diff --git a/mirage.spec b/mirage.spec
index 34d9c95..7972872 100644
--- a/mirage.spec
+++ b/mirage.spec
@@ -1,5 +1,5 @@
 Name:           3isec-qubes-mirage-firewall
-Version:       	0.8.6
+Version:       	0.9.0
 Release:        1%{?dist}
 Summary:        Create an Mirage firewall in Qubes
 
@@ -14,12 +14,10 @@ https://github.com/mirage/qubes-mirage-firewall
 
 The package creates a qube called mirage-firewall.
 If you want to use this as a firewall, simply change net qube from sys-firewall to mirage-firewall.
-There's a batch file in /srv/salt/mirage to make this change in bulk.
 
 Removing this package will remove the mirage-firewall.
 Qubes that use it will have their net qube unset.
 You will have to change netqube to get those qubes back online.
-There's a batch file in /srv/salt/mirage to help make this change in bulk.
 
 
 %install
@@ -45,6 +43,8 @@ if [ $1 -eq 0 ]; then
 fi
 
 %changelog
+* Thu May 09 2024 unman <unman@thirdeyesecurity.org> - 0.9.0
+- Packages qubes-mirage-firewall 0.9.0
 * Sat Feb 03 2024 unman <unman@thirdeyesecurity.org> - 0.8.6
 - Packages qubes-mirage-firewall 0.8.6
 * Mon Apr 17 2023 unman <unman@thirdeyesecurity.org> - 0.8.4
diff --git a/mirage/extract.sls b/mirage/extract.sls
new file mode 100644
index 0000000..6a81053
--- /dev/null
+++ b/mirage/extract.sls
@@ -0,0 +1,21 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+#
+#
+#
+
+{% if grains['nodename'] == 'dom0' %}
+
+/var/lib/qubes/vm-kernels/mirage-firewall:
+  file.directory:
+    - mode: 755
+    - makedirs: True
+
+mirage_extracted:
+  archive.extracted:
+    - name: /var/lib/qubes/vm-kernels/
+    - source: salt://mirage/mirage-firewall.tar.bz2
+    - source_hash: 86d41dcf0367fcccb0596ea0d547100b9a79b6dea09acd10ca3d43469d85080f
+    - archive_format: tar
+    - options: -j
+
+{% endif %}
diff --git a/mirage/mirage-firewall.tar.bz2 b/mirage/mirage-firewall.tar.bz2
index c57b040..2995701 100644
Binary files a/mirage/mirage-firewall.tar.bz2 and b/mirage/mirage-firewall.tar.bz2 differ