Git-Mirrors/tommytran732-QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts.git synced 2025-07-24 22:25:15 -04:00
Code Issues Projects Releases Packages Wiki Activity

MirageOS, Split SSH, Docker fixes, and minor updates

Browse source 
Signed-off-by: tommytran732 <contact@tommytran.io>
This commit is contained in:
tommytran732 2022-08-12 04:17:07 -04:00
parent 12e8e1ede5
commit c542a1fec6
No known key found for this signature in database
GPG key ID: 060B29EB996BD9F2
9 changed files with 58 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

8
fedora/development-appvm.sh
View file

@ -1,8 +0,0 @@
#!/bin/bash
#Run this in the appVM
sudo mkdir -p /etc/qubes-bind-dirs.d
sudo tee /etc/qubes-bind-dirs.d50_user.conf << EOF > /dev/null
binds+=( '/var/lib/docker' )
binds+=( '/etc/docker' )
EOF

8
fedora/development.sh
View file

@ -9,4 +9,10 @@ sudo dnf config-manager --add-repo https://download.docker.com/linux/fedora/dock
sudo dnf install docker-ce docker-compose-plugin github-desktop code java-latest-openjdk hugo
sudo systemctl enable --now docker
sudo usermod -aG docker $USER
newgrp docker
newgrp docker
sudo mkdir -p /etc/qubes-bind-dirs.d
sudo tee /etc/qubes-bind-dirs.d50_user.conf << EOF > /dev/null
binds+=( '/var/lib/docker' )
binds+=( '/etc/docker' )
EOF

2
fedora/games.sh
View file

@ -3,4 +3,4 @@
echo "color-scheme='prefer-dark'" | sudo tee -a /etc/dconf/local.d/custom
sudo dconf update
sudo dnf install -y gnome-chess gnome-2048
sudo dnf install -y gnome-chess gnome-2048 gnome-mines

23
fedora/sysadmin-AppVM.sh Normal file
View file

@ -0,0 +1,23 @@
#!/bin/bash
#Run this in an AppVM, not a TemplateVM
echo '# SPLIT SSH CONFIGURATION >>>
# replace "vault" with your AppVM name which stores the ssh private key(s)
SSH_VAULT_VM="vault"
if [ "$SSH_VAULT_VM" != "" ]; then
export SSH_SOCK="/home/user/.SSH_AGENT_$SSH_VAULT_VM"
rm -f "$SSH_SOCK"
sudo -u user /bin/sh -c "umask 177 && exec socat 'UNIX-LISTEN:$SSH_SOCK,fork' 'EXEC:qrexec-client-vm $SSH_VAULT_VM qubes.SshAgent'" &
fi
# <<< SPLIT SSH CONFIGURATION' | sudo tee -a /rw/config/rc.local
echo '# SPLIT SSH CONFIGURATION >>>
# replace "vault" with your AppVM name which stores the ssh private key(s)
SSH_VAULT_VM="vault"
if [ "$SSH_VAULT_VM" != "" ]; then
export SSH_AUTH_SOCK="/home/user/.SSH_AGENT_$SSH_VAULT_VM"
fi
# <<< SPLIT SSH CONFIGURATION' | tee -a ~/.bashrc

16
fedora/vault.sh Normal file
View file

@ -0,0 +1,16 @@
#!/bin/bash
echo '#!/bin/sh
# Qubes App Split SSH Script
# Activate GPG Agent and set the correct SSH socket
export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)
gpgconf --launch gpg-agent
# safeguard - Qubes notification bubble for each ssh request
notify-send "[$(qubesdb-read /name)] SSH agent access from: $QREXEC_REMOTE_DOMAIN"
# SSH connection
socat - "UNIX-CONNECT:$SSH_AUTH_SOCK"' | sudo tee /etc/qubes-rpc/qubes.SshAgent
sudo chmod +x /etc/qubes-rpc/qubes.SshAgent