877eddc184
- /home/.chezmoiscripts/qubes/run_onchange_after_11-set-wallpaper.sh.tmpl - /home/.chezmoiscripts/qubes/run_onchange_before_12-update-dom0.sh.tmpl - /home/.chezmoiscripts/qubes/run_onchange_before_13-install-official-templates.sh.tmpl - /home/.chezmoiscripts/qubes/run_onchange_before_14-ensure-minimal-vms-passwordless.sh.tmpl - /home/.chezmoiscripts/qubes/run_onchange_before_15-install-unofficial-templates.sh.tmpl - /home/.chezmoiscripts/qubes/run_onchange_before_16-update-template-vms.sh.tmpl - /home/.chezmoiscripts/qubes/run_onchange_before_17-install-mirage-firewall.sh.tmpl - /home/.chezmoiscripts/qubes/run_onchange_before_18-configure-sys-usb.sh.tmpl - /home/.chezmoiscripts/qubes/run_onchange_before_19-setup-sys-gui.sh.tmpl - /home/.chezmoiscripts/_universal/run_before_01-add-temporary-includes.sh.tmpl - /home/.chezmoiscripts/_universal/run_onchange_before_05-install-homebrew.sh.tmpl - /home/.chezmoiscripts/universal/run_before_01-decrypt-age-key.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_after_11-set-wallpaper.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_before_12-update-dom0.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_before_13-install-official-templates.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_before_14-ensure-minimal-vms-passwordless.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_before_15-install-unofficial-templates.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_before_16-update-template-vms.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_before_17-install-mirage-firewall.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_before_18-configure-sys-usb.sh.tmpl - /home/.chezmoiscripts/universal/run_onchange_before_19-setup-sys-gui.sh.tmpl - /home/.chezmoiscripts/universal/run_before_01-add-temporary-includes.sh.tmpl - /home/.chezmoiscripts/universal/run_before_01-install-homebrew.sh.tmpl - /home/.chezmoiscripts/universal/run_before_02-decrypt-age-key.sh.tmpl - /scripts/cloudflared-ssh.sh - /scripts/src/cloudflared-ssh.sh.tmpl
33 lines
1.2 KiB
Cheetah
33 lines
1.2 KiB
Cheetah
{{- if (eq .host.distro.id "qubes") -}}
|
|
#!/usr/bin/env bash
|
|
# @file Qubes `sys-gui-gpu`
|
|
# @brief Enables `sys-gui-gpu` if a compatible GPU controller is found on Qubes dom0
|
|
# @description
|
|
# This script enables `sys-gui-gpu` which allows you to secure dom0 even more by seperating the GUI
|
|
# management from dom0 and into a seperate Qube.
|
|
|
|
### Enables sys-gui-gpu
|
|
enableSysGUIGPU() {
|
|
logg info 'Enabling `sys-gui-gpu`'
|
|
qubesctl top.enable qvm.sys-gui-gpu
|
|
qubesctl top.enable qvm.sys-gui-gpu pillar=True
|
|
qubesctl --all state.highstate
|
|
qubesctl top.disable qvm.sys-gui-gpu
|
|
}
|
|
|
|
### Enable appropriate sys-gui
|
|
if qvm-pci list | grep 'VGA compatible controller' | grep 'Intel'; else
|
|
logg info 'An Intel GPU was detected'
|
|
enableSysGUIGPU
|
|
logg info 'Attaching Intel GPU PCI devices to sys-gui-gpu'
|
|
qubesctl state.sls qvm.sys-gui-gpu-attach-gpu
|
|
elif qvm-pci list | grep 'VGA compatible controller' | grep 'NVIDIA'; then
|
|
logg info 'An NVIDIA GPU was detected'
|
|
enableSysGUIGPU
|
|
logg info 'Attaching NVIDIA GPU PCI devices to sys-gui-gpu'
|
|
for ID of "$(qvm-pci list | grep 'NVIDIA' | sed 's/^\([^ ]*\).*/\1/')"; do
|
|
logg info "Attaching PCI device with ID of $ID"
|
|
qvm-pci attach sys-gui-gpu "$ID" --persistent -o permissive=true
|
|
done
|
|
fi
|
|
{{ end -}}
|