qusal/salt/sys-ssh-agent/install.sls
Ben Grande f9ead06408 fix: remove extraneous package repository updates
Updates happens multiple times, normally 2 to 3, even if we consider a
state without includes. On states with multiple includes, it could
easily get approximately 10 updates being ran. This behavior leads to
unnecessary network bandwidth being spent and more time to run the
installation state. When the connection is slow and not using the
cacher, such as torified connections on Whonix, the installation can
occurs much faster.

Adding external repositories has to be done prior to update to ensure it
is also fetched.

Fixes: https://github.com/ben-grande/qusal/issues/29
2024-03-18 17:51:36 +01:00

78 lines
1.7 KiB
Plaintext

{#
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
SPDX-License-Identifier: AGPL-3.0-or-later
#}
{% if grains['nodename'] != 'dom0' -%}
include:
- utils.tools.common.update
- dev.home-cleanup
- dotfiles.copy-sh
- dotfiles.copy-ssh
- dotfiles.copy-x11
"{{ slsdotpath }}-installed":
pkg.installed:
- require:
- sls: utils.tools.common.update
- install_recommends: False
- skip_suggestions: True
- pkgs:
- qubes-core-agent-networking
- ca-certificates
- socat
{% set pkg = {
'Debian': {
'pkg': ['openssh-client'],
},
'RedHat': {
'pkg': ['openssh-clients'],
},
}.get(grains.os_family) -%}
"{{ slsdotpath }}-installed-os-specific":
pkg.installed:
- require:
- sls: utils.tools.common.update
- install_recommends: False
- skip_suggestions: True
- pkgs: {{ pkg.pkg|sequence|yaml }}
"{{ slsdotpath }}-agent-bin-dir":
file.recurse:
- source: salt://{{ slsdotpath }}/files/server/bin
- name: /usr/bin
- file_mode: '0755'
- user: root
- group: root
"{{ slsdotpath }}-install-rpc-service":
file.managed:
- name: /etc/qubes-rpc/qusal.SshAgent
- source: salt://{{ slsdotpath }}/files/server/rpc/qusal.SshAgent
- mode: '0755'
- user: root
- group: root
- makedirs: True
"{{ slsdotpath }}-skel-create-ssh-directory":
file.directory:
- name: /etc/skel/.ssh
- mode: '0700'
- user: user
- group: user
- makedirs: True
"{{ slsdotpath }}-skel-create-keys-directory":
file.directory:
- name: /etc/skel/.ssh/identities.d
- mode: '0700'
- user: root
- group: root
- makedirs: True
{% endif -%}