On Sat, May 23, 2020 at 11:33:33PM +0100, lik...@gmx.de wrote:
> On 2020-05-23 14:09, unman wrote:
> > On Sat, May 23, 2020 at 12:19:02AM +0100, 
> > liked2-mmb7mzph...@public.gmane.org wrote:
> > > Hi!
> > > 
> > > As salt is the recommended way to manage the Appms and templates, I'm 
> > > trying to do so.
> > > 
> > > I successfully managed to create a top-script:
> > > 
> > > base:
> > >   dom0:
> > >    - match: nodegroup
> > >    - create-template
> > >    - create-appvm-for-template
> > > 
> > >   'created-template':
> > >     - install-pkgs
> > >     - modify_config
> > >     - require: dom0
> > > 
> > > Unfortunately, the script fails on the first run, because step 2. 
> > > requires step 1. done. "Require" seems not to work here. After the second 
> > > run, everything is fine.
> > > 
> > > Any hints highly appreciated. :)
> > > 
> > > Best, P
> > > 
> > 
> > A top file is used for *targeting* - it maps hosts/groups and
> > configurations/states that should apply.
> > `Requires` is a condition between states, so should be used in *state*
> > files. (I didn't even know it could be used in a top file)
> > 
> > Put the require statement in one of your state files. (Look how it's
> > treated in the whonix state files.)
> > 
> > unman
> > 
> 
> 1. Ok, what's your suggestion to create templates and AppVMs both of them? 
> Should I run multiple runs with targeting several top files? I thought the 
> best point of salt is to run just 1 command to setup the whole environment?

I do two runs to provision a new system - one targetting dom0 to create
new templates/qubes and set prefs etc; the second with --skip-dom0 to
install software and configure individual qubes

> 
> 2. I tried to find the whonix state files, but I find only some python files 
> in /srv/salt/_grains/whonix.*

Look in /srv/formulas/base/virtual-machine-formula/qvm/  - examples of
configuration and use of templating.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200526002055.GD13950%40thirdeyesecurity.org.

Reply via email to