Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2025-01-11 07:29:33 -05:00
Code Issues Packages Projects Releases Wiki Activity

feat: remove audiovm setting when unnecessary

Browse Source 
Decrease audio attack surface to qubes that will never need to use it.
This commit is contained in:
Ben Grande 2024-01-20 19:34:39 +01:00
parent 71dd9a5280
commit 422b01e0f6
38 changed files with 471 additions and 159 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
salt/ansible/create.sls
View File

@ -15,6 +15,7 @@ force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
- memory: 300
- maxmem: 400
features:
@ -24,6 +25,7 @@ features:
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
require:
@ -35,6 +37,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: purple
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 400
- maxmem: 500
@ -61,6 +64,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: purple
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 400
- maxmem: 500

2
salt/browser/create.sls
View File

@ -15,6 +15,7 @@ force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
- memory: 300
- maxmem: 2000
features:
@ -34,6 +35,7 @@ present:
- label: red
prefs:
- label: red
- audiovm: "*default*"
- memory: 300
- maxmem: 2000
- vcpus: 1

42
salt/debian-minimal/create.sls
View File

@ -17,6 +17,27 @@ include:
- {{ template.template_clean }}-dvm
- {{ template.template }}-dvm
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ template.template_clean }}.clone
present:
- label: black
prefs:
- label: black
- audiovm: ""
- memory: 300
- maxmem: 600
- vcpus: 1
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ template.template_clean }}
force: True
@ -28,6 +49,7 @@ present:
prefs:
- template: {{ template.template }}
- label: red
- audiovm: ""
- memory: 300
- maxmem: 400
- vcpus: 1
@ -41,26 +63,6 @@ features:
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ template.template_clean }}.clone
present:
- label: black
prefs:
- label: black
- memory: 300
- maxmem: 600
- vcpus: 1
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
"{{ slsdotpath }}-set-default_template":
cmd.run:
- name: qubes-prefs default_template {{ template.template }}

44
salt/debian-xfce/create.sls
View File

@ -17,6 +17,27 @@ include:
- {{ template.template_clean }}-dvm
- {{ template.template }}-dvm
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ slsdotpath }}.clone
present:
- label: black
prefs:
- label: black
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ template.template_clean }}
force: True
@ -28,9 +49,10 @@ present:
prefs:
- template: {{ template.template }}
- label: red
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 800
- vcpus: 1
- template_for_dispvms: True
- include_in_backups: False
features:
@ -40,23 +62,3 @@ features:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ slsdotpath }}.clone
present:
- label: black
prefs:
- label: black
- memory: 300
- maxmem: 600
- vcpus: 1
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}

44
salt/debian/create.sls
View File

@ -17,6 +17,27 @@ include:
- {{ template.template_clean }}-dvm
- {{ template.template }}-dvm
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ slsdotpath }}.clone
present:
- label: black
prefs:
- label: black
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ template.template_clean }}
force: True
@ -28,9 +49,10 @@ present:
prefs:
- template: {{ template.template }}
- label: red
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 800
- vcpus: 1
- template_for_dispvms: True
- include_in_backups: False
features:
@ -40,23 +62,3 @@ features:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ slsdotpath }}.clone
present:
- label: black
prefs:
- label: black
- memory: 300
- maxmem: 600
- vcpus: 1
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}

13
salt/dev/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -20,6 +30,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: purple
- audiovm: ""
- vcpus: 1
- memory: 400
- maxmem: 600
@ -46,6 +57,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- audiovm: ""
- vcpus: 1
- memory: 400
- maxmem: 600
@ -73,6 +85,7 @@ present:
prefs:
- template: dvm-{{ slsdotpath }}
- label: red
- audiovm: ""
- vcpus: 1
- memory: 400
- maxmem: 600

