* origin/pr/41:
Support 'state.apply' in addition to 'state.highstate'

When the base top is empty, the "if tops" condition fails even in the
DispVM where tops.yaml fil...

The former is more logical name and is preferred upstream. Handle it in
the qubesctl command, to...

* origin/pr/40:
Ensure `extmods` is absent from cache before renaming
Allow syncing all modu...

* origin/pr/37:
Fix passing quoted arguments to salt-ssh

The master on the mgmt DVM needs to have a synced extmod cache before
invoking salt-ssh, otherwi...

Usually, salt-ssh is run from a Salt master with a permanent cache dir.
In Qubes OS, a new DispV...

* origin/pr/39:
Limit catching exceptions to `has_config`
Fix --force-colo[u]r docs
Add op...

Rendering the state top on the AdminVM currently does not account
for grains, which can lead to ...

This moves the check for a qube having targeted states into the
parallelly run `run_one` functio...

Previously, any command that contained quoted arguments would not
have been received correctly b...

The latter is deprecated and will be removed in Python 3.13.

This is done via an ugly eval hack to take advantage of shell tilde
expansion.

Should be released upstream soon, but since its impact lets "apply" it
earlier.

Salt 3005 release includes partial fix for saltstack/salt#6003, but
unfortunately it doesn't cov...

This makes it work even if the bug prevents installing template updates.

QubesOS/qubes-issues#7742

* origin/pr/33:
Add Qubes Builder v2 integration
Remove deprecated content
Drop Travis CI

Legacy policy leftover could contain `@anyvm @anyvm deny` rule (which is
expected in R4.0, but n...

QubesOS/qubes-issues#6982

It breaks Debian qubes, which also don’t have buggy versions of Salt.
Fixes QubesOS/qubes-issues...

Unbreak salt using dirty hack, until upstream applies the proper fix.
This is executed in a Disp...

This bit me when I wasn't getting error messages from salt sometimes.

* origin/pr/24:
Fix reproducibility - explicit umask set

* origin/pr/23:
Invoke qubes.SaltLinuxVM as root

We run all the formulas from dom0 via qubesctl (a wrapper over
salt-ssh). There is no need to in...

As it's done in rpm. The package doesn't exist.

This avoids a dependency on `qubes-core-agent-passwordless-root`.

Fixes QubesOS/qubes-issues#6188

Newer Salt exploits pass the input as a here document, rather than as
stdin. Fix this by extrac...

Use Conflicts (instead of Requires), because this package is in common
repo, not only dom0.

Use a single /etc/qubes/policy.d/50-qubesctl-salt.policy policy file for
dynamic rules, instead ...

Log file contained only 'exit code: 0' which didn't reveal it was
considered a failure anyway. L...

* origin/pr/16:
Make qubes-mgmt-salt-base-overrides obsolete for R4.1

* origin/pr/15:
Report empty output as a failure

salt-ssh may exit with code 0 even if applying state failed. One of such
cases is saltstack/salt...

This updates builder.conf so that 'make install-deps' will install the
Python 3 version of pyyaml.

Salt in Fedora 31 is a buggy version, add a workaround until there will
be salt 2019.2.2 or newe...

QubesOS/qubes-issues#5297
QubesOS/qubes-issues#5529

Unless preserving colors is requested, filter out ANSI control
characters written into logfile t...

QubesOS/qubes-issues#5529

QubesOS/qubes-issues#4613

Debian buster package expects 'salt' user, but it isn't created if just
salt-ssh package is inst...

dict.iteritems() doesn't exist anymore. dict.items() works on both
python2 and python3.

Fixes Q...

Few more places required conversion.

Fixes QubesOS/qubes-issues#4968

Contrary to qubesctl, there is no reason to keep this script at python2.
Fedora 30 requires expl...

Put all the, even the simplest values through 'yaml' filter to properly
format them. Otherwise ...

It should be empty string, not null. Salt 2019.2 complains about it.

QubesOS/qubes-issues#4225

topd module no longer detects it automatically.

QubesOS/qubes-issues#4225

* origin/pr/10:
Wipe salt temporary files after applying state in a VM

* origin/pr/8:
Handle non existing qubessaltpatches in case where mgmt-salt-base-overrides is ...

If both template and template-based VMs are targeted, the template-based
VM would re-use deploye...

This is needed after qubes-builder change 936a3fc "Call
component-specific copy-in target after ...

- point at the log file location
- explain exit code 127 (missing qubes-mgmt-salt-vm-connector p...