From 16ec0c5fb1152e59dec20a32d4362dfec4fc48e7 Mon Sep 17 00:00:00 2001
From: unman <unman@thirdeyesecurity.org>
Date: Wed, 25 May 2022 15:14:15 +0000
Subject: [PATCH] Qubes print server - use dedicated template. Install hplips

---
 print/clone.sls   |  9 +++++++++
 print/clone.top   |  4 ++++
 print/create.sls  |  8 +++++++-
 print/install.sls | 25 +++++++++++++++++++++++++
 print/install.top |  5 +++++
 5 files changed, 50 insertions(+), 1 deletion(-)
 create mode 100644 print/clone.sls
 create mode 100644 print/clone.top
 create mode 100644 print/install.sls
 create mode 100644 print/install.top

diff --git a/print/clone.sls b/print/clone.sls
new file mode 100644
index 0000000..172bce9
--- /dev/null
+++ b/print/clone.sls
@@ -0,0 +1,9 @@
+include:
+  - template-debian-11-minimal
+
+qvm-clone-id:
+  qvm.clone:
+    - require:
+      - sls: template-debian-11-minimal
+    - name: template-print
+    - source: debian-11-minimal
diff --git a/print/clone.top b/print/clone.top
new file mode 100644
index 0000000..78a93a0
--- /dev/null
+++ b/print/clone.top
@@ -0,0 +1,4 @@
+base:
+  dom0:
+    - match: nodegroup
+    - print.clone
diff --git a/print/create.sls b/print/create.sls
index ee89e4d..a5ac9ab 100644
--- a/print/create.sls
+++ b/print/create.sls
@@ -1,7 +1,13 @@
+include:
+  - print.clone
+
+require:
+  - print.clone
+
 qvm-present-id:
   qvm.present:
     - name: sys-printer
-    - template: debian-11
+    - template: template-print
     - label: gray
 
 qvm-prefs-id:
diff --git a/print/install.sls b/print/install.sls
new file mode 100644
index 0000000..a9e5931
--- /dev/null
+++ b/print/install.sls
@@ -0,0 +1,25 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+#
+
+{% if salt['qvm.exists']('cacher') %}
+
+/etc/apt/sources.list:
+  file.replace:
+    - names:
+      - /etc/apt/sources.list
+      - /etc/apt/sources.list.d/qubes-r4.list
+    - pattern: 'https://'
+    - repl: 'http://HTTPS///'
+    - flags: [ 'IGNORECASE', 'MULTILINE' ]
+
+{% endif %}
+
+installed:
+  pkg.installed:
+    - pkgs:
+      - qubes-core-agent-networking
+      - qubes-core-agent-passwordless-root
+      - cups
+      - hplip
+      - hplip-gui
+      - simplescan
diff --git a/print/install.top b/print/install.top
new file mode 100644
index 0000000..e194f82
--- /dev/null
+++ b/print/install.top
@@ -0,0 +1,5 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+base:
+  template-print:
+    - print.install