44
salt/fedora-minimal/create.sls
View File

@ -17,6 +17,27 @@ include:
- {{ template.template_clean }}-dvm
- {{ template.template }}-dvm
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ template.template_clean }}.clone
present:
- label: black
prefs:
- label: black
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ template.template_clean }}
force: True
@ -28,9 +49,10 @@ present:
prefs:
- template: {{ template.template }}
- label: red
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 400
- vcpus: 1
- template_for_dispvms: True
- include_in_backups: False
features:
@ -40,23 +62,3 @@ features:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ template.template_clean }}.clone
present:
- label: black
prefs:
- label: black
- memory: 300
- maxmem: 600
- vcpus: 1
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}

44
salt/fedora-xfce/create.sls
View File

@ -17,6 +17,27 @@ include:
- {{ template.template_clean }}-dvm
- {{ template.template }}-dvm
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ template.template_clean }}.clone
present:
- label: black
prefs:
- label: black
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ template.template_clean }}
force: True
@ -28,9 +49,10 @@ present:
prefs:
- template: {{ template.template }}
- label: red
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 400
- vcpus: 1
- template_for_dispvms: True
- include_in_backups: False
features:
@ -40,23 +62,3 @@ features:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ template.template_clean }}.clone
present:
- label: black
prefs:
- label: black
- memory: 300
- maxmem: 600
- vcpus: 1
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}

42
salt/fedora/create.sls
View File

@ -17,6 +17,27 @@ include:
- {{ template.template_clean }}-dvm
- {{ template.template }}-dvm
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ template.template_clean }}.clone
present:
- label: black
prefs:
- label: black
- audiovm: ""
- memory: 300
- maxmem: 600
- vcpus: 1
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ template.template_clean }}
force: True
@ -28,6 +49,7 @@ present:
prefs:
- template: {{ template.template }}
- label: red
- audiovm: ""
- memory: 300
- maxmem: 400
- vcpus: 1
@ -40,23 +62,3 @@ features:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ template.template_clean }}.clone
present:
- label: black
prefs:
- label: black
- memory: 300
- maxmem: 600
- vcpus: 1
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}

11
salt/fetcher/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ slsdotpath }}
force: True
@ -20,6 +30,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- audiovm: ""
- memory: 300
- maxmem: 500
- vcpus: 1

42
salt/kicksecure-minimal/create.sls
View File

@ -23,6 +23,27 @@ include:
- pkgs:
- grub2-xen-pvh
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ slsdotpath }}.clone
present:
- label: black
prefs:
- label: black
- audiovm: ""
- memory: 300
- maxmem: 600
- vcpus: 2
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ template.template_clean }}
force: True
@ -34,6 +55,7 @@ present:
prefs:
- template: {{ template.template }}
- label: red
- audiovm: ""
- memory: 300
- maxmem: 600
- vcpus: 1
@ -49,23 +71,3 @@ tags:
- updatevm-sys-cacher
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ template.template }}
force: True
require:
- sls: {{ slsdotpath }}.clone
present:
- label: black
prefs:
- label: black
- memory: 300
- maxmem: 600
- vcpus: 2
- include_in_backups: False
features:
- set:
- menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}

19
salt/media/create.sls
View File

@ -7,11 +7,21 @@ SPDX-License-Identifier: AGPL-3.0-or-later
{%- from "qvm/template.jinja" import load -%}
{%- import "templates/debian-minimal.jinja" as template -%}
{%- import "debian-minimal/template.jinja" as template -%}
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -24,6 +34,7 @@ prefs:
- template: {{ template.template }}
- label: yellow
- netvm: ""
- audiovm: ""
- vcpus: 2
- memory: 300
- maxmem: 800
@ -51,9 +62,10 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: yellow
- netvm: ""
- audiovm: "*default*"
- vcpus: 2
- memory: 300
- maxmem: 800
- vcpus: 2
- template_for_dispvms: True
- include_in_backups: False
features:
@ -78,8 +90,9 @@ present:
prefs:
- template: dvm-{{ slsdotpath }}
- label: yellow
- vcpus: 2
- netvm: ""
- audiovm: "*default*"
- vcpus: 2
- memory: 300
- maxmem: 800
- autostart: False

