From af20dbc3dbd2466ef25304e7bf4d534cbbab8820 Mon Sep 17 00:00:00 2001
From: unman <unman@thirdeyesecurity.org>
Date: Wed, 15 Jan 2020 18:42:00 +0000
Subject: [PATCH] Disable package caching in apt operations

---
 debian/qubes-core-agent.install      | 1 +
 package-managers/Makefile            | 2 ++
 package-managers/apt-conf-10no-cache | 3 +++
 3 files changed, 6 insertions(+)
 create mode 100644 package-managers/apt-conf-10no-cache

diff --git a/debian/qubes-core-agent.install b/debian/qubes-core-agent.install
index 70249da..9859458 100644
--- a/debian/qubes-core-agent.install
+++ b/debian/qubes-core-agent.install
@@ -1,5 +1,6 @@
 etc/apt/apt.conf.d/00notify-hook
 etc/apt/apt.conf.d/70no-unattended
+etc/apt/apt.conf.d/10no-cache
 etc/apt/sources.list.d/qubes-r4.list
 etc/apt/trusted.gpg.d/qubes-archive-keyring.gpg
 etc/dconf/db/local.d/dpi
diff --git a/package-managers/Makefile b/package-managers/Makefile
index e47d1eb..6aa42e0 100644
--- a/package-managers/Makefile
+++ b/package-managers/Makefile
@@ -30,6 +30,8 @@ install-apt:
 		$(DESTDIR)$(APTCONFDIR)/apt.conf.d/00notify-hook
 	install -D -m 0644 apt-conf-70no-unattended \
 		$(DESTDIR)$(APTCONFDIR)/apt.conf.d/70no-unattended
+	install -D -m 0644 apt-conf-10no-cache \
+		$(DESTDIR)$(APTCONFDIR)/apt.conf.d/10no-cache
 
 install-dnf: install-rpm
 	install -D -m 0644 dnf-qubes-hooks.py \
diff --git a/package-managers/apt-conf-10no-cache b/package-managers/apt-conf-10no-cache
new file mode 100644
index 0000000..56e5b0d
--- /dev/null
+++ b/package-managers/apt-conf-10no-cache
@@ -0,0 +1,3 @@
+## Disable caching of packages in all apt operations
+
+APT::Keep-Downloaded-Packages "0";