qubes-mirage-firewall

Git-Mirrors/qubes-mirage-firewall

Fork 0

mirror of https://github.com/mirage/qubes-mirage-firewall.git synced 2025-10-28 13:11:09 -04:00

Commit graph

b318fabd43

Merge pull request #191 from palainp/podman Pierre Alain 2024-01-30 11:07:33 +01:00
0c82df4198

Merge c003148ebe into 2ca22cad79 InIPFS 2024-01-15 05:27:41 -07:00
2ca22cad79

Merge pull request #190 from palainp/check-opam-hash Pierre Alain 2024-01-05 17:06:30 +01:00
58bc2a7a9f

Merge pull request #189 from palainp/revert-to-32Mb Pierre Alain 2024-01-05 17:05:11 +01:00
16a50aad9b allow podman as building system Pierre Alain 2023-12-26 11:12:06 +01:00
d2b72f6a87 set back recommended memory amount to 32MB Pierre Alain 2023-12-26 10:45:13 +01:00
b9c8674b52 check opam hashsum in Dockerfile Pierre Alain 2023-11-09 14:41:16 +01:00
b944978bce

Merge pull request #185 from palainp/fix-docker-build v0.8.6 Pierre Alain 2023-11-08 16:36:36 +01:00
90de455fdb update disk size requirement Pierre Alain 2023-11-08 12:13:11 +01:00
2e86ea2ad3 pin to specific overlays hashes Pierre Alain 2023-11-08 10:20:59 +01:00
95f165a059 change snapshots for debian ones Pierre Alain 2023-11-07 13:47:12 +01:00
173832e053 comply with SELinux enforcement AppVM Pierre Alain 2023-10-13 09:21:40 +02:00
700e03de85

Merge pull request #181 from 51lieal/51lieal_patch1 Pierre Alain 2023-09-11 15:24:06 +02:00
708040c3b4

Increase RAM on default install Dimas Alexander 2023-09-11 18:55:32 +07:00
95c870b14e

Using too little RAM causes Mirage to stop working. Dimas Alexander 2023-09-10 19:10:07 +07:00
27bf8c0cae

Merge pull request #180 from 100111001/main Pierre Alain 2023-09-05 12:29:13 +02:00
354c251701

Changed hard coded templates to default templates from qubes 100111001 2023-08-23 14:56:47 +02:00
4dda3f513c

Added description how to run salt states 100111001 2023-08-23 14:48:29 +02:00
50306112ff

Merge pull request #179 from 100111001/100111001-Readme-Adjustments Pierre Alain 2023-08-18 12:59:08 +02:00
6df70c1b35

Update README.md - using correct formating 100111001 2023-08-18 00:46:39 +02:00
3006c14453 Create SaltScriptToDownloadAndInstallMirageFirewallInQubes.sls 100111001 2023-08-18 00:16:32 +02:00
c87f2305ab

Update README.md for using SaltScriptToDownloadAndInstallMirageFirewallInQubes.sls 100111001 2023-08-18 00:27:06 +02:00
4fde2df804

bump mirage-net-xen version Pierre Alain 2023-07-30 17:28:52 +02:00
27236eafac do not forget to disconnect layers palainp 2023-07-16 18:37:38 +02:00
1ad5644553 catch exception in IpMap.find palainp 2023-07-16 18:26:38 +02:00
e6fd4e8646 more catch around writes fix uncaught exceptions due to remaining promises when changing uplink palainp 2023-07-14 14:48:19 +02:00
82d5a239fc catch arp packet failure: potential packets created before an uplink change and pending to be sent palainp 2023-07-12 16:51:03 +02:00
2d822302d8 remove delay as the fix should be in mirage-net-xen palainp 2023-07-12 16:10:33 +02:00
6f6eab5cd5 minor changes palainp 2023-07-11 14:33:09 +02:00
f7bfa0299e put uplink disconnect into a Lwt.Canceled callback palainp 2023-07-11 14:26:12 +02:00
a62e81314e

Merge pull request #2 from palainp/sync Pierre Alain 2023-07-10 17:06:35 +02:00
6588871def

Merge branch 'common-vif' into sync Pierre Alain 2023-07-10 17:06:13 +02:00
764e95e5be WIP: - merge router+uplink+client_net+firewall into a single dispatcher file - watch qubesDB for netvm update - dynamic netvm should works - without netvm (but command line options) forward packet to a client, and warn the user if the "netvm" is not connected - apply ocamlformat palainp 2023-07-05 11:56:19 +02:00
a321287f2f