13
salt/mgmt/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ slsdotpath }}
force: True
@ -21,10 +31,11 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: black
- netvm: ""
- audiovm: ""
- dispvm-allowed: True
- vcpus: 1
- memory: 300
- maxmem: 600
- vcpus: 1
- autostart: False
- template_for_dispvms: True
- include_in_backups: False

13
salt/mirage-builder/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -20,6 +30,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: gray
- audiovm: ""
- vcpus: 2
- memory: 400
- maxmem: 600
@ -43,6 +54,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- audiovm: ""
- vcpus: 2
- memory: 400
- maxmem: 600
@ -70,6 +82,7 @@ present:
prefs:
- template: dvm-{{ slsdotpath }}
- label: red
- audiovm: ""
- vcpus: 2
- memory: 400
- maxmem: 600

3
salt/mutt/create.sls
View File

@ -14,6 +14,8 @@ name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
features:
- set:
- menu-items: "mutt.desktop qubes-run-terminal.desktop qubes-start.desktop"
@ -32,6 +34,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: yellow
- audiovm: ""
- vcpus: 1
- memory: 200
- maxmem: 350

12
salt/qubes-builder/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ slsdotpath }}
force: True
@ -20,6 +30,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- audiovm: ""
- vcpus: 2
- memory: 400
- maxmem: 2000
@ -46,6 +57,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: gray
- audiovm: ""
- memory: 800
- maxmem: 8000
- vcpus: 4

9
salt/reader/create.sls
View File

@ -16,12 +16,13 @@ force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
- memory: 300
- maxmem: 2000
features:
- set:
- default-menu-items: "firefox-esr.desktop chromium.desktop google-chrome.desktop qubes-run-terminal.desktop qubes-start.desktop libreoffice-base.desktop libreoffice-calc.desktop libreoffice-draw.desktop libreoffice-impress.desktop libreoffice-math.desktop libreoffice-startcenter.desktop libreoffice-writer.desktop org.gnome.Evince.desktop qubes-open-file-manager.desktop" # noqa: 204
- menu-items: "firefox-esr.desktop chromium.desktop google-chrome.desktop qubes-run-terminal.desktop qubes-start.desktop libreoffice-base.desktop libreoffice-calc.desktop libreoffice-draw.desktop libreoffice-impress.desktop libreoffice-math.desktop libreoffice-startcenter.desktop libreoffice-writer.desktop org.gnome.Evince.desktop qubes-open-file-manager.desktop" # noqa: 204
- default-menu-items: "qubes-run-terminal.desktop qubes-start.desktop"
- menu-items: "qubes-run-terminal.desktop qubes-start.desktop"
{%- endload %}
{{ load(defaults) }}
@ -37,6 +38,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: ""
- memory: 400
- maxmem: 700
- vcpus: 1
@ -46,7 +48,8 @@ features:
- enable:
- appmenus-dispvm
- set:
- menu-items: "qubes-run-terminal.desktop qubes-start.desktop"
- default-menu-items: "firefox-esr.desktop chromium.desktop google-chrome.desktop qubes-run-terminal.desktop qubes-start.desktop libreoffice-base.desktop libreoffice-calc.desktop libreoffice-draw.desktop libreoffice-impress.desktop libreoffice-math.desktop libreoffice-startcenter.desktop libreoffice-writer.desktop org.gnome.Evince.desktop qubes-open-file-manager.desktop" # noqa: 204
- menu-items: "firefox-esr.desktop chromium.desktop google-chrome.desktop qubes-run-terminal.desktop qubes-start.desktop libreoffice-base.desktop libreoffice-calc.desktop libreoffice-draw.desktop libreoffice-impress.desktop libreoffice-math.desktop libreoffice-startcenter.desktop libreoffice-writer.desktop org.gnome.Evince.desktop qubes-open-file-manager.desktop" # noqa: 204
{%- endload %}
{{ load(defaults) }}

