Cory Francis Myers

#1051, specifically ebcabf6fcc25a33d22ef7b8a1cf1d7960e5732c3, demonstrates using a Qubes service as the trigger for a `ConditionPathExists`-based systemd service that applies further configuration from QubesDB.

I like the (partial, one-way) atomicity of triggering "sdw-admin --uninstall" from securedrop-workstation-dom0-config's "preun" scriptlet, but it looks like "preun" is also run during upgrade.[1] My intuition is that this is...

Thanks for starting this ticket, @rocodes. I've expanded your list into a table tracing each value currently defined in `config.json` to each place where it's used, then categorized how. Here's...

It's a fair point, @zenmonkeykstop. The complications I see are that: 1. we have decided we don't want provisioning to reach inside individual VMs once templates are configured; and 2....

I agree, @zenmonkeykstop, except that to my eye it's a significant-enough exception that it may mean that the guideline itself is wrong (or at least incomplete). :-) Today I started...

Oh, the more I consider @zenmonkeykstop's concern in , the more convinced I am by it. I'm just trying to spell out the implications. Bear with me. We're trying to...

Thanks, @rocodes! I think the principles you've expressed in are consistent with the approach I outlined at the end of .

@legoktm in : > [I]f we have to write/implement this intermediary, why not just stick it in the application itself? In the proxy v2 we read from an environment variable,...

Thanks for the reality-check, @legoktm. I've drafted the Python version in freedomofpress/securedrop-client#1883 (with the caveat in freedomofpress/securedrop-client#1882) and started work on the Rust version.

I've drafted the Rust implementation against `libqubesdb` in freedomofpress/securedrop-client#1895.