qubes-issues
qubes-issues copied to clipboard
qubes-ansible: It's easy to accidentally not use `qubes_proxy` in dom0
Qubes OS release
Qubes OS 4.3
Brief summary
If a user only installs qubes-ansible but not qubes-ansible-dom0 both the qubes_proxy strategy as well as the guard that prevents accidentally not using it is missing.
Steps to reproduce
- Install
qubes-ansible(but notqubes-ansible-dom0) in dom0. - Run a playbook against a VM, but do not enable the
qubes_proxystrategy
Expected behavior
It should fail and inform the users that they must use the qubes_proxy strategy.
Actual behavior
Works without using qubes_proxy. See #10030 for why this is a problem.
Additional information
No response
Would it be as simple as making qubes-ansible depend on qubes-ansible-dom0 for the host packages?