Merge pull request #175 from palainp/update-shasum v0.8.5 Pierre Alain 2023-07-05 18:04:20 +02:00
e4f4c3e958 changes for 0.8.5 Hannes Mehnert 2023-07-05 17:34:20 +02:00
8e87f2e9e0 update sha Hannes Mehnert 2023-07-05 17:14:14 +02:00
a34aab52e9

Apply suggestions from code review Hannes Mehnert 2023-07-05 17:06:00 +02:00
81a87fd526

Merge branch 'main' into update-shasum Hannes Mehnert 2023-07-05 16:59:38 +02:00
a33bb5ee7d

Merge pull request #176 from palainp/no-memreport Hannes Mehnert 2023-07-05 16:57:30 +02:00
e055f810c7 update hashsum palainp 2023-07-01 17:26:34 +02:00
95812a7458 fix default DNS addresses palainp 2023-07-01 16:49:07 +02:00
ee2409dc61 fallback to the command line specified uplink interface if no netvm interface palainp 2023-07-01 11:56:14 +02:00
7f5729a12d prevent usage of both command line options and netvm property palainp 2023-07-01 10:46:55 +02:00
e99e80b150 only set clients when we have a correct netvm IP address palainp 2023-06-30 17:57:08 +02:00
e5349c22a7 do not stop the unikernel if netvm is None palainp 2023-06-30 17:13:56 +02:00
fe99021dc0 add minimal README information about using mirage-firewall without netvm palainp 2023-06-30 17:06:17 +02:00
55b2f19196 add optional uplink interface palainp 2023-06-30 16:58:08 +02:00
de9a1dbd1c add the network_config to the router palainp 2023-06-30 15:33:41 +02:00
5a0711bb2d in Qubes doc client_our_ip is always netvm_our_ip palainp 2023-06-30 15:31:30 +02:00
9cabe7e303 allow to have no netvm defined (will fail on uplink.connect) palainp 2023-06-30 13:59:03 +02:00
b288481d2f remove memreport to Xen to avoid Qubes trying to get back some memory from us palainp 2023-05-26 10:27:29 +02:00
d3e8e691fd do not check valid-until in debian release file: this permits to keep a debian packages list more than one week palainp 2023-05-16 11:18:34 +02:00
ffc8e95bc3 create a shasum file matching the tarball release palainp 2023-04-25 10:16:57 +02:00
cbf6c8c941 update build script palainp 2023-04-18 11:46:45 +02:00
c003148ebe

Improve workflow InIPFS 2022-12-09 02:51:20 +00:00
609f5295c7 changes for 0.8.4 v0.8.4 Hannes Mehnert 2022-12-07 20:44:00 +01:00
09740b7e12

Merge pull request #167 from hannesm/update Hannes Mehnert 2022-12-07 20:40:52 +01:00
916813b6ea update hash of build product Hannes Mehnert 2022-12-07 20:00:55 +01:00
0c3959af04 update opam repository commit to get solo5 0.7.5 Hannes Mehnert 2022-12-07 19:15:44 +01:00
54dfd05ab5

Merge pull request #164 from hannesm/action Hannes Mehnert 2022-11-17 12:39:37 +01:00
9239aa5277 github action: check checksum before uploading Hannes Mehnert 2022-11-13 15:58:00 +01:00
ba6629f4ca Reproducible build systems: use in GitHub action the build-with-docker.sh Hannes Mehnert 2022-11-13 12:22:59 +01:00
ee45c7ba3d

