Salt - sys-usb - create distinct disposableVMs

create.sls

@@ -1,12 +1,19 @@
 include:
   - sys-usb.clone
 
-
 remove:
   qvm.absent:
     - name: sys-usb
 
 remove2:
+  qvm.absent:
+    - name: sys-usb-dock
+
+remove3:
+  qvm.absent:
+    - name: sys-usb-left
+
+remove4:
   qvm.absent:
     - name: sys-usb-dvm
 
@@ -39,7 +46,7 @@ sys-usb-prefs:
     - name: sys-usb
     - autostart: false
     - include_in_backups: false
-    - pcidevs: ['00:1d.0']
+    - pcidevs: [ '00:1a.0' ]
     - pci_strictreset: False
 
 qvm-features-id:
@@ -52,12 +59,63 @@ qvm-features-id:
       - service.cups-browsed
       - service.qubes-updates-proxy
 
+sys-usb-dock:
+  qvm.present:
+    - name: sys-usb-dock
+    - template: sys-usb-dvm
+    - class: DispVM
+    - label: red
+
+sys-usb-dock-prefs:
+  qvm.prefs:
+    - name: sys-usb-dock
+    - autostart: false
+    - include_in_backups: false
+    - pcidevs: [ '00:1d.0' ]
+    - pci_strictreset: False
+
+sys-usb-dock-features:
+  qvm.features:
+    - name: sys-usb-dock
+    - disable:
+      - service.cups
+      - service.cups-browsed
+      - service.meminfo-writer
+      - service.qubes-updates-proxy
+
+sys-usb-left:
+  qvm.present:
+    - name: sys-usb-left
+    - template: sys-usb-dvm
+    - class: DispVM
+    - label: red
+
+sys-usb-left-prefs:
+  qvm.prefs:
+    - name: sys-usb-left
+    - autostart: false
+    - include_in_backups: false
+    - pcidevs: [ '00:14.0' ]
+    - pci_strictreset: False
+
+sys-usb-left-features:
+  qvm.features:
+    - name: sys-usb-left
+    - disable:
+      - service.cups
+      - service.cups-browsed
+      - service.meminfo-writer
+      - service.cups-browsed
+      - service.qubes-updates-proxy
+
 update_file:
   file.prepend:
     - name: /etc/qubes-rpc/policy/qubes.InputMouse
     - text: sys-usb dom0 allow,user=root
+    - text: sys-usb-dock dom0 allow,user=root
 
 update_file_keyboard:
   file.prepend:
     - name: /etc/qubes-rpc/policy/qubes.InputKeyboard
     - text: sys-usb dom0 allow,user=root 
+    - text: sys-usb-dock dom0 allow,user=root