https://github.com/QubesOS/qubes-secpack/blob/master/canarie...
edit: and the script itself: https://github.com/QubesOS/qubes-secpack/blob/master/utils/p...