qubesctl fails with "No module named salt.client" unless I:
pip install salt
But pip doesn't sign code. How do I securely install the python pip module
in a VM which is going to be performing administrative tasks?
On Sunday, April 22, 2018 at 12:36:06 AM UTC-7, viq wrote:
>
> On 18-04-22
On 18-04-22 03:12:00, Marek Marczykowski-Górecki wrote:
> On Fri, Apr 20, 2018 at 11:40:36PM +0200, viq wrote:
> > On 18-04-20 23:21:10, Marek Marczykowski-Górecki wrote:
> > > On Fri, Apr 20, 2018 at 10:51:38PM +0200, viq wrote:
> > > > On 18-04-20 13:51:50, Marek Marczykowski-Górecki wrote:
> >
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Fri, Apr 20, 2018 at 11:40:36PM +0200, viq wrote:
> On 18-04-20 23:21:10, Marek Marczykowski-Górecki wrote:
> > On Fri, Apr 20, 2018 at 10:51:38PM +0200, viq wrote:
> > > On 18-04-20 13:51:50, Marek Marczykowski-Górecki wrote:
> >
> > > Hm, salt
On 18-04-20 23:21:10, Marek Marczykowski-Górecki wrote:
> On Fri, Apr 20, 2018 at 10:51:38PM +0200, viq wrote:
> > On 18-04-20 13:51:50, Marek Marczykowski-Górecki wrote:
>
> > Hm, salt has SPM[6], which I need to read a bit more about. On one
> > hand, it's a native salt tool, so possibly it
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Fri, Apr 20, 2018 at 10:51:38PM +0200, viq wrote:
> On 18-04-20 13:51:50, Marek Marczykowski-Górecki wrote:
> Hm, salt has SPM[6], which I need to read a bit more about. On one
> hand, it's a native salt tool, so possibly it could work better
On 18-04-20 13:51:50, Marek Marczykowski-Górecki wrote:
> On Thu, Apr 19, 2018 at 10:20:08PM +0200, viq wrote:
> > Salt tools give a nice way to configure system (make sure templates exist
> > with certain packages, prepare AppVMs based on them, etc). But I'd prefer
> > to edit them in a
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Thu, Apr 19, 2018 at 10:20:08PM +0200, viq wrote:
> Salt tools give a nice way to configure system (make sure templates exist
> with certain packages, prepare AppVMs based on them, etc). But I'd prefer
> to edit them in a customized editor, with
On Thu, April 19, 2018 8:20 pm, viq wrote:
> My understanding is that this is a perfect use case for new Admin API -
> have a machine with editor and git set up to adjust salt files, and either
> give admin permissions to that one, or use something like split-git that
> was mentioned to pull
Salt tools give a nice way to configure system (make sure templates exist
with certain packages, prepare AppVMs based on them, etc). But I'd prefer
to edit them in a customized editor, with syntax highlighting, etc, which
is strongly discouraged from being put into dom0. I also feel that having