Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-11-24 10:31:35 -05:00
Code

Compare commits

base: Tomster:0ece1f405f33fd33ff3b7b6ea63a521268705169
Branches Tags
Tomster:main
..
compare: Tomster:a20b69f516a37c998beb985658a10c8f1ec0a682
Branches Tags
Tomster:main

No commits in common. "0ece1f405f33fd33ff3b7b6ea63a521268705169" and "a20b69f516a37c998beb985658a10c8f1ec0a682" have entirely different histories.
0ece1f405f ... a20b69f516

5 changed files with 2 additions and 49 deletions
Show Stats Expand all files Collapse all files

3
dom0.sh
View File

@ -31,9 +31,6 @@ echo "/usr/bin/echo 1" | sudo tee /etc/qubes-rpc/qubes.VMAuth
echo "@anyvm dom0 ask,default_target=dom0" | sudo tee /etc/qubes-rpc/policy/qubes.VMAuth
sudo chmod +x /etc/qubes-rpc/qubes.VMAuth
# Fix s0ix suspension
sudo qvm-features dom0 suspend-s0ix 1
# Set qvm-features
sudo qvm-features fedora-40 default-menu-items 'org.gnome.Nautilus.desktop org.gnome.Ptyxis.desktop'

8
etc/systemd/system/dnat-to-ns-boot.service
View File

@ -1,8 +0,0 @@
[Unit]
Description=Run /usr/lib/qubes/qubes-setup-dnat-to-ns
StartLimitIntervalSec=0
[Service]
Type=oneshot
ExecStart=sleep 10
ExecStart=/usr/lib/qubes/qubes-setup-dnat-to-ns

4
fedora-gnome/hardened-chromium.sh
View File

@ -25,9 +25,7 @@ download() {
}
sudo https_proxy=127.0.0.1:8082 dnf copr enable secureblue/hardened-chromium -y
sudo dnf config-manager --enable fedora-cisco-openh264 rpmfusion-free rpmfusion-free-updates rpmfusion-nonfree rpmfusion-nonfree-updates
sudo dnf install -y ffmpeg hardened-chromium
sudo dnf update @multimedia --setopt="install_weak_deps=False" --exclude=PackageKit-gstreamer-plugin
sudo dnf install -y hardened-chromium
umask 022

2
fedora-gnome/ivpn.sh
View File

@ -37,9 +37,7 @@ download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns.service /etc/systemd/system/dnat-to-ns.service
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns.path /etc/systemd/system/dnat-to-ns.path
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns-boot.service /etc/systemd/system/dnat-to-ns-boot.service
sudo systemctl enable dnat-to-ns.path
sudo systemctl enable dnat-to-ns-boot.service
# Follow these instructions on how to set up the ProxyVM: https://privsec.dev/posts/qubes/using-ivpn-on-qubes-os/#creating-the-proxyvm

32
fedora-gnome/mullvad-browser.sh
View File

@ -1,32 +0,0 @@
#!/bin/sh
# Copyright (C) 2024 Thien Tran
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
# the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations under
# the License.
set -eu -o pipefail
unpriv(){
sudo -u nobody "${@}"
}
download() {
unpriv curl -s --proxy http://127.0.0.1:8082 "${1}" | sudo tee "${2}" > /dev/null
}
sudo dnf config-manager --add-repo https://repository.mullvad.net/rpm/stable/mullvad.repo
sudo dnf config-manager --enable fedora-cisco-openh264 rpmfusion-free rpmfusion-free-updates rpmfusion-nonfree rpmfusion-nonfree-updates
# Install the package
sudo dnf install -y ffmpeg mullvad-browser
sudo dnf update @multimedia --setopt="install_weak_deps=False" --exclude=PackageKit-gstreamer-plugin