Skip to content

Instantly share code, notes, and snippets.

@eloquence
Created June 12, 2020 01:13
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save eloquence/4591b99170ad5d4c13a26f89a1ad57f6 to your computer and use it in GitHub Desktop.
Save eloquence/4591b99170ad5d4c13a26f89a1ad57f6 to your computer and use it in GitHub Desktop.
$ securedrop-admin --apply
Applying configuration...
[CRITICAL] Specified ext_pillar interface qvm_prefs is unavailable
local:
----------
beacons:
clouds:
engines:
grains:
- grains.boot_mode
- grains.pci_devs
- grains.redefined_dom0_grains
- grains.whonix
log_handlers:
modules:
- modules.debug
- modules.ext_module_qvm
- modules.localemod
- modules.module_utils
- modules.qubes
- modules.qubes_dom0_update
- modules.topd
output:
pillar:
- pillar.qvm_prefs
proxymodules:
renderers:
returners:
sdb:
states:
- states.debug
- states.ext_state_qvm
- states.status
utils:
- utils.__init__
- utils.fileinfo
- utils.matcher
- utils.nulltype
- utils.pathinfo
- utils.pathutils
- utils.qubes_utils
- utils.toputils
Configure Fedora-based system VMs
local:
----------
ID: fedora-31-dvm
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'fedora-31-dvm' already exists.
====== ['prefs'] ======
[SKIP] template_for_dispvms: True
[SKIP] label : red
====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'appmenus-dispvm' = Enabled
Started: 18:01:08.238744
Duration: 263.004 ms
Changes:
----------
ID: echo -e 'firefox.desktop\nxterm.desktop' | qvm-appmenus --set-whitelist=- --update fedora-31-dvm
Function: cmd.run
Result: True
Comment: Command "echo -e 'firefox.desktop\nxterm.desktop' | qvm-appmenus --set-whitelist=- --update fedora-31-dvm" run
Started: 18:01:08.503399
Duration: 429.136 ms
Changes:
----------
pid:
17983
retcode:
0
stderr:
fedora-31-dvm: Creating appmenus
stdout:
----------
ID: dom0-install-fedora-template
Function: pkg.installed
Result: True
Comment: All specified packages are already installed
Started: 18:01:09.432235
Duration: 867.716 ms
Changes:
----------
ID: update-fedora-template-if-new
Function: cmd.wait
Name: sudo qubesctl --skip-dom0 --targets fedora-31 state.sls update.qubes-vm
Result: True
Comment:
Started: 18:01:10.300475
Duration: 0.418 ms
Changes:
----------
ID: set-fedora-default-template-version
Function: cmd.run
Name: qubes-prefs default_template fedora-31
Result: True
Comment: Command "qubes-prefs default_template fedora-31" run
Started: 18:01:10.301031
Duration: 286.369 ms
Changes:
----------
pid:
17993
retcode:
0
stderr:
stdout:
Summary for local
------------
Succeeded: 5 (changed=2)
Failed: 0
------------
Total states run: 5
Total run time: 1.847 s
sys-firewall:
----------
ID: sys-firewall-rpm-test-key
Function: file.managed
Name: /rw/config/RPM-GPG-KEY-securedrop-workstation
Result: True
Comment: File /rw/config/RPM-GPG-KEY-securedrop-workstation updated
Started: 18:01:38.235577
Duration: 86.518 ms
Changes:
----------
diff:
---
+++
@@ -11,33 +11,33 @@
qXcP1SPgtoy/EnW0oa/NDiT/rSh1PuAjG7oOpiNdQdmnA+xIYGreeNoPtuh7gJRc
XYrtWI5zzsGwrFE0LMMPw6SVGONfM5M4Efc+oUn3cIn7gQITm31JNTbRpnwT7bMo
Hy+MrILJITj6Rwi8EGyeTBVolM/L0W3WpjJuj6yhcRZURkBMA01aSUG3yQARAQAB
-tEVTZWN1cmVEcm9wIFJlbGVhc2UgU2lnbmluZyBLZXkgPHNlY3VyZWRyb3AtcmVs
-ZWFzZS1rZXlAZnJlZWRvbS5wcmVzcz6JAlQEEwEKAD4CGwMFCwkIBwMFFQoJCAsF
-FgIDAQACHgECF4AWIQQiJFyB47rrQTizYGExD1YSAPStdwUCXRqEkwUJBvMLKgAK
-CRAxD1YSAPStd3YjD/4hT5+Q1ZVobUh9Psuv1XYaHTnqJvVxXjheXns9SGqSsvFC
-+2O1RVfse+fKaY9lRaG179toKEOEcoyydCpdInlCkhx8Ny9O+pyiH5TawnaKVpRW
-j/9JJGW+Ceaipr1rawOzuG67MplButBFGmA1jPkeH38wcvep+PIUU5ZJ+aXbdrKT
-uWBwKjzjiF2LMsh9Pnn9XN/T5Ph39WR6utsd/wdbb8xdpq4tivUDWV7W7ztG1No9
-exYfftnn6nLF74dLayhHxESE/yUilxR/XDQxvYbcjNAS9OZVKnkrq8o+8bLBKLV1
-le4168rdyVBxrhLCG3wXaWqO4AaECMHSfZR2Lvb/d1wIyMtEcWbRlDwmTDFOQ1XU
-RCR0coeemYeAzt2hF6/tIrrCGmCKllQNN+JegH2MbXG7SjnCbWwWxAWtccf6L7Ht
-BYDe3RWK0VyMwsHVuTakMKzIoH++e8XnmEKf3JFMz27RcgXRFN1Wo4/iRIq/zM+i
-l/wTfN9l3yzojKmwZQvvICITCkeh/1sEspEkzmg74inJVpTEHQCWQ41c5ugPqjHd
-kvpjxZML4B0+9nN9WQvqhRgmjCKnN+PvYw/mBaEfgA36E8pkcyNwnw+VrFgQyQ1R
-FH0yg6P2Y6zaSKLEHkpjzWaCc3sOA/qMFuTw5aUkPj7Go1DMEV/z/xl6tDlM2bQe
