Git-Mirrors/shaker
1
0
Fork 0
mirror of https://github.com/unman/shaker.git synced 2025-07-28 08:44:09 -04:00
Code Issues Projects Releases Packages Wiki Activity

Salt - sys-usb - create distinct disposableVMs

Browse source
This commit is contained in:
unman 2019-08-14 16:11:51 +00:00
parent 3bded608f3
commit aba4c70e59
1 changed files with 60 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

62
create.sls
View file

@ -1,12 +1,19 @@
include: include:
- sys-usb.clone - sys-usb.clone
remove: remove:
qvm.absent: qvm.absent:
- name: sys-usb - name: sys-usb
remove2: remove2:
qvm.absent:
- name: sys-usb-dock
remove3:
qvm.absent:
- name: sys-usb-left
remove4:
qvm.absent: qvm.absent:
- name: sys-usb-dvm - name: sys-usb-dvm
@ -39,7 +46,7 @@ sys-usb-prefs:
- name: sys-usb - name: sys-usb
- autostart: false - autostart: false
- include_in_backups: false - include_in_backups: false
- pcidevs: ['00:1d.0'] - pcidevs: [ '00:1a.0' ]
- pci_strictreset: False - pci_strictreset: False
qvm-features-id: qvm-features-id:
@ -52,12 +59,63 @@ qvm-features-id:
- service.cups-browsed - service.cups-browsed
- service.qubes-updates-proxy - service.qubes-updates-proxy
sys-usb-dock:
qvm.present:
- name: sys-usb-dock
- template: sys-usb-dvm
- class: DispVM
- label: red
sys-usb-dock-prefs:
qvm.prefs:
- name: sys-usb-dock
- autostart: false
- include_in_backups: false
- pcidevs: [ '00:1d.0' ]
- pci_strictreset: False
sys-usb-dock-features:
qvm.features:
- name: sys-usb-dock
- disable:
- service.cups
- service.cups-browsed
- service.meminfo-writer
- service.qubes-updates-proxy
sys-usb-left:
qvm.present:
- name: sys-usb-left
- template: sys-usb-dvm
- class: DispVM
- label: red
sys-usb-left-prefs:
qvm.prefs:
- name: sys-usb-left
- autostart: false
- include_in_backups: false
- pcidevs: [ '00:14.0' ]
- pci_strictreset: False
sys-usb-left-features:
qvm.features:
- name: sys-usb-left
- disable:
- service.cups
- service.cups-browsed
- service.meminfo-writer
- service.cups-browsed
- service.qubes-updates-proxy
update_file: update_file:
file.prepend: file.prepend:
- name: /etc/qubes-rpc/policy/qubes.InputMouse - name: /etc/qubes-rpc/policy/qubes.InputMouse
- text: sys-usb dom0 allow,user=root - text: sys-usb dom0 allow,user=root
- text: sys-usb-dock dom0 allow,user=root
update_file_keyboard: update_file_keyboard:
file.prepend: file.prepend:
- name: /etc/qubes-rpc/policy/qubes.InputKeyboard - name: /etc/qubes-rpc/policy/qubes.InputKeyboard
- text: sys-usb dom0 allow,user=root - text: sys-usb dom0 allow,user=root
- text: sys-usb-dock dom0 allow,user=root