I think the best would be per example. That would help me, and I'm pretty
sure it would help others.

QubesOS decided to document changes for specific threat models/needs. Here
are some examples:

   1. randomized mac configuration for NetworkManager is not deployed per
   under sys-net. It requires a simple file drop in. See here:
   https://www.qubes-os.org/doc/anonymizing-your-mac-address/
   2. Discard flush was not implemented per default, which consumes spaces
   without reasons.  Making sure it is deployed would be awesome.
   https://www.qubes-os.org/doc/disk-trim/

Going around and implementing the examples given in configuration guides
and creating salt formulas for them would be awesome. I haven't wrapped my
head about the best way to do this. Enabling a top file would make it
deployed next run? So it is better to compartmentalize changes by needs?


Any insight would be helpful! Providing a pull request in either
SkyLab/QubesOS giving links to Qubes applied examples would help the larger
community for sure!



Le jeu. 19 avr. 2018 à 16:50, Chris Laprise <[email protected]> a écrit :

> On 04/19/2018 04:22 PM, viq wrote:
> > I'm somewhat experienced with salt, are there any areas where additional
> > set of eyes/hands would be useful?
> >
> > Sorry, my python skills are slowly approaching what could be called
> > "basic", so don't count on much from that side.
> > --
> > viq
>
> For one, I think a lot of us who have encountered salt in Qubes feel
> stymied by its organization and syntax, and would appreciate some help
> in gaining traction with it. The official salt resources are of little
> assistance.
>
> Something I'd like to do in particular is a salt recipe for setting up
> VM sudo/pam configuration. Also explore if its useful for configuring VPNs.
>
> --
>
> Chris Laprise, [email protected]
> https://github.com/tasket
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-devel" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-devel/a417377a-c62b-23e4-0e5b-f3cfdef3ad48%40posteo.net
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/CAAzJznx5tKp_TqF5tVnsZ%3DgaFf8MRfssUJf1%2BtJQ%2BdvyReUGmw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to