-U2VjdXJlRHJvcCBSZWxlYXNlIFNpZ25pbmcgS2V5iQJXBBMBCgBBAhsDBQsJCAcD
-BRUKCQgLBRYCAwEAAh4BAheABQkG8wsqFiEEIiRcgeO660E4s2BhMQ9WEgD0rXcF
-Al0ah20CGQEACgkQMQ9WEgD0rXcqpA//ZD481Wytd1ZXiXIee8I4ekIGpq0UVJuL
-g8Bh0hhH2LTqIMuMVIVQM7/k/xxHBd+kxpAv/sUhJKrY16XBkGzz7v1Rcl29uWUR
-GSPiLl2OehlT8Ahf60Dv4czhlvBdT3lWtYwM2zciOe4Y5mPwqzEgkrxRD2V9XnmO
-8X3giZyaTDz/iiTQ+WMSvjIgVNGBe38tzoofSCSxNk8KfAWtchZhZgR0ZsYRWlUa
-7dT4Syi0KutEXjRfZFneNPWnqfhQZlxsjw5gzTgV792MPDbZAm/1eziGCvPgX01W
-f2eadxSYuJRLtmOBggwo/vC04MWWQbmYgJfOjL8DDWS17cdfLa8IjUYV8MDStWY6
-PDg1gaA5s3UroFh/nOCipoGvq51iSUF/GYd2OJAUd20SjMR+TQgK3lPuX4hMtVId
-4x/xrkoY4q0MZJmrB6ysbpeHhl/HA+ofwScNtyKL3iQHN6oQ8llBoMuF9xFm4xX8
-fn8WHrd+hD0S8hnBkTJ2ckSqJDxzGFu4+6NBhEWtcigzn9iD7HUWljXAUkEfN39I
-jdgaxjrwE3FagE+RCEbdRXDpHYWlyo91YYqFedcT2v/l73twyFw7p3zYskW8pjRZ
-F0Lqvn7fiOzxNi98tVYHqs4L17BOWFQt8MhQr9f590jtGQ/+ufhAb33/E9JFQXUg
-cIYqWzBX7dw=
-=ZsUE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+=LOAb
-----END PGP PUBLIC KEY BLOCK-----
----------
ID: sys-firewall-rpm-test-key-script
Function: file.managed
Name: /rw/config/sd-copy-rpm-repo-pubkey.sh
Result: True
Comment: File /rw/config/sd-copy-rpm-repo-pubkey.sh is in the correct state
Started: 18:01:38.322219
Duration: 2.798 ms
Changes:
----------
ID: sys-firewall-rpm-test-key-rclocal
Function: file.append
Name: /rw/config/rc.local
Result: True
Comment: File /rw/config/rc.local is in correct state
Started: 18:01:38.325115
Duration: 1.692 ms
Changes:
----------
ID: sys-firewall-rpm-test-key-import
Function: cmd.run
Name: /rw/config/sd-copy-rpm-repo-pubkey.sh
Result: True
Comment: Command "/rw/config/sd-copy-rpm-repo-pubkey.sh" run
Started: 18:01:38.330363
Duration: 30.842 ms
Changes:
----------
pid:
3458
retcode:
0
stderr:
stdout:
Summary for sys-firewall
------------
Succeeded: 4 (changed=2)
Failed: 0
------------
Total states run: 4
Total run time: 121.850 ms
Set up dom0 config files, including RPC policies, and create VMs
local:
----------
ID: template-whonix-ws-15
Function: pkg.installed
Name: qubes-template-whonix-ws-15
Result: True
Comment: Package qubes-template-whonix-ws-15 is already installed
Started: 18:01:47.972066
Duration: 819.501 ms
Changes:
----------
ID: whonix-ws-tag
Function: qvm.vm
Name: whonix-ws-15
Result: True
Comment: ====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'whonix-ws' = Enabled
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-workstation-updates,whonix-updatevm
Started: 18:01:48.796258
Duration: 253.729 ms
Changes:
----------
ID: whonix-ws-update-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.UpdatesProxy
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.UpdatesProxy is in correct state
Started: 18:01:49.052075
Duration: 3.325 ms
Changes:
----------
ID: whonix-get-date-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.GetDate
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.GetDate is in correct state
Started: 18:01:49.055502
Duration: 1.211 ms
Changes:
----------
ID: template-whonix-gw-15
Function: pkg.installed
Name: qubes-template-whonix-gw-15
Result: True
Comment: Package qubes-template-whonix-gw-15 is already installed
Started: 18:01:49.056808
Duration: 0.341 ms
Changes:
----------
ID: whonix-gw-tag
Function: qvm.vm
Name: whonix-gw-15
Result: True
Comment: ====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'whonix-gw' = Enabled
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-workstation-updates,whonix-updatevm
Started: 18:01:49.057233
Duration: 254.998 ms
Changes:
----------
ID: whonix-gw-update-policy
Function: file.prepend
Name: /etc/qubes-rpc/policy/qubes.UpdatesProxy
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.UpdatesProxy is in correct state
Started: 18:01:49.312379
Duration: 1.584 ms
Changes:
----------
ID: sys-net
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-net None
Started: 18:01:49.314062
Duration: 219.83 ms
Changes:
----------
ID: sys-firewall
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-firewall None
Started: 18:01:49.534322
Duration: 220.147 ms
Changes:
----------
ID: sys-whonix