6
salt/remmina/create.sls
View File

@ -14,6 +14,8 @@ name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
features:
- set:
- default-menu-items: "qubes-run-terminal.desktop qubes-start.desktop org.remmina.Remmina.desktop"
@ -32,9 +34,10 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: orange
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600
- vcpus: 1
- template_for_dispvms: True
- include_in_backups: False
features:
@ -56,6 +59,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: orange
- audiovm: ""
- memory: 300
- maxmem: 600
- vcpus: 1

3
salt/signal/create.sls
View File

@ -15,6 +15,8 @@ name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
features:
- set:
- menu-items: "signal-desktop.desktop qubes-open-file-manager.desktop qubes-run-terminal.desktop qubes-start.desktop"
@ -34,6 +36,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: yellow
- audiovm: "*default*"
- vcpus: 1
- memory: 400
- maxmem: 600

12
salt/ssh/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -20,6 +30,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: purple
- audiovm: ""
- vcpus: 1
- memory: 400
- maxmem: 500
@ -43,6 +54,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: purple
- audiovm: ""
- vcpus: 1
- memory: 400
- maxmem: 500

12
salt/sys-audio/create.sls
View File

@ -8,6 +8,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ slsdotpath }}
force: True
@ -20,6 +30,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: ""
- memory: 400
- maxmem: 0
- vcpus: 1
@ -52,6 +63,7 @@ prefs:
- template: dvm-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: disp-{{ slsdotpath }}
- include_in_backups: False
- pci_strictreset: False
- autostart: False

5
salt/sys-cacher/create.sls
View File

@ -15,6 +15,7 @@ force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 500
@ -43,6 +44,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: gray
- audiovm: ""
## Disable memory balooning because of HTTP 503: Cannot allocate memory
- maxmem: 0
- memory: 500
@ -74,8 +76,9 @@ present:
prefs:
- template: tpl-browser
- label: gray
- vcpus: 1
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 500
- autostart: False

13
salt/sys-firewall/create.sls
View File

@ -17,6 +17,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -28,6 +38,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: orange
- audiovm: ""
- memory: 300
- maxmem: 400
- netvm: {{ netvm }}
@ -57,6 +68,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: orange
- netvm: {{ netvm }}
- audiovm: ""
- memory: 300
- maxmem: 400
- vcpus: 1
@ -86,6 +98,7 @@ prefs:
- template: dvm-{{ slsdotpath }}
- label: orange
- netvm: {{ netvm }}
- audiovm: ""
- memory: 300
- maxmem: 400
- vcpus: 1

11
salt/sys-git/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -21,6 +31,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: gray
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 200
- maxmem: 300

3
salt/sys-mirage-firewall/create.sls
View File

@ -57,6 +57,7 @@ present:
prefs:
- virt_mode: pvh
- label: black
- audiovm: ""
- memory: 64
- maxmem: 64
- vcpus: 1
@ -77,6 +78,7 @@ prefs:
- template: tpl-sys-mirage-firewall
- label: orange
- netvm: {{ netvm }}
- audiovm: ""
- memory: 64
- maxmem: 64
- vcpus: 1
@ -102,6 +104,7 @@ prefs:
- template: dvm-sys-mirage-firewall
- label: orange
- netvm: {{ netvm }}
- audiovm: ""
- memory: 64
- maxmem: 64
- vcpus: 1

13
salt/sys-net/create.sls
View File

@ -11,6 +11,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -23,6 +33,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: ""
- memory: 400
- maxmem: 0
- vcpus: 1
@ -55,6 +66,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: ""
- memory: 400
- maxmem: 0
- vcpus: 1
@ -86,6 +98,7 @@ prefs:
- template: dvm-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: ""
- autostart: False
- provides-network: True
- pcidevs: {{ net_pcidevs|yaml }}

13
salt/sys-pgp/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -20,9 +30,10 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 200
- maxmem: 300
- vcpus: 1
features:
- enable:
- servicevm

