fix: skip edit of files owned by system packages

Skipping the Git system configuration on Whonix weakens the state as it
starts depending on the dotfiles, but it is the only way to not break
system updates due to Whonix security-misc package owning the same file.

Fix: https://github.com/ben-grande/qusal/issues/101
This commit is contained in:
Ben Grande 2024-10-14 17:05:14 +02:00
parent d5b4190d3e
commit 475b81a67f
No known key found for this signature in database
GPG Key ID: 00C64E14F51F9E56
2 changed files with 9 additions and 1 deletions

@ -1 +1 @@
Subproject commit f9457092eaeddd4a21419620291a0cf1ab1bd277
Subproject commit 7659897283297be0ee9e5e41943c05a8a925e688

View File

@ -50,7 +50,15 @@ include:
- user
- group
{% if not salt['file.file_exists']('/usr/share/whonix/marker') -%}
{#
Whonix's security-misc package owns /etc/gitconfig, fallback to Git dotfiles
to set this option.
#}
"{{ slsdotpath }}-install-client-allow-protocol":
cmd.run:
- name: git config --system protocol.qrexec.allow always
- runas: root
{% endif -%}