Vagrant::Qubes

This is not fully thought through or fully secured, use it at your own risk!

This my first attempt at writing a vagrant provider for qubes, and indeed one of my early attempts at writing anything in Ruby. If you don't know what qubes is, this is probably not somehting that you will want to experiment with yet.

The structure, and large chunks of code in here have been inspired by Jonathan Senkerik's ESXi plugin "vagrant-vmware-esxi" https://github.com/josenk/vagrant-vmware-esxi without the help of that I wouldn't have been able to put this together.

If you are looking at this, it will need some setup on your Qubes machine in order to work, I suggest you take a look at https://github.com/gp397/salt-for-vagrant-qubes which is my first attempt at using Saltstack to setup my Vagrant test lab.

Right now, this should be considered alpha at best, basic "up" and "destroy" works for a minimally configured AppVM based on a Vagrantfile along these lines

vms = {
  "test1" => ["AppVM","red","fedora-33", 2,  2048, "vagrant"],
  "test2" => ["AppVM","red","fedora-33", 2,  2048, "vagrant"],
  "test3" => ["AppVM","red","fedora-33", 2,  2048, "vagrant"],
}

Vagrant.configure("2") do |config|
  vms.each do | (name, cfg) |
    type, label, template, numvcpus, memory, network = cfg

    config.vm.define name do |machine|
      machine.vm.box = "box"
      machine.vm.hostname = name
      machine.vm.provider :vagrant_qubes do |qubes|
        qubes.guest_type = type
        qubes.guest_label = label
        qubes.guest_template = template
        qubes.guest_netvm = network
        qubes.guest_memsize = memory
        qubes.guest_numvcpus = numvcpus
      end
    end
  end
end

Currently, the plugin will insert a firewall rule allowing the NetVM to communicate with the vagrant created machine... this enables provision and "vagrant ssh " etc. to work.

This is not fully thought through or fully secured, use it at your own risk!

Run this in your AppVM

vagrant plugin install vagrant-qubes

Check out https://github.com/gp397/salt-for-vagrant-qubes it has a script that will enable networking between guests.

It requires an ssh server and puppet in the guest template, the salt formula takes care of all of that though.

There is a lot to do, in no particular order:

• Extend to support Standalone VMs/HVMs

Bug reports and pull requests are welcome on GitHub at https://github.com/gp397/vagrant-qubes. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the code of conduct.

The gem is available as open source under the terms of the MIT License.

Everyone interacting in the Vagrant::Qubes project's codebases, issue trackers, chat rooms and mailing lists is expected to follow the code of conduct.