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check sys-whonix None
Started: 18:01:49.754906
Duration: 217.484 ms
Changes:
----------
ID: whonix-ws-15-dvm
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check whonix-ws-15-dvm None
Started: 18:01:49.977046
Duration: 218.576 ms
Changes:
----------
ID: qvm-appmenus --update whonix-ws-15-dvm
Function: cmd.run
Result: True
Comment: State was not run because none of the onchanges reqs changed
Changes:
----------
ID: anon-whonix
Function: qvm.exists
Result: True
Comment: /usr/bin/qvm-check anon-whonix None
Started: 18:01:50.197014
Duration: 217.141 ms
Changes:
----------
ID: dom0-rpm-test-key
Function: file.managed
Name: /etc/pki/rpm-gpg/RPM-GPG-KEY-securedrop-workstation
Result: True
Comment: File /etc/pki/rpm-gpg/RPM-GPG-KEY-securedrop-workstation updated
Started: 18:01:50.414620
Duration: 20.874 ms
Changes:
----------
diff:
---
+++
@@ -11,33 +11,33 @@
qXcP1SPgtoy/EnW0oa/NDiT/rSh1PuAjG7oOpiNdQdmnA+xIYGreeNoPtuh7gJRc
XYrtWI5zzsGwrFE0LMMPw6SVGONfM5M4Efc+oUn3cIn7gQITm31JNTbRpnwT7bMo
Hy+MrILJITj6Rwi8EGyeTBVolM/L0W3WpjJuj6yhcRZURkBMA01aSUG3yQARAQAB
-tEVTZWN1cmVEcm9wIFJlbGVhc2UgU2lnbmluZyBLZXkgPHNlY3VyZWRyb3AtcmVs
-ZWFzZS1rZXlAZnJlZWRvbS5wcmVzcz6JAlQEEwEKAD4CGwMFCwkIBwMFFQoJCAsF
-FgIDAQACHgECF4AWIQQiJFyB47rrQTizYGExD1YSAPStdwUCXRqEkwUJBvMLKgAK
-CRAxD1YSAPStd3YjD/4hT5+Q1ZVobUh9Psuv1XYaHTnqJvVxXjheXns9SGqSsvFC
-+2O1RVfse+fKaY9lRaG179toKEOEcoyydCpdInlCkhx8Ny9O+pyiH5TawnaKVpRW
-j/9JJGW+Ceaipr1rawOzuG67MplButBFGmA1jPkeH38wcvep+PIUU5ZJ+aXbdrKT
-uWBwKjzjiF2LMsh9Pnn9XN/T5Ph39WR6utsd/wdbb8xdpq4tivUDWV7W7ztG1No9
-exYfftnn6nLF74dLayhHxESE/yUilxR/XDQxvYbcjNAS9OZVKnkrq8o+8bLBKLV1
-le4168rdyVBxrhLCG3wXaWqO4AaECMHSfZR2Lvb/d1wIyMtEcWbRlDwmTDFOQ1XU
-RCR0coeemYeAzt2hF6/tIrrCGmCKllQNN+JegH2MbXG7SjnCbWwWxAWtccf6L7Ht
-BYDe3RWK0VyMwsHVuTakMKzIoH++e8XnmEKf3JFMz27RcgXRFN1Wo4/iRIq/zM+i
-l/wTfN9l3yzojKmwZQvvICITCkeh/1sEspEkzmg74inJVpTEHQCWQ41c5ugPqjHd
-kvpjxZML4B0+9nN9WQvqhRgmjCKnN+PvYw/mBaEfgA36E8pkcyNwnw+VrFgQyQ1R
-FH0yg6P2Y6zaSKLEHkpjzWaCc3sOA/qMFuTw5aUkPj7Go1DMEV/z/xl6tDlM2bQe
-U2VjdXJlRHJvcCBSZWxlYXNlIFNpZ25pbmcgS2V5iQJXBBMBCgBBAhsDBQsJCAcD
-BRUKCQgLBRYCAwEAAh4BAheABQkG8wsqFiEEIiRcgeO660E4s2BhMQ9WEgD0rXcF
-Al0ah20CGQEACgkQMQ9WEgD0rXcqpA//ZD481Wytd1ZXiXIee8I4ekIGpq0UVJuL
-g8Bh0hhH2LTqIMuMVIVQM7/k/xxHBd+kxpAv/sUhJKrY16XBkGzz7v1Rcl29uWUR
-GSPiLl2OehlT8Ahf60Dv4czhlvBdT3lWtYwM2zciOe4Y5mPwqzEgkrxRD2V9XnmO
-8X3giZyaTDz/iiTQ+WMSvjIgVNGBe38tzoofSCSxNk8KfAWtchZhZgR0ZsYRWlUa
-7dT4Syi0KutEXjRfZFneNPWnqfhQZlxsjw5gzTgV792MPDbZAm/1eziGCvPgX01W
-f2eadxSYuJRLtmOBggwo/vC04MWWQbmYgJfOjL8DDWS17cdfLa8IjUYV8MDStWY6
-PDg1gaA5s3UroFh/nOCipoGvq51iSUF/GYd2OJAUd20SjMR+TQgK3lPuX4hMtVId
-4x/xrkoY4q0MZJmrB6ysbpeHhl/HA+ofwScNtyKL3iQHN6oQ8llBoMuF9xFm4xX8
-fn8WHrd+hD0S8hnBkTJ2ckSqJDxzGFu4+6NBhEWtcigzn9iD7HUWljXAUkEfN39I
-jdgaxjrwE3FagE+RCEbdRXDpHYWlyo91YYqFedcT2v/l73twyFw7p3zYskW8pjRZ
-F0Lqvn7fiOzxNi98tVYHqs4L17BOWFQt8MhQr9f590jtGQ/+ufhAb33/E9JFQXUg
-cIYqWzBX7dw=
-=ZsUE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+=LOAb
-----END PGP PUBLIC KEY BLOCK-----
----------
ID: dom0-rpm-test-key-import
Function: cmd.run
Name: sudo rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-securedrop-workstation
Result: True
Comment: Command "sudo rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-securedrop-workstation" run
Started: 18:01:50.436482
Duration: 59.592 ms
Changes:
----------
pid:
18882
retcode:
0
stderr:
stdout:
----------
ID: dom0-workstation-rpm-repo
Function: file.managed
Name: /etc/yum.repos.d/securedrop-workstation-dom0.repo
Result: True
Comment: File /etc/yum.repos.d/securedrop-workstation-dom0.repo is in the correct state
Started: 18:01:50.497432
Duration: 2.458 ms
Changes:
----------
ID: dom0-remove-securedrop-workstation-stretch-template
Function: pkg.removed
Result: True
Comment: All specified packages are already absent
Started: 18:01:50.500611
Duration: 0.612 ms
Changes:
----------
ID: dom0-install-securedrop-workstation-template
Function: pkg.installed
Result: True
Comment: All specified packages are already installed
Started: 18:01:50.502183
Duration: 0.416 ms
Changes:
----------
