Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2025-03-19 22:06:16 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix: GUI policy precedes sys-cacher policy

Browse Source 
Fixes: https://github.com/ben-grande/qusal/issues/45
This commit is contained in:
Ben Grande 2024-04-13 16:09:06 +02:00
parent a8e918829d
commit 63e93be1d4
No known key found for this signature in database
GPG Key ID: 00C64E14F51F9E56
2 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
salt/sys-cacher/README.md
View File

@ -60,6 +60,22 @@ sudo qubesctl --skip-dom0 --targets="$(qvm-ls --no-spinner --raw-list --tags upd
## Usage
## Access control
The distributed policy will take precedence over the ones set during first
installation or the GUI Global Config. If you want to use `sys-cacher`
and edit configuration for certain qubes to update over different proxys, you
can do so.
Allow qubes with tag `whonix-updatevm` to use the proxy in `sys-alt-whonix`
and qube `dev` to use the proxy in `disp-sys-net`.
```qrexecpolicy
qubes.UpdatesProxy * @tag:whonix-updatevm @default allow target=sys-alt-whonix
qubes.UpdatesProxy * @tag:whonix-updatevm @anyvm deny
qubes.UpdatesProxy * dev @default allow target=disp-sys-net
qubes.UpdatesProxy * dev @anyvm deny
```
### Report Page and Maintenance Tasks
The report page is available from `sys-cacher` and `sys-cacher-browser` at
@ -126,7 +142,7 @@ updates.
Use `uninstall` or `install` as argument to the command `apt-cacher-ng-repo`:
```sh
sudo apt-cacher-ng-repo uninstal
sudo apt-cacher-ng-repo uninstall
```
## Uninstallation

4
salt/sys-cacher/create.sls
View File

@ -95,8 +95,10 @@ features:
{%- endload %}
{{ load(defaults) }}
{% from 'utils/macros/policy.sls' import policy_unset with context -%}
{{ policy_unset(sls_path, '75') }}
{% from 'utils/macros/policy.sls' import policy_set with context -%}
{{ policy_set(sls_path, '75') }}
{{ policy_set(sls_path, '45') }}
"{{ slsdotpath }}-extend-volume":
cmd.run: