305 Commits

Author SHA1 Message Date
Ben Grande
908a0773db fix: allow apt-cacher-ng cronjob to run signed_tag_for_908a0773 2024-02-22 21:57:51 +01:00
Ben Grande
23dbc723cb fix: update apt-cacher-ng mirror list signed_tag_for_23dbc723 2024-02-22 21:57:26 +01:00
Ben Grande
2b46500d81 doc: remove outdated ssh agent server instructions signed_tag_for_2b46500d 2024-02-20 00:31:43 +01:00
Ben Grande
89bd760d3c feat: add OpenTofu signed_tag_for_89bd760d 2024-02-19 23:36:54 +01:00
Ben Grande
f735474141 fix: update dotfiles module signed_tag_for_f7354741 2024-02-18 21:26:06 +01:00
Ben Grande
a91f48889a fix: update dotfiles module signed_tag_for_a91f4888 2024-02-18 17:09:05 +01:00
Ben Grande
7d6e2bf9c9 fix: less menu items for bitcoin qubes signed_tag_for_7d6e2bf9 2024-02-18 17:08:30 +01:00
Ben Grande
2409d8a141 fix: better electrum GUI resolution and tabs signed_tag_for_2409d8a1 2024-02-18 17:08:09 +01:00
Ben Grande
3ef02df040 fix: electrum install zbar and protobuf signed_tag_for_3ef02df0 2024-02-18 17:05:30 +01:00
Ben Grande
275178fa7c fix: add missing dependency for qvm-connect-tcp
The target of qubes.ConnectTCP has 'socat' because it is a dependency of
qubes-core-agent-networking. In case the target has not networking
packages, this needs to be taken care by the formula that creates the
target, not from the client itself.
signed_tag_for_275178fa
2024-02-17 12:03:45 +01:00
Ben Grande
4dd6308fc2 ci: update actions release signed_tag_for_4dd6308f 2024-02-17 00:13:41 +01:00
Ben Grande
dbed18dfa2 feat: Bitcoin Core and Electrum servers and wallet signed_tag_for_dbed18df 2024-02-17 00:07:33 +01:00
Ben Grande
e6fb72c22e feat: update template to fedora-39 signed_tag_for_e6fb72c2 2024-02-16 23:31:57 +01:00
Ben Grande
7331b1938e refactor: distinct whonix formulas
Separating the Gateway and the Workstation formula makes it easier to
use the clone-template macro as well as only run the necessary states.
signed_tag_for_7331b193
2024-02-08 23:58:59 +01:00
Ben Grande
f27db69e3a fix: update dotfiles module signed_tag_for_f27db69e 2024-02-04 19:51:11 +01:00
Ben Grande
c35ec15f7e fix: create directories when necessary signed_tag_for_c35ec15f 2024-02-04 19:48:12 +01:00
Ben Grande
56ecc25352 fix: vm kernel only applies to developers
Fixes: https://github.com/ben-grande/qusal/issues/3
signed_tag_for_56ecc253
2024-02-03 20:58:28 +01:00
Ben Grande
8f076d2441 fix: whonix template with high memory and backup signed_tag_for_8f076d24 2024-02-02 10:28:19 +01:00
Ben Grande
76c9cd00ad fix: move custom kicksecure settings to dev state
Fixes: https://github.com/ben-grande/qusal/issues/12
Fixes: https://github.com/ben-grande/qusal/issues/14
Fixes: https://github.com/ben-grande/qusal/issues/15
signed_tag_for_76c9cd00
2024-02-02 10:05:46 +01:00
Ben Grande
4596198037 fix: less intrusive kicksecure default install
- Do not remove sources.list;
- Move broken packages to separate state;
- Rename to developers state and explain it breaks boot;
- Remove settings that are already the default;
- Remove configuration that is deprecated and
- Remove deprecated packages;

Fixes: https://github.com/ben-grande/qusal/issues/4
Fixes: https://github.com/ben-grande/qusal/issues/5
Fixes: https://github.com/ben-grande/qusal/issues/6
Fixes: https://github.com/ben-grande/qusal/issues/7
Fixes: https://github.com/ben-grande/qusal/issues/9
Fixes: https://github.com/ben-grande/qusal/issues/11
Fixes: https://github.com/ben-grande/qusal/issues/13
signed_tag_for_45961980
2024-02-01 17:40:26 +01:00
Ben Grande
174af08efc feat: electrum bitcoin wallet signed_tag_for_174af08e 2024-01-31 16:53:04 +01:00
Ben Grande
c98b8b3fa5 fix: do not include mirage firewall in backup signed_tag_for_c98b8b3f 2024-01-31 15:50:35 +01:00
Ben Grande
8ff19988d0 feat: install available sequoia-pgp tools signed_tag_for_8ff19988 2024-01-31 14:51:17 +01:00
Ben Grande
b5d7371f93 fix: thunar requires xfce helpers to find terminal signed_tag_for_b5d7371f 2024-01-31 14:42:17 +01:00
Ben Grande
c08b39decc feat: add torrent client to fetcher signed_tag_for_c08b39de 2024-01-30 19:32:05 +01:00
Ben Grande
6efcc1da77 chore: copyright update signed_tag_for_6efcc1da 2024-01-29 16:49:54 +01:00
Ben Grande
b01f2d213a chore: move port forward to dom0 formula
The script can be used with sys-cacher, sys-pihole, sys-syncthing,
sys-ssh and many services you'd want to forward, make it reusable.
signed_tag_for_b01f2d21
2024-01-29 12:11:51 +01:00
Ben Grande
30f2ebe4ce fix: port forward validate values from DomUs signed_tag_for_30f2ebe4 2024-01-29 12:06:33 +01:00
Ben Grande
cb4ff00113 doc: typo in mirage firewall usage signed_tag_for_cb4ff001 2024-01-28 23:28:00 +01:00
Ben Grande
9183828985 fix: fail early when qubes.VMShell is unsupported
Happens with Mirage Unikernel, as it doesn't have a proper shell.

