Opened 23 months ago

Closed 22 months ago

#250 closed defect (fixed)

Blacklist useless/danagerous updates in a VM

Reported by: joanna Owned by: joanna
Priority: major Milestone: Release 1 Beta 2
Component: core Keywords:
Cc:

Description

  • kernel
  • Xorg

Change History (6)

comment:1 Changed 23 months ago by joanna

  • Priority changed from major to minor

comment:2 Changed 22 months ago by joanna

  • Priority changed from minor to major

This is especially annoying now, when we do not install our own kernel in VMs and when we have read-only /lib/modules. Any update of the template will likely want to update the kernel, which however fails because of the above.

So, we should really black list installation of kernel via yum. Alternatively we should not install kernel package in the VM -- can this be done easily?

comment:3 Changed 22 months ago by marmarek

exclude= setting in yum.conf should do the work.

comment:4 Changed 22 months ago by joanna

Indeed, adding:

exclude=kernel, xorg-*

at the end of /etc/yum.conf, solves the problem. Questions:

1) Do we want to add this option as part of e.g. qubes-corevm's %post?
2) Do we want to blacklist some more packages?

comment:5 Changed 22 months ago by joanna

  • Status changed from new to accepted
Note: See TracTickets for help on using tickets.