ID: dom0-remove-legacy-updater
Function: file.absent
Name: /usr/bin/securedrop-update
Result: True
Comment: File /usr/bin/securedrop-update is not present
Started: 18:01:50.502689
Duration: 0.384 ms
Changes:
----------
ID: dom0-remove-legacy-updater
Function: file.absent
Name: /etc/cron.daily/securedrop-update-cron
Result: True
Comment: File /etc/cron.daily/securedrop-update-cron is not present
Started: 18:01:50.503142
Duration: 0.224 ms
Changes:
----------
ID: dom0-securedrop-icons-directory
Function: file.directory
Name: /usr/share/securedrop/icons
Result: True
Comment: Directory /usr/share/securedrop/icons is in the correct state
Directory /usr/share/securedrop/icons updated
Started: 18:01:50.503442
Duration: 0.717 ms
Changes:
----------
ID: dom0-securedrop-icon
Function: file.managed
Name: /usr/share/securedrop/icons/sd-logo.png
Result: True
Comment: File /usr/share/securedrop/icons/sd-logo.png is in the correct state
Started: 18:01:50.504704
Duration: 3.03 ms
Changes:
----------
ID: dom0-enabled-apparmor-on-whonix-gw-template
Function: qvm.vm
Name: whonix-gw-15
Result: True
Comment: ====== ['prefs'] ======
[SKIP] kernelopts : nopat apparmor=1 security=apparmor
Started: 18:01:50.508040
Duration: 26.989 ms
Changes:
----------
ID: dom0-enabled-apparmor-on-whonix-ws-template
Function: qvm.vm
Name: whonix-ws-15
Result: True
Comment: ====== ['prefs'] ======
[SKIP] kernelopts : nopat apparmor=1 security=apparmor
Started: 18:01:50.535347
Duration: 24.476 ms
Changes:
----------
ID: dom0-create-opt-securedrop-directory
Function: file.directory
Name: /opt/securedrop
Result: True
Comment: Directory /opt/securedrop is in the correct state
Directory /opt/securedrop updated
Started: 18:01:50.559943
Duration: 0.504 ms
Changes:
----------
ID: dom0-adjust-desktop-icon-size-xfce
Function: cmd.script
Name: salt://update-xfce-settings
Result: True
Comment: Command 'salt://update-xfce-settings' run
Started: 18:01:50.560524
Duration: 135.527 ms
Changes:
----------
pid:
18904
retcode:
0
stderr:
stdout:
update-xfce-settings: Adjusting icon size for user erik to 64 px
----------
ID: dom0-login-autostart-directory
Function: file.directory
Name: /home/erik/.config/autostart
Result: True
Comment: Directory /home/erik/.config/autostart is in the correct state
Directory /home/erik/.config/autostart updated
Started: 18:01:50.696424
Duration: 1.49 ms
Changes:
----------
ID: dom0-login-autostart-desktop-file
Function: file.managed
Name: /home/erik/.config/autostart/SDWLogin.desktop
Result: True
Comment: File /home/erik/.config/autostart/SDWLogin.desktop is in the correct state
Started: 18:01:50.699296
Duration: 6.654 ms
Changes:
----------
ID: dom0-login-autostart-script
Function: file.managed
Name: /usr/bin/securedrop-login
Result: True
Comment: File /usr/bin/securedrop-login is in the correct state
Started: 18:01:50.706049
Duration: 2.071 ms
Changes:
----------
ID: dom0-tag-whonix-ws-15
Function: qvm.vm
Name: whonix-ws-15
Result: True
Comment: ====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-workstation-updates,whonix-updatevm
Started: 18:01:50.708221
Duration: 218.392 ms
Changes:
----------
ID: dom0-tag-whonix-gw-15
Function: qvm.vm
Name: whonix-gw-15
Result: True
Comment: ====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-workstation-updates,whonix-updatevm
Started: 18:01:50.926740
Duration: 219.341 ms
Changes:
----------
ID: dom0-securedrop-launcher-directory
Function: file.recurse
Name: /opt/securedrop/launcher
Result: True
Comment: Recursively updated /opt/securedrop/launcher
Started: 18:01:51.146193
Duration: 66.791 ms
Changes:
----------
/opt/securedrop/launcher/sdw-launcher.py:
----------
mode:
0644
/opt/securedrop/launcher/sdw-notify.py:
----------
mode:
0644
----------
ID: dom0-securedrop-launcher-executables
Function: file.managed
Name: /opt/securedrop/launcher/sdw-launcher.py
Result: True
Comment:
Started: 18:01:51.215834
Duration: 36.507 ms
Changes:
----------
mode:
0755
----------
ID: dom0-securedrop-launcher-executables
Function: file.managed
Name: /opt/securedrop/launcher/sdw-notify.py
