/usr/share/dbus-1/system.d/systemd-localed-read-only.conf:
  file.managed:
    - source: salt://{{ slspath }}/systemd-localed-read-only.conf
    - mode: 644
    - user: root
    - group: root

systemd_reload_localed:
  cmd.run:
    - name: systemctl daemon-reload
    - name: systemctl daemon-reload && localectl set-locale en_US.UTF-8
    - onchanges:
      - file: /usr/share/dbus-1/system.d/systemd-localed-read-only.conf

us_locale:
  locale.present:
    - name: en_US.UTF-8

default_locale:
  locale.system:
    - name: en_US.UTF-8
    - require:
      - locale: us_locale

<busconfig>
        <policy user="root">
                <allow send_destination="org.freedesktop.locale1" send_interface="org.freedesktop.locale1" send_member="SetLocale"/>
                <deny send_destination="org.freedesktop.locale1" send_interface="org.freedesktop.locale1" send_member="SetVConsoleKeyboard"/>
                <deny send_destination="org.freedesktop.locale1" send_interface="org.freedesktop.locale1" send_member="SetX11Keyboard"/>
        </policy>
        <policy context="default">
                <deny send_destination="org.freedesktop.locale1" send_interface="org.freedesktop.locale1" send_member="SetLocale"/>
                <deny send_destination="org.freedesktop.locale1" send_interface="org.freedesktop.locale1" send_member="SetVConsoleKeyboard"/>
                <deny send_destination="org.freedesktop.locale1" send_interface="org.freedesktop.locale1" send_member="SetX11Keyboard"/>
        </policy>
</busconfig>