Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/xyhhx/qubes-salt

rewriting my qubes setup as salt formulae
https://github.com/xyhhx/qubes-salt

qubes qubes-os salt saltstack

Last synced: about 1 month ago
JSON representation

rewriting my qubes setup as salt formulae

Awesome Lists containing this project

README

        

# my qubes os saltstack configuration

an attempt to rewrite my qubes os setup as saltstack configuration.

[canonical source](https://git.sr.ht/~xyhhx/qubes-salt)

mirrors:

[github](https://github.com/xyhhx/qubes-salt) | [codeberg](https://codeberg.org/xyhhx/qubes-salt)

[![Hippocratic License HL3-FULL](https://img.shields.io/static/v1?label=Hippocratic%20License&message=HL3-FULL&labelColor=5e2751&color=bc8c3d)](https://firstdonoharm.dev/version/3/0/full.html)

---

## setting up

The following steps assume the code has been cloned into a qube named `disp420` into `/home/user/code/qubes-salt`

- add `/srv/user/{formulas,pillar,salt}` to `/etc/salt/minion.d/f_defaults.conf`
- a patchfile and helper script are available in `./scripts`, but the changes are trivial and can be done manually
- to use the helper script, dom0 needs `rsync` and the domU you clone this repo into needs `bzip2`
- clone this repo into a qube
- from dom0, copy in the lift script:

```sh
qvm-run -p disp420 'cat /home/user/code/qubes-salt/scripts/lift.sh' > lift.sh && chmod +x lift.sh
```

- consider auditing that script

- use the script to "lift" the code from the domU into dom0:

```sh
./lift.sh disp420 /home/user/code/qubes-salt
```

---

some references i referred to (thanks!):

- https://git.drkhsh.at/salt-n-pepper/file/README.md.html
- https://forum.qubes-os.org/t/qubes-salt-beginners-guide/20126