Mirage-firewall - update to release 0.9.0

This commit is contained in:
unman 2024-05-09 15:18:41 +00:00
parent b49a151cf2
commit a1a61ae998
No known key found for this signature in database
GPG key ID: FDD1B8244731B36C
3 changed files with 24 additions and 3 deletions

View file

@ -1,5 +1,5 @@
Name: 3isec-qubes-mirage-firewall Name: 3isec-qubes-mirage-firewall
Version: 0.8.6 Version: 0.9.0
Release: 1%{?dist} Release: 1%{?dist}
Summary: Create an Mirage firewall in Qubes Summary: Create an Mirage firewall in Qubes
@ -14,12 +14,10 @@ https://github.com/mirage/qubes-mirage-firewall
The package creates a qube called mirage-firewall. The package creates a qube called mirage-firewall.
If you want to use this as a firewall, simply change net qube from sys-firewall to mirage-firewall. If you want to use this as a firewall, simply change net qube from sys-firewall to mirage-firewall.
There's a batch file in /srv/salt/mirage to make this change in bulk.
Removing this package will remove the mirage-firewall. Removing this package will remove the mirage-firewall.
Qubes that use it will have their net qube unset. Qubes that use it will have their net qube unset.
You will have to change netqube to get those qubes back online. You will have to change netqube to get those qubes back online.
There's a batch file in /srv/salt/mirage to help make this change in bulk.
%install %install
@ -45,6 +43,8 @@ if [ $1 -eq 0 ]; then
fi fi
%changelog %changelog
* Thu May 09 2024 unman <unman@thirdeyesecurity.org> - 0.9.0
- Packages qubes-mirage-firewall 0.9.0
* Sat Feb 03 2024 unman <unman@thirdeyesecurity.org> - 0.8.6 * Sat Feb 03 2024 unman <unman@thirdeyesecurity.org> - 0.8.6
- Packages qubes-mirage-firewall 0.8.6 - Packages qubes-mirage-firewall 0.8.6
* Mon Apr 17 2023 unman <unman@thirdeyesecurity.org> - 0.8.4 * Mon Apr 17 2023 unman <unman@thirdeyesecurity.org> - 0.8.4

21
mirage/extract.sls Normal file
View file

@ -0,0 +1,21 @@
# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
#
#
#
{% if grains['nodename'] == 'dom0' %}
/var/lib/qubes/vm-kernels/mirage-firewall:
file.directory:
- mode: 755
- makedirs: True
mirage_extracted:
archive.extracted:
- name: /var/lib/qubes/vm-kernels/
- source: salt://mirage/mirage-firewall.tar.bz2
- source_hash: 86d41dcf0367fcccb0596ea0d547100b9a79b6dea09acd10ca3d43469d85080f
- archive_format: tar
- options: -j
{% endif %}

Binary file not shown.