Commit Graph

41 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
caf8dfb91a
admin-api: fix default= definition in property.Get
The actual value used there is `True` or `False`
2017-06-25 01:31:38 +02:00
Marek Marczykowski-Górecki
b3b91c8baf
admin-api: clone operation with a token
This way complete operation require policy approval for both source and
destination volumes
2017-06-25 01:31:38 +02:00
Marek Marczykowski-Górecki
b160399f9b
admin-api: add volume.Clone
It is needed for VM clone operation: we have volume.Import, but not
volume.Export - at least not yet. And doing export+import would be very
inefficient, especially on smart storage pools (like LVM).
2017-06-19 00:16:24 +02:00
Marek Marczykowski-Górecki
3d6870656b
admin-api: remove clone operation
Can be achieved using other operations.
2017-06-19 00:08:07 +02:00
Wojtek Porczyk
a43d14339e admin-api: fix html ents 2017-06-14 11:26:07 +02:00
Wojtek Porczyk
feeeb6da8d admin-api: description of the tags 2017-06-14 11:22:52 +02:00
Marek Marczykowski-Górecki
ecbfeb2e73
admin-api update
1. Drop separate admin.vm.microphone.* calls - lets use
admin.vm.device.mic.* for this. Yes, this means microphone cannot
be attached to multiple VMs at the same time (which is regression vs
Qubes 3.2). But this is a good thing from security point of view.

2. Drop admin.backup.Restore - use standard Admin API methods
(admin.vm.Create, admin.vm.volume.Import etc)

Cc: @kalkin
2017-05-23 00:10:10 +02:00
Marek Marczykowski-Górecki
fa79d40d66
admin-api: fix misplaced comment about device assignment options 2017-05-15 14:25:05 +02:00
Marek Marczykowski-Górecki
eb484c383b
Rename Mgmt API to Admin API
QubesOS/qubes-issues#853
2017-05-11 22:39:53 +02:00
Marek Marczykowski-Górecki
c1cc28b3c4
mgmt: add two notes
As discussed here:
https://github.com/QubesOS/qubes-core-admin/pull/100#discussion_r115726151
https://github.com/QubesOS/qubes-core-admin/pull/100#discussion_r115725705
2017-05-10 15:16:21 +02:00
Marek Marczykowski-Górecki
fe3bcf2d89
Merge remote-tracking branch 'origin/pr/414' into https
* origin/pr/414:
  blogspot -> https://blog.invisiblethings.org/
2017-05-06 23:38:04 +02:00
Marek Marczykowski-Górecki
301fc9f312
Merge remote-tracking branch 'origin/pr/413' into https
* origin/pr/413:
  blogspot -> https://blog.invisiblethings.org/
2017-05-06 23:38:04 +02:00
InstantGratimification
49e4af2262 blogspot -> https://blog.invisiblethings.org/ 2017-05-03 15:26:39 +00:00
InstantGratimification
e0837e6180 blogspot -> https://blog.invisiblethings.org/ 2017-05-03 15:25:31 +00:00
InstantGratimification
03cbaa5b84 Update qmemman.md 2017-05-03 15:00:56 +00:00
Marek Marczykowski-Górecki
ea7c0b280c
mgmt1: clarify devices handling, add options support
- devices can be attached with some options (like 'ro=True' for block
  devices)
- clarify that backend domain and device ident is separated with '+'
  (':' is not allowed in qrexec call argument)
- clarify how to attach devices "persistently"
2017-05-01 02:55:44 +02:00
Marek Marczykowski-Górecki
141ed82589
mgmt1: rethink firewall Admin API
Handling each rule separately makes sense on from qvm-firewall tool
point of view, but not from overall configuration integrity. If multiple
tools try to configure firewall simultaneously, doing it at individual
rules level can end very badly.
So, get/set the whole firewall at once. If some race condition happen
here, it will end up with one firewall rules set being overwritten by
the other one. But it will still be a consistent rules set.
2017-05-01 02:55:44 +02:00
Marek Marczykowski-Górecki
986b2ec00f
mgmt1: slightly improve formatting
Manually wrap long lines to make the table narrower, fix volume
properties list syntax.
2017-05-01 02:55:44 +02:00
Marek Marczykowski-Górecki
4301f735ce
mgmt1: add device options handling
Device may be attached with some options - for example "ro=True" for
block devices.
2017-04-29 01:56:24 +02:00
Marek Marczykowski-Górecki
7ec63f5395
mgmt1: add volume.Import method
This will allow importing full VM through the Admin API. Important for
"VM import" feature (QubesOS/qubes-issues#2634) and "paranoid backup
restore" (QubesOS/qubes-issues#2737).
2017-04-29 01:56:24 +02:00
Marek Marczykowski-Górecki
bdb3108763
mgmt1: adjust create/clone methods
Allow creating VM with select volumes in non-default pool.
2017-04-29 01:56:17 +02:00
Marek Marczykowski-Górecki
9b3b0ffd04
mgmt1: add mgmt.label.Index and events clarification 2017-04-15 13:59:22 +02:00
Marek Marczykowski-Górecki
8f53500944
mgmt: add redirect from /doc/mgmt/ 2017-04-10 01:41:46 +02:00
Marek Marczykowski-Górecki
e6d9a97e8b
mgmt: clarifications, add mgmt.Events 2017-04-10 01:40:24 +02:00
Marek Marczykowski-Górecki
f343ab34b0
mgmt1: fix table syntax, adjust mgmt.pool.add argument
This also breaks table layout in plain text (but fixes it in markdown
output).

