Qubes print server

print/configure.sls

@@ -0,0 +1,15 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+/rw/config/qubes-bind-dirs.d/50_user.conf:
+  file.append:
+    - text: |
+        binds+=( '/etc/cups/printers.conf' )
+        binds+=( '/etc/qubes-rpc/qubes.Print' )
+    - makedirs: True
+
+/rw/bind-dirs/etc/qubes-rpc/qubes.Print:
+  file.append:
+    - text: |
+        #!/bin/sh
+        exec socat STDIO TCP:localhost:631
+    - makedirs: True

print/configure.top

@@ -0,0 +1,5 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+base:
+  printer:
+    - print.configure

print/create.sls

@@ -0,0 +1,23 @@
+qvm-present-id:
+  qvm.present:
+    - name: printer
+    - template: debian-10
+    - label: gray
+
+qvm-prefs-id:
+  qvm.prefs:
+    - name: printer
+    - netvm: sys-firewall
+
+qvm-features-id:
+  qvm.features:
+    - name: printer
+    - disable:
+      - service.cups-browsed
+    - enable:
+      - service.cups
+
+update_file:
+  file.prepend:
+    - name: '/etc/qubes-rpc/policy/qubes.Print'
+    - text: '@anyvm @anyvm ask,default_target=printer'

print/create.top

@@ -0,0 +1,4 @@
+base:
+  dom0:
+    - match: nodegroup
+    - print.create

print/print_client.sls

@@ -0,0 +1,13 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+/rw/config/rc.local:
+  file.append:
+    - text: |
+        socat TCP4-LISTEN:9100,reuseaddr,fork EXEC:"qrexec-client-vm print qubes.Print"
+
+/home/user/.cups/client.conf:
+  file.append:
+    - text: |
+        Servername 127.0.0.1:9100
+    - makedirs: True
+

print/print_client.top

@@ -0,0 +1,5 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+base:
+  '*':
+    - print.print_client