarify that backend domain and device ident is separated with '+'
(':' is not allowed in qrexec call argument)
- clarify how to attach devices "persistently"
2017-05-01 02:55:44 +02:00
Marek Marczykowski-Górecki
141ed82589
mgmt1: rethink firewall Admin API
...
Handling each rule separately makes sense on from qvm-firewall tool
point of view, but not from overall configuration integrity. If multiple
tools try to configure firewall simultaneously, doing it at individual
rules level can end very badly.
So, get/set the whole firewall at once. If some race condition happen
here, it will end up with one firewall rules set being overwritten by
the other one. But it will still be a consistent rules set.
2017-05-01 02:55:44 +02:00
Marek Marczykowski-Górecki
986b2ec00f
mgmt1: slightly improve formatting
...
Manually wrap long lines to make the table narrower, fix volume
properties list syntax.
2017-05-01 02:55:44 +02:00
Marek Marczykowski-Górecki
4301f735ce
mgmt1: add device options handling
...
Device may be attached with some options - for example "ro=True" for
block devices.
2017-04-29 01:56:24 +02:00
Marek Marczykowski-Górecki
7ec63f5395
mgmt1: add volume.Import method
...
This will allow importing full VM through the Admin API. Important for
"VM import" feature (QubesOS/qubes-issues#2634 ) and "paranoid backup
restore" (QubesOS/qubes-issues#2737 ).
2017-04-29 01:56:24 +02:00
Marek Marczykowski-Górecki
bdb3108763
mgmt1: adjust create/clone methods
...
Allow creating VM with select volumes in non-default pool.
2017-04-29 01:56:17 +02:00
Marek Marczykowski-Górecki
9b3b0ffd04
mgmt1: add mgmt.label.Index and events clarification
2017-04-15 13:59:22 +02:00
Marek Marczykowski-Górecki
8f53500944
mgmt: add redirect from /doc/mgmt/
2017-04-10 01:41:46 +02:00
Marek Marczykowski-Górecki
e6d9a97e8b
mgmt: clarifications, add mgmt.Events
2017-04-10 01:40:24 +02:00
Marek Marczykowski-Górecki
f343ab34b0
mgmt1: fix table syntax, adjust mgmt.pool.add argument
...
This also breaks table layout in plain text (but fixes it in markdown
output).
For mgmt.pool.Add put driver in a argument, as it makes more sense to
use that while writing a policy.
2017-03-10 01:08:34 +01:00
Wojtek Porczyk
8c53b52e30
services/mgmt1: Update table wrt QubesOS/qubes-issues#853
...
It is best to use git diff -b to view this commit.
2017-03-09 16:43:33 +01:00
Marek Marczykowski-Górecki
376efddf0f
mgmt-api: Adjust storage-related calls
2017-03-03 23:14:21 +01:00
Marek Marczykowski-Górecki
35444c9f06
mgmt: adjust return message type definition
...
If we allow interpretation of zero-terminated string, actually force it
in the specification.
2017-02-27 03:10:49 +01:00
Wojtek Porczyk
50d731a564
services/mgmt1: return messages
2017-02-20 19:38:33 +01:00
ecneladis
f6a81592e9
Update list of RPC policies
2017-01-29 12:37:30 +01:00
Jean-Philippe Ouellet
cc8aeead5a
Prefer well defined "disposable" over "throwaway"
2016-12-24 13:39:23 -05:00
Wojtek Porczyk
44872c7a6a
services/mgmt-design: first draft (unfinished)
2016-12-21 18:14:42 +01:00
Wojtek Porczyk
d82e47c449
services/mgmt1: various updates
...
- remove `1` from RPC names
- change `mgmt.vm.Create` wrt class
- misc notes and TODOs
QubesOS/qubes-issues#853
2016-11-24 15:10:41 +01:00
Andrew David Wong
c8b57d86fa
Use new doc-full layout to prevent table scrolling
...
QubesOS/qubes-issues#853
2016-11-19 05:26:25 -08:00
Andrew David Wong
889a830d05
Clean up table source
...
* Use backticks to wrap literal text
* Replace HTML entities with ASCII characters
* Make column spacing uniform
QubesOS/qubes-issues#853
2016-11-19 01:36:28 -08:00
Andrew David Wong
06b2edcbbf
Remove extra table cells; substitute HTML entity for vbar
...
QubesOS/qubes-issues#853
2016-11-19 01:15:58 -08:00
Andrew David Wong
bb99c1a6f1
Convert table to Markdow and remove custom styling
...
QubesOS/qubes-issues#853
2016-11-19 01:15:32 -08:00
Wojtek Porczyk
46d5778b19
Preliminary management API
...
Currently not linked anywhere, on purpose
2016-11-18 22:40:16 +01:00
Jean-Philippe Ouellet
6359f87ecd
Fix issue link
2016-11-11 04:38:16 -05:00
Marek Marczykowski-Górecki
cce10079b3
qrexec: add info about new DispVM options in Qubes 4.0
2016-08-17 01:01:42 +02:00
Andrew David Wong
aadb35d62f
Move all developer documentation to main index
...
QubesOS/qubes-issues#2070
2016-06-20 13:56:20 -07:00