Result: True
Comment:
Started: 18:01:51.254589
Duration: 36.224 ms
Changes:
----------
mode:
0755
----------
ID: dom0-securedrop-launcher-desktop-shortcut
Function: file.managed
Name: /home/erik/Desktop/securedrop-launcher.desktop
Result: True
Comment: File /home/erik/Desktop/securedrop-launcher.desktop is in the correct state
Started: 18:01:51.292803
Duration: 5.726 ms
Changes:
----------
ID: dom0-install-securedrop-workstation-dom0-config
Function: pkg.installed
Result: True
Comment: All specified packages are already installed
Started: 18:01:51.314520
Duration: 0.408 ms
Changes:
----------
ID: dom0-disable-unsafe-power-management-xfce
Function: cmd.script
Name: salt://update-xfce-settings
Result: True
Comment: Command 'salt://update-xfce-settings' run
Started: 18:01:51.315359
Duration: 164.206 ms
Changes:
----------
pid:
18928
retcode:
0
stderr:
stdout:
update-xfce-settings: Disabling unsafe power management options for user erik
----------
ID: sd-workstation-template
Function: qvm.vm
Name: securedrop-workstation-buster
Result: True
Comment: ====== ['prefs'] ======
[SKIP] virt_mode : hvm
[SKIP] kernel :
====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'service.paxctld' = Enabled
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation,sd-workstation-updates
Started: 18:01:51.483908
Duration: 673.612 ms
Changes:
----------
ID: run-prep-upgrade-scripts
Function: cmd.script
Name: salt://securedrop-handle-upgrade
Result: True
Comment: Command 'salt://securedrop-handle-upgrade' run
Started: 18:01:52.157669
Duration: 1157.914 ms
Changes:
----------
pid:
18934
retcode:
0
stderr:
stdout:
----------
ID: sd-gpg
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'sd-gpg' already exists.
====== ['prefs'] ======
[SKIP] autostart : True
[SKIP] netvm : None
[SKIP] template : securedrop-workstation-buster
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-workstation
Started: 18:01:53.316840
Duration: 469.03 ms
Changes:
----------
ID: dom0-crontab-update-notify
Function: file.blockreplace
Name: /etc/crontab
Result: True
Comment: No changes needed to be made
Started: 18:01:53.786215
Duration: 1.446 ms
Changes:
----------
ID: sd-viewer-template
Function: qvm.vm
Name: sd-viewer-buster-template
Result: True
Comment: ====== ['clone'] ======
[SKIP] A VM with the name 'sd-viewer-buster-template' already exists.
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation,sd-workstation-updates
Started: 18:01:53.788528
Duration: 629.582 ms
Changes:
----------
ID: sd-viewer
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'sd-viewer' already exists.
====== ['prefs'] ======
[SKIP] template_for_dispvms: True
[SKIP] netvm : None
[SKIP] template : sd-viewer-buster-template
====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'service.paxctld' = Enabled
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-viewer-vm,sd-workstation
Started: 18:01:54.419398
Duration: 874.582 ms
Changes:
----------
ID: sd-viewer-default-dispvm
Function: cmd.run
Name: qubes-prefs default_dispvm sd-viewer
Result: True
Comment: Command "qubes-prefs default_dispvm sd-viewer" run
Started: 18:01:55.295233
Duration: 278.125 ms
Changes:
----------
pid:
19012
retcode:
0
stderr:
stdout:
----------
ID: sd-whonix
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'sd-whonix' already exists.
====== ['prefs'] ======
[SKIP] autostart : True
[SKIP] kernelopts : nopat apparmor=1 security=apparmor
[SKIP] netvm : sys-firewall
[SKIP] provides_network : True
[SKIP] template : whonix-gw-15
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation
Started: 18:01:55.574716
Duration: 664.414 ms
Changes:
----------
ID: sd-proxy-template
Function: qvm.vm
Name: sd-proxy-buster-template
Result: True
Comment: ====== ['clone'] ======
[SKIP] A VM with the name 'sd-proxy-buster-template' already exists.
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation,sd-workstation-updates
Started: 18:01:56.239483
Duration: 823.224 ms
Changes:
----------
ID: sd-proxy
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'sd-proxy' already exists.