For mgmt.pool.Add put driver in a argument, as it makes more sense to
use that while writing a policy.
2017-03-10 01:08:34 +01:00
Wojtek Porczyk
8c53b52e30 services/mgmt1: Update table wrt QubesOS/qubes-issues#853
It is best to use git diff -b to view this commit.
2017-03-09 16:43:33 +01:00
Marek Marczykowski-Górecki
376efddf0f
mgmt-api: Adjust storage-related calls 2017-03-03 23:14:21 +01:00
Marek Marczykowski-Górecki
35444c9f06
mgmt: adjust return message type definition
If we allow interpretation of zero-terminated string, actually force it
in the specification.
2017-02-27 03:10:49 +01:00
Wojtek Porczyk
50d731a564 services/mgmt1: return messages 2017-02-20 19:38:33 +01:00
ecneladis
f6a81592e9 Update list of RPC policies 2017-01-29 12:37:30 +01:00
Jean-Philippe Ouellet
cc8aeead5a Prefer well defined "disposable" over "throwaway" 2016-12-24 13:39:23 -05:00
Wojtek Porczyk
44872c7a6a services/mgmt-design: first draft (unfinished) 2016-12-21 18:14:42 +01:00
Wojtek Porczyk
d82e47c449 services/mgmt1: various updates
- remove `1` from RPC names
- change `mgmt.vm.Create` wrt class
- misc notes and TODOs

QubesOS/qubes-issues#853
2016-11-24 15:10:41 +01:00
Andrew David Wong
c8b57d86fa
Use new doc-full layout to prevent table scrolling
QubesOS/qubes-issues#853
2016-11-19 05:26:25 -08:00
Andrew David Wong
889a830d05
Clean up table source
* Use backticks to wrap literal text
* Replace HTML entities with ASCII characters
* Make column spacing uniform

QubesOS/qubes-issues#853
2016-11-19 01:36:28 -08:00
Andrew David Wong
06b2edcbbf
Remove extra table cells; substitute HTML entity for vbar
QubesOS/qubes-issues#853
2016-11-19 01:15:58 -08:00
Andrew David Wong
bb99c1a6f1
Convert table to Markdow and remove custom styling
QubesOS/qubes-issues#853
2016-11-19 01:15:32 -08:00
Wojtek Porczyk
46d5778b19 Preliminary management API
Currently not linked anywhere, on purpose
2016-11-18 22:40:16 +01:00
Jean-Philippe Ouellet
6359f87ecd
Fix issue link 2016-11-11 04:38:16 -05:00
Marek Marczykowski-Górecki
cce10079b3
qrexec: add info about new DispVM options in Qubes 4.0 2016-08-17 01:01:42 +02:00
Andrew David Wong
aadb35d62f
Move all developer documentation to main index
QubesOS/qubes-issues#2070
2016-06-20 13:56:20 -07:00