From 8be15c04f94c6a95ae5be1dfe7b04ff6c38d0efb Mon Sep 17 00:00:00 2001
From: unman <unman@thirdeyesecurity.org>
Date: Wed, 3 Feb 2021 01:05:24 +0000
Subject: [PATCH] Flasher - a template for flashing coreboot

---
 flasher/clone.sls   |  9 ++++++++
 flasher/clone.top   |  4 ++++
 flasher/create.sls  | 23 +++++++++++++++++++
 flasher/create.top  |  4 ++++
 flasher/install.sls | 56 +++++++++++++++++++++++++++++++++++++++++++++
 flasher/install.top |  5 ++++
 6 files changed, 101 insertions(+)
 create mode 100644 flasher/clone.sls
 create mode 100644 flasher/clone.top
 create mode 100644 flasher/create.sls
 create mode 100644 flasher/create.top
 create mode 100644 flasher/install.sls
 create mode 100644 flasher/install.top

diff --git a/flasher/clone.sls b/flasher/clone.sls
new file mode 100644
index 0000000..f3ecd11
--- /dev/null
+++ b/flasher/clone.sls
@@ -0,0 +1,9 @@
+include:
+  - template-debian-10-minimal
+
+qvm-clone-id:
+  qvm.clone:
+    - require:
+      - sls: template-debian-10-minimal 
+    - name: template-flasher
+    - source: debian-10-minimal
diff --git a/flasher/clone.top b/flasher/clone.top
new file mode 100644
index 0000000..b29a79b
--- /dev/null
+++ b/flasher/clone.top
@@ -0,0 +1,4 @@
+base:
+  dom0:
+    - match: nodegroup
+    - flasher.clone
diff --git a/flasher/create.sls b/flasher/create.sls
new file mode 100644
index 0000000..fd7cd39
--- /dev/null
+++ b/flasher/create.sls
@@ -0,0 +1,23 @@
+include:
+  - flasher.clone
+
+qvm-present-id:
+  qvm.present:
+    - name: flasher
+    - template: template-flasher
+    - label: gray
+
+qvm-prefs-id:
+  qvm.prefs:
+    - name: flasher
+    - netvm: tor
+    - memory: 400
+    - maxmem: 2000
+    - vcpus: 2
+
+qvm-features-id:
+  qvm.features:
+    - name: flasher
+    - disable:
+      - service.cups
+      - service.cups-browsed
diff --git a/flasher/create.top b/flasher/create.top
new file mode 100644
index 0000000..2a57ef7
--- /dev/null
+++ b/flasher/create.top
@@ -0,0 +1,4 @@
+base:
+  dom0:
+    - match: nodegroup
+    - flasher.create
diff --git a/flasher/install.sls b/flasher/install.sls
new file mode 100644
index 0000000..3f0128d
--- /dev/null
+++ b/flasher/install.sls
@@ -0,0 +1,56 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+/etc/apt/sources.list:
+  file.replace:
+    - pattern: 'https:'
+    - repl: 'http://HTTPS/'
+    - flags: [ 'IGNORECASE', 'MULTILINE' ]
+
+/etc/apt/sources.list.d/qubes-r4.list:
+  file.replace:
+    - pattern: 'https:'
+    - repl: 'http://HTTPS/'
+    - flags: [ 'IGNORECASE', 'MULTILINE' ]
+
+allow-testing:
+  file.uncomment:
+    - name: /etc/apt/sources.list.d/qubes-r4.list
+    - regex: ^deb\s.*qubes-os.org.*-testing
+    - backup: false
+
+installed:
+  pkg.installed:
+    - pkgs:
+      - qubes-core-agent-networking
+      - qubes-gpg-split
+      - qubes-usb-proxy
+      - automake-1.15
+      - autopoint
+      - bc
+      - bison
+      - build-essential
+      - curl
+      - fcode-utils
+      - flashrom
+      - flex
+      - genisoimage
+      - gettext
+      - git
+      - gitg
+      - gnat
+      - gnupg
+      - grub-common
+      - libelf-dev
+      - libfreetype6
+      - libfreetype6-dev
+      - libncurses-dev
+      - libpci-dev
+      - libssl-dev
+      - libusb-1.0-0-dev
+      - m4
+      - mtools
+      - pkg-config
+      - qt5-qmake
+      - unifont
+      - wget
+      - zlib1g-dev
diff --git a/flasher/install.top b/flasher/install.top
new file mode 100644
index 0000000..11dd115
--- /dev/null
+++ b/flasher/install.top
@@ -0,0 +1,5 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+base:
+  template-flasher:
+    - flasher.install