====== ['prefs'] ======
[SKIP] autostart : True
[SKIP] netvm : sd-whonix
[SKIP] template : sd-proxy-buster-template
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation
Started: 18:01:57.064485
Duration: 667.828 ms
Changes:
----------
ID: sd-proxy-dom0-securedrop.Proxy
Function: file.prepend
Name: /etc/qubes-rpc/policy/securedrop.Proxy
Result: True
Comment: File /etc/qubes-rpc/policy/securedrop.Proxy is in correct state
Started: 18:01:57.732660
Duration: 2.669 ms
Changes:
----------
ID: sd-app-template
Function: qvm.vm
Name: sd-app-buster-template
Result: True
Comment: ====== ['clone'] ======
[SKIP] A VM with the name 'sd-app-buster-template' already exists.
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation,sd-workstation-updates
Started: 18:01:57.736221
Duration: 826.325 ms
Changes:
----------
ID: sd-app
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'sd-app' already exists.
====== ['prefs'] ======
[SKIP] netvm : None
[SKIP] template : sd-app-buster-template
====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'service.paxctld' = Enabled
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-client,sd-workstation
Started: 18:01:58.563837
Duration: 688.761 ms
Changes:
----------
ID: sd-app-private-volume-size
Function: cmd.run
Name: qvm-volume resize sd-app:private 10GiB
Result: True
Comment: Command "qvm-volume resize sd-app:private 10GiB
" run
Started: 18:01:59.253854
Duration: 299.077 ms
Changes:
----------
pid:
19118
retcode:
0
stderr:
stdout:
----------
ID: sd-app-template-sync-appmenus
Function: cmd.run
Name: qvm-start --skip-if-running sd-app-buster-template && qvm-sync-appmenus sd-app-buster-template
Result: True
Comment: State was not run because none of the onchanges reqs changed
Changes:
----------
ID: sys-whonix-template-config
Function: qvm.vm
Name: sys-whonix
Result: True
Comment: ====== ['prefs'] ======
[SKIP] template : whonix-gw-15
Started: 18:01:59.555108
Duration: 27.335 ms
Changes:
----------
ID: anon-whonix-template-config
Function: qvm.vm
Name: anon-whonix
Result: True
Comment: ====== ['prefs'] ======
[SKIP] template : whonix-ws-15
Started: 18:01:59.582828
Duration: 25.832 ms
Changes:
----------
ID: run-remove-upgrade-scripts
Function: cmd.script
Name: salt://securedrop-handle-upgrade
Result: True
Comment: Command 'salt://securedrop-handle-upgrade' run
Started: 18:01:59.608784
Duration: 351.024 ms
Changes:
----------
pid:
19119
retcode:
0
stderr:
usage: qvm-check [--verbose] [--quiet] [--help] [--all] [--exclude EXCLUDE]
[--running] [--paused] [--template] [--networked]
[VMNAME [VMNAME ...]]
qvm-check: error: no such domain: 'sd-app-template'
usage: qvm-check [--verbose] [--quiet] [--help] [--all] [--exclude EXCLUDE]
[--running] [--paused] [--template] [--networked]
[VMNAME [VMNAME ...]]
qvm-check: error: no such domain: 'sd-viewer-template'
usage: qvm-check [--verbose] [--quiet] [--help] [--all] [--exclude EXCLUDE]
[--running] [--paused] [--template] [--networked]
[VMNAME [VMNAME ...]]
qvm-check: error: no such domain: 'sd-devices-template'
usage: qvm-check [--verbose] [--quiet] [--help] [--all] [--exclude EXCLUDE]
[--running] [--paused] [--template] [--networked]
[VMNAME [VMNAME ...]]
qvm-check: error: no such domain: 'sd-proxy-template'
stdout:
----------
ID: dom0-poweroff
Function: file.blockreplace
Name: /etc/systemd/logind.conf
Result: True
Comment: No changes needed to be made
Started: 18:01:59.960220
Duration: 1.627 ms
Changes:
----------
ID: apply-systemd-changes
Function: cmd.run
Name: sudo systemctl restart systemd-logind
Result: True
Comment: Command "sudo systemctl restart systemd-logind" run
Started: 18:01:59.961952
Duration: 113.393 ms
Changes:
----------
pid:
19124
retcode:
0
stderr:
stdout:
----------
ID: dom0-rpc-qubes.ClipboardPaste
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.ClipboardPaste
Result: True
Comment: No changes needed to be made
Started: 18:02:00.075860
Duration: 2.932 ms
Changes:
----------
ID: dom0-rpc-qubes.FeaturesRequest
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.FeaturesRequest
Result: True
Comment: No changes needed to be made
Started: 18:02:00.078900
Duration: 0.476 ms
Changes:
----------
ID: dom0-rpc-qubes.Filecopy
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.Filecopy
Result: True
Comment: No changes needed to be made
Started: 18:02:00.079479
Duration: 0.506 ms
Changes:
----------
ID: dom0-rpc-qubes.OpenInVM
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.OpenInVM
Result: True
Comment: No changes needed to be made
Started: 18:02:00.080069
Duration: 0.448 ms
Changes:
----------
ID: dom0-rpc-qubes.OpenURL
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.OpenURL
Result: True
Comment: No changes needed to be made
Started: 18:02:00.080597
Duration: 0.463 ms
Changes:
----------
ID: dom0-rpc-qubes.PdfConvert
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.PdfConvert
Result: True
Comment: No changes needed to be made
Started: 18:02:00.081138
Duration: 0.448 ms
Changes:
----------
ID: dom0-rpc-qubes.StartApp
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.StartApp
Result: True
Comment: No changes needed to be made
Started: 18:02:00.081694
Duration: 0.419 ms
Changes:
----------
ID: dom0-rpc-qubes.USB
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.USB
Result: True
Comment: No changes needed to be made
Started: 18:02:00.082201
Duration: 0.455 ms
Changes:
----------
ID: dom0-rpc-qubes.ensure.USBAttach
Function: file.managed
Name: /etc/qubes-rpc/policy/qubes.USBAttach
Result: True
Comment: File /etc/qubes-rpc/policy/qubes.USBAttach exists with proper permissions. No changes made.