Merge pull request #163 from hannesm/next v0.8.3 Hannes Mehnert 2022-11-11 16:43:26 +01:00
b414230735 Dockerfile: install ocaml-solo5 earlier to help caching more Hannes Mehnert 2022-11-11 15:59:06 +01:00
2023cc4655 changes for 0.8.3, and checksum updates Hannes Mehnert 2022-11-11 15:12:30 +01:00
20ce084a49 set netchannel + mirage-nat lower bounds Hannes Mehnert 2022-11-11 13:37:43 +01:00
e8e03fe6a6 My_nat.free_udp_port: avoid looping forever, use last_resort_port earlier Hannes Mehnert 2022-11-08 18:57:09 +01:00
d094b20950 use a fresh client for requesting vif and ip Hannes Mehnert 2022-11-10 23:08:21 +01:00
0e0917f4fe DNS: start task reading Lwt_mvar and distributing DNS replies to clients Hannes Mehnert 2022-11-11 12:07:06 +01:00
ddfb17c0b2 remove unused integer module, intset, intmap Hannes Mehnert 2022-11-11 11:35:37 +01:00
33c7c24dfd code cleanups (removed profile release from dune-workspace to find some warnings) Hannes Mehnert 2022-11-11 11:11:38 +01:00
ecc5cbc409 fix github action Hannes Mehnert 2022-11-11 14:32:31 +01:00
af60225671 github action: something sets OPAMCLI to 2.0, so no --confirm-level=yes available Hannes Mehnert 2022-11-11 13:58:46 +01:00
7370ba85f6 github action should be in .github/workflows Hannes Mehnert 2022-11-11 13:46:29 +01:00
f7dc9fb418 remove unused integer module, intset, intmap Hannes Mehnert 2022-11-11 11:35:37 +01:00
bc1c265b50 code cleanups (removed profile release from dune-workspace to find some warnings) Hannes Mehnert 2022-11-11 11:11:38 +01:00
bed0aa5cc4 add github action to compile the firewall Hannes Mehnert 2022-11-11 13:40:04 +01:00
751c454dbe DNS: start task reading Lwt_mvar and distributing DNS replies to clients Hannes Mehnert 2022-11-11 12:07:06 +01:00
f127ab6616 use a fresh client for requesting vif and ip Hannes Mehnert 2022-11-10 23:08:21 +01:00
d0733da725 My_nat.free_udp_port: avoid looping forever, use last_resort_port earlier Hannes Mehnert 2022-11-08 18:57:09 +01:00
b09acdeec2

Merge pull request #154 from hannesm/dns-6.4.0 Hannes Mehnert 2022-10-27 15:05:39 +02:00
2afa24536d update to dns 6.4.0 Hannes Mehnert 2022-10-27 11:24:59 +02:00
07da67c8cf changes for 0.8.2 v0.8.2 Hannes Mehnert 2022-10-12 09:09:03 +02:00
065c8bb69a

Merge pull request #152 from hannesm/next-release Hannes Mehnert 2022-10-12 09:05:55 +02:00
b958c10690 build-with-docker: update sha Hannes Mehnert 2022-10-11 13:55:36 +02:00
c66d6a8727 raise lower bound of mirage-nat to 3.0.0, bump opam-repo commit Hannes Mehnert 2022-10-11 13:34:55 +02:00
93b92c041b Adapt to mirage-nat changes: allow pick_free_port to fail reserve a special udp port for dns (as last resort) Hannes Mehnert 2022-10-08 10:50:29 +02:00
f2d3faf1da revise port management Hannes Mehnert 2022-10-07 20:54:49 +02:00
8187096bfa updates to recent mirage-nat changes Hannes Mehnert 2022-10-07 18:49:03 +02:00
06b9a88331 remove unneeded logs: be silent if the GC is enough palainp 2022-10-09 12:38:44 +02:00
eb4d0fc371 update documentation palainp 2022-10-06 18:06:18 +02:00
abb508000e remove memory management code not needed anymore palainp 2022-10-06 18:06:02 +02:00
adbbd4e3a5 remove unneeded logs: be silent if the GC is enough palainp 2022-10-09 12:38:44 +02:00
dd977a068a Adapt to mirage-nat changes: allow pick_free_port to fail reserve a special udp port for dns (as last resort) Hannes Mehnert 2022-10-08 10:50:29 +02:00
1aa3f7c883 revert default to 5000 nat entries palainp 2022-10-08 10:37:38 +02:00
90829920ae revise port management Hannes Mehnert 2022-10-07 20:54:49 +02:00
23f691ac23 updates to recent mirage-nat changes Hannes Mehnert 2022-10-07 18:49:03 +02:00
3957b47a62 update hash for docker build palainp 2022-10-06 18:06:31 +02:00
1c5442a958 update documentation palainp 2022-10-06 18:06:18 +02:00
f1315389ed remove memory management code not needed anymore palainp 2022-10-06 18:06:02 +02:00