What you're asking about ties into my question on qubes-devel https://groups.google.com/d/msgid/qubes-users/CALF8MVFrdUM4LoR-FD3pT3MRrLHBRRYNVHdxjYdoTEkKCQQc%3Dw%40mail.gmail.com
I'll have a look at showing some examples of what you're talking about. On Fri, 20 Apr 2018, 03:15 Thierry Laurion, <[email protected]> wrote: > I think the best would be per example. That would help me, and I'm pretty > sure it would help others. > > QubesOS decided to document changes for specific threat models/needs. Here > are some examples: > > 1. randomized mac configuration for NetworkManager is not deployed per > under sys-net. It requires a simple file drop in. See here: > https://www.qubes-os.org/doc/anonymizing-your-mac-address/ > 2. Discard flush was not implemented per default, which consumes > spaces without reasons. Making sure it is deployed would be awesome. > https://www.qubes-os.org/doc/disk-trim/ > > Going around and implementing the examples given in configuration guides > and creating salt formulas for them would be awesome. I haven't wrapped my > head about the best way to do this. Enabling a top file would make it > deployed next run? So it is better to compartmentalize changes by needs? > > > Any insight would be helpful! Providing a pull request in either > SkyLab/QubesOS giving links to Qubes applied examples would help the larger > community for sure! > > > > Le jeu. 19 avr. 2018 à 16:50, Chris Laprise <[email protected]> a écrit : > >> On 04/19/2018 04:22 PM, viq wrote: >> > I'm somewhat experienced with salt, are there any areas where >> additional >> > set of eyes/hands would be useful? >> > >> > Sorry, my python skills are slowly approaching what could be called >> > "basic", so don't count on much from that side. >> > -- >> > viq >> >> For one, I think a lot of us who have encountered salt in Qubes feel >> stymied by its organization and syntax, and would appreciate some help >> in gaining traction with it. The official salt resources are of little >> assistance. >> >> Something I'd like to do in particular is a salt recipe for setting up >> VM sudo/pam configuration. Also explore if its useful for configuring >> VPNs. >> >> -- >> >> Chris Laprise, [email protected] >> https://github.com/tasket >> https://twitter.com/ttaskett >> PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 >> >> -- >> You received this message because you are subscribed to the Google Groups >> "qubes-devel" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/qubes-devel/a417377a-c62b-23e4-0e5b-f3cfdef3ad48%40posteo.net >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/CALF8MVEgbh1_r8QBzxm2oT%2BSbomfnkfKMXi%3DW%3DKnKgb6fwAoqw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
