Hello, list. Sorry if this has been already discussed - didn't read the mailing list long time. I've found myself in need to change templates once again as templates for too old fedora are not even updating at my side and it appears I've time to learn Qubes devops.
Since Qubes OS site seem to have no direct link to search dox I used to yandex 'qubes os automation' and found this link: https://github.com/Rudd-O/ansible-qubes As I understood this project is not from Qubes team and seem to be absent in official documentation. Has this any security reason? It could be helpful for those who already know some ansible (as I do). Though some of possible management use cases seem to break Qubes way of doing things securely (especially Qubes VM -> Qubes dom0): ---quote--- - Qubes VM -> Qubes VM - Qubes VM -> Qubes dom0 (see below for enablement instructions) - Qubes dom0 -> Qubes VM - Qubes VM -> network (SSH) -> Qubes VM on another Qubes host (see below) - normal desktop Linux -> network (SSH) -> Qubes VM on another Qubes host ---quote--- Also this project claimed to be specific for Qubes 3 (that's not a problem for me since I prefer to use old but quite stable releases), though an issue related to Qubes 4.0-rc2 . The other thing I'm not sure is indirect dependency on gpg2 (via https://github.com/Rudd-O/qubes-pass which relies on 'pass' program, which functionality is very promising for me) - is gpg2 is a acceptable replacement for gpg 1.4 version accepted by most of community? I'm still comfortable w/ old gpg 1.4, but use of 'pass' program seem to be a motivation to move. As via https://apple.stackexchange.com/questions/264350/gpg2-warning-using-insecure-memory/264402#264402 and other yandex searches I see that most difference between gpg and gpg2 is use of external library (also developed by same people who made gpg 1.4). Quick search for CVEs related made me think that most important ones affect both gpg and gpg2 (may be I'm wrong). Does gpg2 has wide attack surface in comparision w/ gpg 1.4 ? Has people used qubes automation with ansible w/ above project already? I mean some reputation. The project currently has 23 stars on github - looks promising, isn't it? -- Bye.Olli. Please CC personally when replying to the list. gpg --search-keys grey_olli , use key w/ fingerprint below: Key fingerprint = 9901 6808 768C 8B89 544C 9BE0 49F9 5A46 2B98 147E Blog keys (the blog is mostly in Russian): http://grey-olli.livejournal.com/tag/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CABunX6PPPK_np3PKNXf8VxssnzfBifa6n_keKnta%3D0qPt%3DFJ%3DQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
