my qubes os saltstack configuration

an attempt to rewrite my qubes os setup as saltstack configuration.

canonical source

mirrors:

github | codeberg

---

setting up

The following steps assume the code has been cloned into a qube named disp420 into /home/user/code/qubes-salt

• add /srv/user/{formulas,pillar,salt} to /etc/salt/minion.d/f_defaults.conf

  • a patchfile and helper script are available in ./scripts, but the changes are trivial and can be done manually

• to use the helper script, dom0 needs rsync and the domU you clone this repo into needs bzip2

• clone this repo into a qube

• from dom0, copy in the lift script:

  qvm-run -p disp420 'cat /home/user/code/qubes-salt/scripts/lift.sh' > lift.sh && chmod +x lift.sh

  • consider auditing that script

• use the script to "lift" the code from the domU into dom0:

  ./lift.sh disp420 /home/user/code/qubes-salt

---

some references i referred to (thanks!):

• https://git.drkhsh.at/salt-n-pepper/file/README.md.html
• https://forum.qubes-os.org/t/qubes-salt-beginners-guide/20126