Management of salt configs: Syncing from dom0 to a git-repository harboring vm?

24 views
Skip to first unread message

balin

unread,
Apr 3, 2021, 12:42:49 PM4/3/21
to qubes-users
Hi,
I urgently need to backup (and version control) my by now relative elaborate salt config.

The plan is to manage it in a `git` repo in a dedicated Vm (whether I push it to some private online repo still needs some contemplation).
A shell script will
a) copy/sync the salt dir to the `git` vm
b) execute git add/commit(and possibly push) there

From this proposition the need arises to sync an entire directory from `dom0` to the `git` vm. I found `https://www.qubes-os.org/doc/copy-from-dom0/` and consequently `qvm-copy-to-vm <target_vm> <file>` ...
I can see a workflow of packing the salt dir to a *.zip or some such, copying that, unpacking it on the `git` vm through `qrexec` and preoceeding with git operations ... somewhat inelegant.
Is there any other means of syncing an entire directory tree from `dom0` to a vm?

Thanks for any pointers.

Sincerely, Joh

unman

unread,
Apr 3, 2021, 1:36:02 PM4/3/21
to qubes-users
qvm-copy-to-vm will take a directory as an argument.
You will have to then sync the files from QubesIncoming/dom0 to your git
repo, but that is trivial.

balin

unread,
Apr 3, 2021, 1:45:59 PM4/3/21
to qubes-users
I see. that seems straight forward then ... how time consuming is such a move?

Sincerely, Joh

unman

unread,
Apr 4, 2021, 10:01:56 AM4/4/21
to qubes-users
Not at all time consuming.
A simple script in dom0 to :
qvm-copy-to-vm
copy in the qube
git push in the qube

I have something you could look at - I'll post it in the morning.

unman

unread,
Apr 5, 2021, 10:16:56 AM4/5/21
to qubes-users
Something like:
```
#!/usr/bin/bash
qvm-copy-to-vm $1 $2
qvm-run $2 'mv /home/user/QubesIncoming/dom0/$1/* <path-to-git-repo>'
qvm-run $2 'rm -rf /home/user/QubesIncoming/dom0/$1 '
```
in dom0.

Depending on how you have configured git access you may also be able to
commit and push as part of the same script. Without knowing your
configuration I suspect that the rest wont be helpful.
(Hint - just try at the coommand line in dom0 - get it working and then
add to the script.)

Manuel Amador (Rudd-O)

unread,
May 2, 2021, 6:30:54 PM5/2/21
to qubes...@googlegroups.com
On 03/04/2021 18.42, balin wrote:
Hi,
I urgently need to backup (and version control) my by now relative elaborate salt config.


OpenPGP_signature
Reply all
Reply to author
Forward
0 new messages