qusal/salt/ansible/install.sls
Ben Grande 9c280689d8
refactor: prefer systemd sockets over socat
- Document preferred method for socket use depending on use case;
- Fix Github web-flow key;
- Standardize naming of services;
- Use sys-ssh in ansible formula;
- Start services conditionally with Qubes Service and evaluated by
  systemd ConditionPathExists= instead of installing on a per qube basis
  with rc.local scripts;
- Change Qusal services to "qusal-" prefix instead of "qubes-" prefix.

Fixes: https://github.com/ben-grande/qusal/issues/80
Fixes: https://github.com/ben-grande/qusal/issues/79
2024-06-25 22:16:26 +02:00

54 lines
1.2 KiB
Plaintext

{#
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
SPDX-License-Identifier: AGPL-3.0-or-later
#}
{% if grains['nodename'] != 'dom0' -%}
include:
- .install-repo
- utils.tools.common.update
- dotfiles.copy-sh
- dotfiles.copy-x11
- sys-ssh.install
- sys-ssh.install-client
- ssh.install
"{{ slsdotpath }}-installed":
pkg.installed:
- require:
- sls: {{ slsdotpath }}.install-repo
- sls: utils.tools.common.update
- install_recommends: False
- skip_suggestions: True
- pkgs:
- qubes-core-agent-networking
- ca-certificates
- ansible
- ansible-lint
- python3-argcomplete
- python3-jmespath
- qubes-core-agent-passwordless-root
- bash-completion
- man-db
{% set pkg = {
'Debian': {
'pkg': ['vim-nox', 'python3-selinux'],
},
'RedHat': {
'pkg': ['vim-enhanced', 'vim-ansible'],
},
}.get(grains.os_family) -%}
"{{ slsdotpath }}-installed-os-specific":
pkg.installed:
- require:
- sls: utils.tools.common.update
- install_recommends: False
- skip_suggestions: True
- pkgs: {{ pkg.pkg|sequence|yaml }}
{% endif -%}