shaker/cacher
2024-06-09 13:34:11 +00:00
..
50_user.conf Salt - caching proxy. Add support for Qubes 2024-06-09 13:34:11 +00:00
acng.conf Salt - caching proxy. Add support for Qubes 2024-06-09 13:34:11 +00:00
archlx_mirrors_extra Salt - caching proxy. Update config file for acng 3.7.4. 2024-06-04 11:47:36 +00:00
blackarch_mirror-list Salt - caching proxy. Add support for BlackArch 2024-06-06 14:16:48 +00:00
change_templates.sls Salt - caching proxy. Update config file for acng 3.7.4. 2024-06-04 11:47:36 +00:00
change_templates.top Block Whonix templates from repository rewriting. 2022-08-22 10:25:54 +00:00
clone.sls Salt - caching proxy - rebase to Debian-12. 2024-02-01 00:40:03 +00:00
clone.top Moved cacher files to new subdirectory 2021-02-02 04:48:48 +00:00
config.sls Salt - caching proxy - allow updated package to update mirrors list and config file 2022-11-22 15:52:18 +00:00
configure.sls Salt - caching proxy. Add support for Qubes 2024-06-09 13:34:11 +00:00
configure.top Salt - caching proxy - general tidy up 2022-05-15 14:36:33 +00:00
create.sls Salt - caching proxy - make sure qubes-updates-proxy service is not loaded 2024-02-02 02:21:52 +00:00
create.top Moved cacher files to new subdirectory 2021-02-02 04:48:48 +00:00
debian_mirrors_extra Salt - caching proxy. Update config file for acng 3.7.4. 2024-06-04 11:47:36 +00:00
fedora_mirrors_extra Salt - caching proxy. Update config file for acng 3.7.4. 2024-06-04 11:47:36 +00:00
install.sls Salt - caching proxy. Update config file for acng 3.7.4. 2024-06-04 11:47:36 +00:00
install.top Moved cacher files to new subdirectory 2021-02-02 04:48:48 +00:00
mirrors.sls Salt - caching proxy. Add support for Qubes 2024-06-09 13:34:11 +00:00
pillar_init.sls Salt - caching proxy - use pillar to store identity 2023-02-21 12:54:22 +00:00
pillar_init.top Salt - caching proxy - use pillar to store identity 2023-02-21 12:54:22 +00:00
pillar.sls Salt - caching proxy - use pillar to store identity 2023-02-21 12:54:22 +00:00
Qubes_mirrors Salt - caching proxy. Add support for Qubes 2024-06-09 13:34:11 +00:00
README Salt - caching proxy - include note in README on using cacher over network instead of qrexec 2024-03-18 15:20:14 +00:00
restore_templates.sls Salt - caching proxy -fix whitespace in baseurl definition. 2022-08-19 10:47:13 +00:00
restore_templates.top Salt - caching proxy - Restore repo definitions on package removal 2022-05-15 14:48:23 +00:00
update.sls Salt - caching proxy - allow updated package to update mirrors list and config file 2022-11-22 15:52:18 +00:00
use.sls Salt - caching proxy - Make sure that configuration is correctly prepended to policy file 2024-04-01 00:08:33 +00:00
use.top Moved cacher files to new subdirectory 2021-02-02 04:48:48 +00:00

This is a caching proxy, based on apt-cacher-ng.  

Config files are included, which will work out of the box for Debian,Ubuntu,Arch, and Fedora.  
The cache and log directories are bind-mounted in /rw in the cacher qube.

Copy directory to /srv/salt, then run:  
qubesctl state.apply cacher.create
qubesctl --skip-dom0 --targets=template-cacher state.apply cacher.install  
qubesctl --skip-dom0 --targets=cacher state.apply cacher.configure

To automatically use the proxy run:  
qubesctl state.apply cacher.use  
This will configure /etc/qubes/policy.d/30-user.policy to use the caching proxy by default.

apt-cacher-ng will cache HTTPS requests if you change https:// to http://HTTPS/// in repo source lists.
To configure all templates to use the proxy in this way, run:  
qubesctl --skip-dom0 --templates state.apply cacher.change_templates  
Or target individual templates, as you wish:
qubesctl --skip-dom0 --targets=TEMPLATE1,TEMPLATE2  state.apply cacher.change_templates  

N.B
apt-cacher-ng works well for Debian,Ubuntu,and Arch.  
It works reasonably well for Fedora, but may require further tweaking of the apt-cacher-ng control file, and the fedora_mirrors lists.

To restore a template to the default state, a state is provided, restore_templates.sls.
Apply it like this:
qubesctl --skip-dom0 --targets=TEMPLATE1,TEMPLATE2  state.apply cacher.restore_templates  

The qrexec policy file at  /etc/qubes/policy.d/30-user.policy should be edited so that these templates use the default system proxy.

Templates or qubes that cannot run over qrexec, can connect to the caching
server if you set cacher as netvm, or upstream, and configure the qube to use
Proxy address of CACHER_IP:8082.