-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 24/07/2019 9.22 AM, unman wrote: > On Mon, Jul 22, 2019 at 07:38:27PM -0500, Andrew David Wong wrote: >> >> Sorry, I'm not following your example. What does it mean to "do the >> equivalent of qvm-create and qvm-prefs"? I had no idea you could create >> the effects of those commands without those commands. This sounds like a >> rather arcane area of Qubes wizardry into which I have not ventured. >> > > Actually you probably have ventured, but not realised it. > When you run the installer and configure the system, the various qubes > are created with salt. > The state files are in /srv/formulas/base/virtual-machines-formula/qvm > and you can inspect them there. > These files use templating. > > For example the sys-net.sls file uses: > name: sys-net > present: > - label: red > prefs: > - netvm: '' > - virt_mode: hvm > > etc etc > > You could get the same effect by calling the qvm functions directly: > > ----------------------- > sys-net: > qvm.present: > -name: sys-net > -template: debian-10 > -label: red > > sys-net-prefs: > qvm.prefs: > -netvm: '' > -virt_mode: hvm > ----------------------- > > If you look at the example I linked to you can see a breakdown of how to > create a Qubes builder qube. > The steps are: clone template and create qube, install necessary software in > template,configure qube. I've left that as simple as I can. > > By keeping these formulae, you can (re)create any aspects of your Qubes > system in a few commands. > Of course, you can do this using batch files calling qvm-create, > qvm-prefs, qvm-copy-to-vm, and assorted calls to qvm-run. imo the salt > formulae are clearer and easier to maintain. > > Also salt handles very well cases where (e.g) package names differ > between distributions, or you want the configuration to change between > debian-9 and debian-10, or between individual qubes, > > I'm happy to post simple examples if anyone wants to give a specification. > > unman >
This is very instructive! Thank you, unman! - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAl05KccACgkQ203TvDlQ MDC7lw//aAODJ4O990eexosaf9fihzizjysgIlIhv/00gaROt40+7fHbhE/AWnOz qhdzO6TCVp2NF6GFSlTWQDxNUErD2JuY7fitIPBFqeB50XR9MjtZKhPY6alGz9hY cyVy0wMvk1hd3rHUuyPzARsP1rK5rpc7nSTKR+T1v9t+yjG8OFIFw9hVvgUX0MZ9 A6qYsHnVonNBNh1LQy2yEd5MjkZbQKzJUkpq3/Ip16qQOsSrfy0tBjmGHyQq4U2c mfRQpobxWbMPJlgy0oqKQVPNe0fZQiOJWdXf2v5nFc64olNF01oBjFdGQxdrbnRS ytP0tndlDQ5fhItoJ993wP+vrkYopXgbKSUYnXDIxgtP07bxaEzIrkJq2ay5pmCG xxKtEhidKBgjUmV9bjpV50MT7fT+YNg6vIVtgGIlFHblzopE2rEiU4wjV5FsGNiJ bVGjfGkSni+uHeplJfPB+T8rBhRnKZV9qQK4noKTgOScn3lenweqUA7OfTRR1WNh 9j8r9z9PGMHw/qz1FIKhpoPQApuwF8BYj3L1XUrLc2pLkSAt5Codjlh7cZZm2p4q xmXmJmgj0sZiCzqz0q5X1s5YoCAbCpGla21VlxNGcxyB51BtIR3oW/YwTywsRxJR L52hoiT2Nvt5ywlaDKJxQnZ9YcVw1/oDeG7h8zkbKfFqA/mQaBU= =Ts5B -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ee005c0c-9f6b-2667-dd6e-64f5c6fe9c28%40qubes-os.org.
