mirror of
https://github.com/unman/shaker.git
synced 2025-04-19 15:05:48 -04:00
43 lines
1.3 KiB
RPMSpec
43 lines
1.3 KiB
RPMSpec
Name: 3isec-qubes-dnscrypt
|
|
Version: 1.1
|
|
Release: 1%{?dist}
|
|
Summary: Provides a template and qube providing DNSCrypt in Qubes
|
|
|
|
License: GPLv3+
|
|
SOURCE0: dnscrypt
|
|
|
|
%description
|
|
This package creates a template with dnscrypt-proxy installed.
|
|
The template is based on the debian-12-minimal template.
|
|
A template based qube, sys-dnscrypt, is created with a vanilla version of dnscrypt-proxy installed.
|
|
The new qube is configured to drop in to the Qubes networking model.
|
|
It supports qubes-firewall.
|
|
However, NO DNS traffic is forwarded, and all such traffic is passed through dnscrypt-proxy.
|
|
The installation follows the documentation but the service must be manually started.
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
mkdir -p %{buildroot}/srv/salt
|
|
cp -rv %{SOURCE0}/ %{buildroot}/srv/salt
|
|
|
|
%files
|
|
%defattr(-,root,root,-)
|
|
/srv/salt/dnscrypt/*
|
|
|
|
%post
|
|
if [ $1 -eq 1 ]; then
|
|
qubesctl state.apply dnscrypt.clone
|
|
qubesctl --skip-dom0 --targets=template-dnscrypt state.apply dnscrypt.install
|
|
qubesctl state.apply dnscrypt.create
|
|
qubesctl --skip-dom0 --targets=sys-dnscrypt state.apply dnscrypt.configure
|
|
elif [ $1 -eq 2 ]; then
|
|
qubesctl state.apply dnscrypt.clone
|
|
fi
|
|
|
|
%preun
|
|
|
|
|
|
%changelog
|
|
* Thu Mar 20 2025 unman <unman@thirdeyesecurity.org>
|
|
- First Build
|