qusal/salt/sys-firewall/install.sls

{#
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>

SPDX-License-Identifier: AGPL-3.0-or-later
#}

{% if grains['nodename'] != 'dom0' -%}

include:
  - utils.tools.common.update
  - sys-net.install-proxy

"{{ slsdotpath }}-installed":
  pkg.installed:
    - require:
      - sls: utils.tools.common.update
    - install_recommends: False
    - skip_suggestions: True
    - pkgs:
      - fwupd-qubes-vm
      - qubes-core-agent-dom0-updates
      - qubes-core-agent-networking
      - ca-certificates
      - iproute2
      - systemd-timesyncd
      - man-db

{% endif -%}
refactor: initial commit 2023-11-13 14:33:28 +00:00			`{#`
chore: copyright update 2024-01-29 16:49:54 +01:00			`SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>`
refactor: initial commit 2023-11-13 14:33:28 +00:00
			`SPDX-License-Identifier: AGPL-3.0-or-later`
			`#}`

			`{% if grains['nodename'] != 'dom0' -%}`

fix: remove extraneous package repository updates Updates happens multiple times, normally 2 to 3, even if we consider a state without includes. On states with multiple includes, it could easily get approximately 10 updates being ran. This behavior leads to unnecessary network bandwidth being spent and more time to run the installation state. When the connection is slow and not using the cacher, such as torified connections on Whonix, the installation can occurs much faster. Adding external repositories has to be done prior to update to ensure it is also fetched. Fixes: https://github.com/ben-grande/qusal/issues/29 2024-03-18 16:29:01 +01:00			`include:`
			`- utils.tools.common.update`
feat: add TCP proxy for remote hosts Ideally, it would be a Qrexec socket service, but it doesn't handle DNS, only accepting IPs. The dev qube is now non-networked and network, especially to remote git repositories can be acquired via the proxy that is going to be installed in every netvm. 2024-06-13 18:01:08 +02:00			`- sys-net.install-proxy`
refactor: initial commit 2023-11-13 14:33:28 +00:00
			`"{{ slsdotpath }}-installed":`
			`pkg.installed:`
fix: remove extraneous package repository updates Updates happens multiple times, normally 2 to 3, even if we consider a state without includes. On states with multiple includes, it could easily get approximately 10 updates being ran. This behavior leads to unnecessary network bandwidth being spent and more time to run the installation state. When the connection is slow and not using the cacher, such as torified connections on Whonix, the installation can occurs much faster. Adding external repositories has to be done prior to update to ensure it is also fetched. Fixes: https://github.com/ben-grande/qusal/issues/29 2024-03-18 16:29:01 +01:00			`- require:`
			`- sls: utils.tools.common.update`
refactor: initial commit 2023-11-13 14:33:28 +00:00			`- install_recommends: False`
			`- skip_suggestions: True`
			`- pkgs:`
fix: install fwupd qubes plugin to updatevm 2024-05-11 03:31:49 +02:00			`- fwupd-qubes-vm`
refactor: initial commit 2023-11-13 14:33:28 +00:00			`- qubes-core-agent-dom0-updates`
			`- qubes-core-agent-networking`
			`- ca-certificates`
			`- iproute2`
feat: move clockvm out of sys-net to sys-firewall 2023-12-21 23:38:39 +01:00			`- systemd-timesyncd`
feat: add manual page reader Ability to read the program's manual from the terminal is much better than to ask the user to search the manual page on the internet, we already trust the installed program and documentation, but we should not trust every manual page on the internet. 2024-05-28 11:00:04 +02:00			`- man-db`
refactor: initial commit 2023-11-13 14:33:28 +00:00
			`{% endif -%}`