shaker/mirage.spec

52 lines
1.4 KiB
RPMSpec

Name: 3isec-qubes-mirage-firewall
Version: 0.8.6
Release: 1%{?dist}
Summary: Create an Mirage firewall in Qubes
License: GPLv3+
SOURCE0: mirage
%description
This package creates a mirage firewall for use in Qubes.
It's a Unikernel qube to replace sys-firewall, which uses minimal system resources.
For full details:
https://github.com/mirage/qubes-mirage-firewall
The package creates a qube called mirage-firewall.
If you want to use this as a firewall, simply change net qube from sys-firewall to mirage-firewall.
There's a batch file in /srv/salt/mirage to make this change in bulk.
Removing this package will remove the mirage-firewall.
Qubes that use it will have their net qube unset.
You will have to change netqube to get those qubes back online.
There's a batch file in /srv/salt/mirage to help make this change in bulk.
%install
rm -rf %{buildroot}
mkdir -p %{buildroot}/srv/salt
cp -rv %{SOURCE0}/ %{buildroot}/srv/salt
%files
%defattr(-,root,root,-)
/srv/salt/mirage/*
%post
if [ $1 -eq 1 ]; then
qubesctl state.apply mirage.install
elif [ $1 -eq 2 ]; then
qubesctl state.apply mirage.extract
fi
%postun
if [ $1 -eq 0 ]; then
qvm-kill mirage-firewall
qvm-remove --force mirage-firewall
fi
%changelog
* Sat Feb 03 2024 unman <unman@thirdeyesecurity.org> - 0.8.6
- Packages qubes-mirage-firewall 0.8.6
* Mon Apr 17 2023 unman <unman@thirdeyesecurity.org> - 0.8.4
- Packages qubes-mirage-firewall 0.8.4