[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qubes-users
Subject:    Re: [qubes-users] Using Salt to update TemplateVMs
From:       "Brian C. Duggan" <brian () dugga ! net>
Date:       2019-09-19 4:05:33
Message-ID: 365a429b-f426-2482-76ee-a9f49b43b5d6 () dugga ! net
[Download RAW message or body]

On 9/17/19 9:49 PM, unman wrote:
> I don't know what Marek does.

Right, but does this mean there's no best practice or documented process
for synchronizing or sharing salt configurations? I understand your
process now that you've described it, but it wasn't obvious to me.

> I edit files in dom0, manually copy them to offline dispVM , gpg sign,
> copy them to online dispVM and store in git. This sounds long winded:
> it's not. It's automated in script.
> 

This makes sense, thank you.

> On a new machine, just reverse the process. Pull down the files you
> want - check sig - copy to offline - check - transfer to dom0.  
> Because salt files are so straightforward it's possible to audit
> before use. You could also store checksums from dom0.
> 

What's the purpose of storing checksums from the source dom0? To check
whether files have changed on the destination dom0 since the last sync?

-- 
Brian C. Duggan
he/him/his


-- 
You received this message because you are subscribed to the Google Groups \
"qubes-users" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-users+unsubscribe@googlegroups.com. To view this \
discussion on the web visit \
https://groups.google.com/d/msgid/qubes-users/365a429b-f426-2482-76ee-a9f49b43b5d6%40dugga.net.



[prev in list] [next in list] [prev in thread] [next in thread]