Fixes: https://github.com/ben-grande/qusal/issues/1
signed_tag_for_91838289
2024-01-28 23:25:03 +01:00
Ben Grande
77d82811ad ci: lint pull request signed_tag_for_77d82811 2024-01-28 23:13:24 +01:00
Ben Grande
03cb70c2c2 fix: port forwarder missing short options usage signed_tag_for_03cb70c2 2024-01-27 17:05:56 +01:00
Ben Grande
dab297905c fix: mail qrexec policy missing disp in name signed_tag_for_dab29790 2024-01-27 11:38:28 +01:00
Ben Grande
aec644bfc6 feat: add qubes img and pdf converter media qubes signed_tag_for_aec644bf 2024-01-26 22:49:18 +01:00
Ben Grande
a04960c1c6 feat: initial split-mail setup
Split-mail allows to separate the receving, reading/composing and
sending of mails to separate qubes, while having the reading/composing
qube offline and a manual step necessary to authorize mails to be sent
form the sender qube.
signed_tag_for_a04960c1
2024-01-26 22:46:36 +01:00
Ben Grande
7ec20f1863 fix: add file browser to reader
We are already trusting many applications to display files, adding a
file browser is a huge usability improvement in this case.
signed_tag_for_7ec20f18
2024-01-23 13:27:15 +01:00
Ben Grande
e1fe461eb8 doc: project signature verification in dom0 signed_tag_for_e1fe461e 2024-01-22 18:49:17 +01:00
Ben Grande
bd255af41f fix: cleanup audio home directory signed_tag_for_bd255af4 2024-01-22 18:42:54 +01:00
Ben Grande
d23a6da9fc doc: separate documents per use case
The main README is very large, by placing the documents in a separate
directory, we allow the user to choose explicitly what they read, giving
a better reading experience and allows a deeper understanding of the
project.
signed_tag_for_d23a6da9
2024-01-22 18:38:04 +01:00
Ben Grande
adba858477 fix: add whonix dvm signed_tag_for_adba8584 2024-01-22 10:56:31 +01:00
Ben Grande
d75a59f54b fix: update dotfiles module signed_tag_for_d75a59f5 2024-01-21 23:40:55 +01:00
Ben Grande
67403a17a3 feat: whonix setup independent from OEM
Depending on OEM will conflict the state IDs because they are the name
of the qubes being created. As not much changes are needed and we
customize much more, stop depending on upstream.
signed_tag_for_67403a17
2024-01-21 23:04:41 +01:00
Ben Grande
3e6ba8ff82 fix: client install the ssh-agent client packages
The client should install the agent client packages and not the
opposite. The way it was, it would not be possible to include the agent
client packages to the ssh client, as it would create a recursive loop.
signed_tag_for_3e6ba8ff
2024-01-21 22:04:34 +01:00
Ben Grande
97c644a09c fix: invert builder memory and vcpus signed_tag_for_97c644a0 2024-01-20 19:51:45 +01:00
Ben Grande
422b01e0f6 feat: remove audiovm setting when unnecessary
Decrease audio attack surface to qubes that will never need to use it.
signed_tag_for_422b01e0
2024-01-20 19:34:39 +01:00
Ben Grande
71dd9a5280 doc: bluetooth system tray signed_tag_for_71dd9a52 2024-01-19 12:16:34 +01:00
Ben Grande
4ef0d05279 feat: seamless audio integration with bluetooth signed_tag_for_4ef0d052 2024-01-19 11:18:37 +01:00
Ben Grande
b95cc6da43 feat: pavucontrol in sys-audio
The mixer provided by the program volumeicon is okay, it shows only one
input and one output. Pavucontrol correctly detects the different inputs
and output of each audio client, you can have deeper control of the
client volume.
signed_tag_for_b95cc6da
2024-01-19 10:14:22 +01:00
Ben Grande
04a016e876 doc: attacker can display a large byte set signed_tag_for_04a016e8 2024-01-18 19:49:15 +01:00
Ben Grande
0887c24a19 fix: remove unicode from used files
No considering license, copyright notices kept outside of the installed
directories, but excluding keys that have unicode in their comment
section.
signed_tag_for_0887c24a
2024-01-18 15:23:52 +01:00