Mirage-firewall - update to release 0.9.0

This commit is contained in:
unman 2024-05-09 15:18:41 +00:00
parent b49a151cf2
commit a1a61ae998
No known key found for this signature in database
GPG Key ID: FDD1B8244731B36C
3 changed files with 24 additions and 3 deletions

View File

@ -1,5 +1,5 @@
Name: 3isec-qubes-mirage-firewall
Version: 0.8.6
Version: 0.9.0
Release: 1%{?dist}
Summary: Create an Mirage firewall in Qubes
@ -14,12 +14,10 @@ https://github.com/mirage/qubes-mirage-firewall
The package creates a qube called mirage-firewall.
If you want to use this as a firewall, simply change net qube from sys-firewall to mirage-firewall.
There's a batch file in /srv/salt/mirage to make this change in bulk.
Removing this package will remove the mirage-firewall.
Qubes that use it will have their net qube unset.
You will have to change netqube to get those qubes back online.
There's a batch file in /srv/salt/mirage to help make this change in bulk.
%install
@ -45,6 +43,8 @@ if [ $1 -eq 0 ]; then
fi
%changelog
* Thu May 09 2024 unman <unman@thirdeyesecurity.org> - 0.9.0
- Packages qubes-mirage-firewall 0.9.0
* Sat Feb 03 2024 unman <unman@thirdeyesecurity.org> - 0.8.6
- Packages qubes-mirage-firewall 0.8.6
* Mon Apr 17 2023 unman <unman@thirdeyesecurity.org> - 0.8.4

21
mirage/extract.sls Normal file
View File

@ -0,0 +1,21 @@
# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
#
#
#
{% if grains['nodename'] == 'dom0' %}
/var/lib/qubes/vm-kernels/mirage-firewall:
file.directory:
- mode: 755
- makedirs: True
mirage_extracted:
archive.extracted:
- name: /var/lib/qubes/vm-kernels/
- source: salt://mirage/mirage-firewall.tar.bz2
- source_hash: 86d41dcf0367fcccb0596ea0d547100b9a79b6dea09acd10ca3d43469d85080f
- archive_format: tar
- options: -j
{% endif %}

Binary file not shown.