Started: 18:02:00.082739
Duration: 0.656 ms
Changes:
----------
ID: dom0-rpc-qubes.USBAttach
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.USBAttach
Result: True
Comment: No changes needed to be made
Started: 18:02:00.084821
Duration: 0.464 ms
Changes:
----------
ID: dom0-rpc-qubes.VMRootShell
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.VMRootShell
Result: True
Comment: No changes needed to be made
Started: 18:02:00.085361
Duration: 0.488 ms
Changes:
----------
ID: dom0-rpc-qubes.VMshell
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.VMShell
Result: True
Comment: No changes needed to be made
Started: 18:02:00.085931
Duration: 0.469 ms
Changes:
----------
ID: dom0-rpc-qubes.Gpg
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.Gpg
Result: True
Comment: No changes needed to be made
Started: 18:02:00.086480
Duration: 0.427 ms
Changes:
----------
ID: dom0-rpc-qubes.GpgImportKey
Function: file.blockreplace
Name: /etc/qubes-rpc/policy/qubes.GpgImportKey
Result: True
Comment: No changes needed to be made
Started: 18:02:00.086980
Duration: 0.417 ms
Changes:
----------
ID: sd-devices-template
Function: qvm.vm
Name: sd-devices-buster-template
Result: True
Comment: ====== ['clone'] ======
[SKIP] A VM with the name 'sd-devices-buster-template' already exists.
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation,sd-workstation-updates
Started: 18:02:00.087908
Duration: 633.217 ms
Changes:
----------
ID: sd-devices-dvm
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'sd-devices-dvm' already exists.
====== ['prefs'] ======
[SKIP] template_for_dispvms: True
[SKIP] netvm : None
[SKIP] template : sd-devices-buster-template
====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'service.paxctld' = Enabled
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation
Started: 18:02:00.722471
Duration: 683.844 ms
Changes:
----------
ID: sd-devices-template-sync-appmenus
Function: cmd.run
Name: qvm-start --skip-if-running sd-devices-buster-template && qvm-sync-appmenus sd-devices-buster-template
Result: True
Comment: State was not run because none of the onchanges reqs changed
Changes:
----------
ID: sd-devices-create-named-dispvm
Function: qvm.vm
Name: sd-devices
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'sd-devices' already exists.
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation
Started: 18:02:01.408246
Duration: 442.816 ms
Changes:
----------
ID: fedora-31-dvm
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'fedora-31-dvm' already exists.
====== ['prefs'] ======
[SKIP] template_for_dispvms: True
[SKIP] label : red
====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'appmenus-dispvm' = Enabled
Started: 18:02:01.851404
Duration: 270.909 ms
Changes:
----------
ID: echo -e 'firefox.desktop\nxterm.desktop' | qvm-appmenus --set-whitelist=- --update fedora-31-dvm
Function: cmd.run
Result: True
Comment: Command "echo -e 'firefox.desktop\nxterm.desktop' | qvm-appmenus --set-whitelist=- --update fedora-31-dvm" run
Started: 18:02:02.122666
Duration: 442.23 ms
Changes:
----------
pid:
19233
retcode:
0
stderr:
fedora-31-dvm: Creating appmenus
stdout:
----------
ID: dom0-install-fedora-template
Function: pkg.installed
Result: True
Comment: All specified packages are already installed
Started: 18:02:02.565298
Duration: 1.171 ms
Changes:
----------
ID: update-fedora-template-if-new
Function: cmd.wait
Name: sudo qubesctl --skip-dom0 --targets fedora-31 state.sls update.qubes-vm
Result: True
Comment:
Started: 18:02:02.568303
Duration: 0.375 ms
Changes:
----------
ID: set-fedora-default-template-version
Function: cmd.run
Name: qubes-prefs default_template fedora-31
Result: True
Comment: Command "qubes-prefs default_template fedora-31" run
Started: 18:02:02.569239
Duration: 272.781 ms
Changes:
----------
pid:
19238
retcode:
0
stderr:
stdout:
----------
ID: topd-always-passes
Function: test.succeed_without_changes
Name: foo
Result: True
Comment: Success!
Started: 18:02:02.845433
Duration: 0.602 ms
Changes:
----------
ID: sd-log-template
Function: qvm.vm
Name: sd-log-buster-template
Result: True
Comment: ====== ['clone'] ======
[SKIP] A VM with the name 'sd-log-buster-template' already exists.
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-buster,sd-workstation,sd-workstation-updates
Started: 18:02:02.846829
Duration: 435.067 ms
Changes:
----------
ID: sd-log
Function: qvm.vm
Result: True
Comment: ====== ['present'] ======
[SKIP] A VM with the name 'sd-log' already exists.
