DNSCrypt - spec file

dnscrypt.spec

@@ -0,0 +1,42 @@
+Name:           3isec-qubes-dnscrypt
+Version:        1.1
+Release:        1%{?dist}
+Summary:        Provides a template and qube providing DNSCrypt in Qubes
+
+License:        GPLv3+
+SOURCE0:        dnscrypt
+
+%description
+This package creates a template with dnscrypt-proxy installed.
+The template is based on the debian-12-minimal template.
+A template based qube, sys-dnscrypt, is created with a vanilla version of dnscrypt-proxy installed.
+The new qube is configured to drop in to the Qubes networking model.
+It supports qubes-firewall.
+However, NO DNS traffic is forwarded, and all such traffic is passed through dnscrypt-proxy.
+The installation follows the documentation but the service must be manually started.
+
+%install
+rm -rf %{buildroot}
+mkdir -p %{buildroot}/srv/salt
+cp -rv %{SOURCE0}/  %{buildroot}/srv/salt
+
+%files
+%defattr(-,root,root,-)
+/srv/salt/dnscrypt/*
+
+%post
+if [ $1 -eq 1 ]; then
+  qubesctl state.apply dnscrypt.clone
+  qubesctl --skip-dom0 --targets=template-dnscrypt state.apply dnscrypt.install
+  qubesctl state.apply dnscrypt.create
+  qubesctl --skip-dom0 --targets=sys-dnscrypt state.apply dnscrypt.configure
+elif [ $1 -eq 2 ]; then
+  qubesctl state.apply dnscrypt.clone
+fi
+
+%preun
+
+
+%changelog
+* Thu Mar 20 2025 unman <unman@thirdeyesecurity.org>
+- First Build