In Getting Started, we covered the distinction in Qubes OS between where you install your software and where you run your software. Your software is installed in templates. Each template shares its root filesystem (i.e., all of its programs and system files) with all the qubes based on it. App qubes are where you run your software and store your data.
– so by that logic, sys-usb/sys-net/sys-firewalls should not be “Templates” but “App qubes”.
Wrt. the reinstalling of sys-usb/sys-net/sys-firewall, I guess you could use this:
Edit2: Caution: “The pages are intended for advanced users.” – I’ve not tried any of it myself, but I would make a new backup of important files, read the full pages … and be prepared to either restore from the backup or cry a lot.
I thought the same and debated between “;” or “&&” but, regardless for either case qvm-remove doesn’t background by default such that, should the remove command fail and, sys-* exists, so too will the qubesctl “re-salt” command.
Could you offer any input/direction on a slick way to incorporate the pillar options I mentioned above? From my experience, “resalting” just uses the same options chosen at install.