====== ['prefs'] ======
[SKIP] autostart : True
[SKIP] netvm : None
====== ['features'] ======
[SKIP] Feature already in desired state: ENABLE 'service.paxctld' = Enabled
[SKIP] Feature already in desired state: ENABLE 'service.redis' = Enabled
[SKIP] Feature already in desired state: ENABLE 'service.securedrop-log' = Enabled
====== ['tags'] ======
[SKIP] All requested tags already set: created-by-dom0,sd-workstation
Started: 18:02:03.283244
Duration: 487.89 ms
Changes:
----------
ID: sd-log-dom0-securedrop.Log
Function: file.prepend
Name: /etc/qubes-rpc/policy/securedrop.Log
Result: True
Comment: File /etc/qubes-rpc/policy/securedrop.Log is in correct state
Started: 18:02:03.771468
Duration: 2.71 ms
Changes:
----------
ID: sd-log-private-volume-size
Function: cmd.run
Name: qvm-volume resize sd-log:private 5GiB
Result: True
Comment: Command "qvm-volume resize sd-log:private 5GiB
" run
Started: 18:02:03.775203
Duration: 448.754 ms
Changes:
----------
pid:
19281
retcode:
0
stderr:
stdout:
Summary for local
-------------
Succeeded: 85 (changed=15)
Failed: 0
-------------
Total states run: 85
Total run time: 16.169 s
Set up logging VMs early
sd-log-buster-template:
----------
ID: topd-always-passes
Function: test.succeed_without_changes
Name: foo
Result: True
Comment: Success!
Started: 18:02:58.665257
Duration: 0.351 ms
Changes:
----------
ID: dsa-4371-update
Function: cmd.script
Result: True
Comment: Nothing to do, apt already fixed.
Started: 18:02:58.668401
Duration: 146.979 ms
Changes:
----------
ID: update
Function: pkg.uptodate
Result: True
Comment: System is already up-to-date
Started: 18:03:03.050509
Duration: 2630.068 ms
Changes:
----------
ID: notify-updates
Function: cmd.run
Name: /usr/lib/qubes/upgrades-status-notify
Result: True
Comment: Command "/usr/lib/qubes/upgrades-status-notify" run
Started: 18:03:05.680924
Duration: 3019.367 ms
Changes:
----------
pid:
1316
retcode:
0
stderr:
stdout:
----------
ID: install-python-apt-for-repo-config
Function: pkg.installed
Result: True
Comment: All specified packages are already installed
Started: 18:03:08.709677
Duration: 35.923 ms
Changes:
----------
ID: configure-apt-test-apt-repo
Function: pkgrepo.managed
Name: deb [arch=amd64] https://apt.freedom.press buster main
Result: True
Comment: Package repo 'deb [arch=amd64] https://apt.freedom.press buster main' already configured
Started: 18:03:08.748833
Duration: 113.29 ms
Changes:
----------
ID: install-securedrop-keyring-package
Function: pkg.installed
Result: False
Comment: Problem encountered installing package(s). Additional info follows:
errors:
- Running scope as unit: run-r3bfb8440c6bc4df1a441e99eb7b54599.scope
E: Unable to locate package securedrop-keyring
Started: 18:03:08.862450
Duration: 2451.531 ms
Changes:
----------
ID: install-securedrop-log-package
Function: pkg.installed
Result: False
Comment: One or more requisite failed: fpf-apt-test-repo.install-securedrop-keyring-package
Started: 18:03:11.314529
Duration: 0.006 ms
Changes:
----------
ID: install-redis-for-sd-log-template
Function: pkg.installed
Result: True
Comment: All specified packages are already installed
Started: 18:03:11.314567
Duration: 9.376 ms
Changes:
----------
ID: remove-sd-rsyslog-config-for-logserver
Function: file.absent
Name: /etc/rsyslog.d/sdlog.conf
Result: True
Comment: File /etc/rsyslog.d/sdlog.conf is not present
Started: 18:03:11.351625
Duration: 0.35 ms
Changes:
Summary for sd-log-buster-template
------------
Succeeded: 8 (changed=1)
Failed: 2
------------
Total states run: 10
Total run time: 8.407 s
sd-log:
----------
ID: sd-log-remove-rsyslog-qubes-plugin
Function: file.blockreplace
Name: /rw/config/rc.local
Result: True
Comment: No changes needed to be made
Started: 18:03:46.931025
Duration: 29.649 ms
Changes:
----------
ID: sd-log-remove-rsyslog-qubes-plugin
Function: cmd.run
Name: /rw/config/rc.local
Result: True
Comment: Command "/rw/config/rc.local" run
Started: 18:03:46.963570
Duration: 32.258 ms
Changes:
----------
pid:
1292
retcode:
0
stderr:
stdout:
Summary for sd-log
------------
Succeeded: 2 (changed=1)
Failed: 0
------------
Total states run: 2
Total run time: 61.907 ms
Traceback (most recent call last):
File "/usr/bin/securedrop-admin", line 67, in provision_all
subprocess.check_call([os.path.join(SCRIPTS_PATH, "scripts/provision-all")])
File "/usr/lib64/python3.5/subprocess.py", line 271, in check_call
raise CalledProcessError(retcode, cmd)
subprocess.CalledProcessError: Command '['/usr/share/securedrop-workstation-dom0-config/scripts/provision-all']' returned non-zero exit status 20
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/bin/securedrop-admin", line 171, in <module>
main()
File "/usr/bin/securedrop-admin", line 148, in main
provision_all()
File "/usr/bin/securedrop-admin", line 69, in provision_all
raise SDAdminException("Error during provision-all")
__main__.SDAdminException: Error during provision-all
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment