salt - qvm.firewall

[lik...@gmx.de]

Hi!

I'm trying to setup some firewall rules on some AppVms. Unfortunately, I cannot find any documentation to do this with the salt stack. The only documentation I found is:
https://github.com/QubesOS/qubes-mgmt-salt-dom0-qvm

Any hints?

Thxs, P

[lik...@gmx.de]

For clarification: Goal is to block all outgoing connections except those which are permitted. This can be done conveniently for an AppVm by the "Qubes settings"->"Firewall rules". Is there any chance to do this with salt without firing qvm-firewall commands?

[unman]

No, there's no native qubes salt configuration - firing qvm-firewall
commands is all there is.
Of course, you may want to "fire" them as part of a qubesctl run -you
could e.g. keep them in a file, and use cmd.script in the state file.