8
salt/sys-pihole/create.sls
View File

@ -35,9 +35,10 @@ present:
- class: StandaloneVM
prefs:
- label: orange
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 400
- vcpus: 1
- netvm: {{ netvm }}
- provides-network: true
features:
@ -66,10 +67,11 @@ present:
- label: orange
prefs:
- label: orange
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600
- vcpus: 1
- netvm: ""
- include_in_backups: False
features:
- disable:

11
salt/sys-rsync/create.sls
View File

@ -10,6 +10,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -22,6 +32,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: yellow
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600

11
salt/sys-ssh-agent/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -21,6 +31,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: gray
- netvm: ""
- audiovm: ""
- memory: 200
- maxmem: 300
- vcpus: 1

11
salt/sys-ssh/create.sls
View File

@ -10,6 +10,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -22,6 +32,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: yellow
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600

5
salt/sys-syncthing/create.sls
View File

@ -17,6 +17,7 @@ force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 700
@ -45,6 +46,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: yellow
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 700
@ -72,8 +74,9 @@ present:
prefs:
- template: tpl-browser
- label: yellow
- vcpus: 1
- netvm: ""
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 600
- autostart: False

12
salt/sys-usb/create.sls
View File

@ -23,6 +23,16 @@ include:
- pkgs:
- qubes-input-proxy
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ slsdotpath }}
force: True
@ -35,6 +45,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: ""
- memory: 400
- maxmem: 0
- vcpus: 1
@ -108,6 +119,7 @@ prefs:
- template: dvm-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: ""
- memory: 400
- maxmem: 0
- include_in_backups: False

11
salt/sys-wireguard/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -20,6 +30,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: orange
- audiovm: ""
- provides-network: True
- vcpus: 1
- memory: 300

11
salt/terraform/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ slsdotpath }}
force: True
@ -20,6 +30,7 @@ present:
prefs:
- template: tpl-{{ slsdotpath }}
- label: purple
- audiovm: ""
- vcpus: 1
- memory: 400
- maxmem: 600

11
salt/usb/create.sls
View File

@ -9,6 +9,16 @@ SPDX-License-Identifier: AGPL-3.0-or-later
include:
- .clone
{% load_yaml as defaults -%}
name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: dvm-{{ slsdotpath }}
force: True
@ -21,6 +31,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: red
- netvm: ""
- audiovm: ""
- memory: 300
- maxmem: 500
- vcpus: 1

3
salt/vault/create.sls
View File

@ -14,6 +14,8 @@ name: tpl-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
features:
- set:
- menu-items: "org.keepassxc.KeePassXC.desktop qubes-run-terminal.desktop qubes-start.desktop"
@ -33,6 +35,7 @@ prefs:
- template: tpl-{{ slsdotpath }}
- label: black
- netvm: ""
- audiovm: ""
- memory: 400
- maxmem: 600
- vcpus: 1

44
salt/whonix/create.sls
View File

@ -12,6 +12,26 @@ include:
- .clone
- qvm.anon-whonix
{% load_yaml as defaults -%}
name: {{ template.whonix_workstation_template }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: {{ template.whonix_gateway_template }}
force: True
require:
- sls: {{ slsdotpath }}.clone
prefs:
- audiovm: ""
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: sys-{{ slsdotpath }}
force: True
@ -23,9 +43,31 @@ present:
prefs:
- template: {{ template.whonix_gateway_template }}
- label: black
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 500
- vcpus: 1
- include_in_backups: False
- autostart: False
{%- endload %}
{{ load(defaults) }}
{% load_yaml as defaults -%}
name: anon-{{ slsdotpath }}
force: True
require:
- sls: {{ slsdotpath }}.clone
present:
- template: {{ template.whonix_workstation_template }}
- label: red
prefs:
- template: {{ template.whonix_workstation_template }}
- label: red
- netvm: sys-{{ slsdotpath }}
- audiovm: ""
- vcpus: 1
- memory: 300
- maxmem: 1500
- include_in_backups: False
- autostart: False
{%- endload %}