deeplow

## (Proposal) Mitigating some printer-related risks We want to add support for driverless printing (IPP) to the workstation. However, [recent vulnerabilities in CUPS](https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/) (linux printing) highlighted just how brittle these...

That makes sense. Given the (understandable) skepticism, let's proceed with driverless printing with complete printer autodetetion.

Given that we have a decision on how to proceed, I'm moving forward with the implementation already. But I an implementation question. We currently support two printers (I think). It's...

While implementing this I'm running into an issue where the ipp info is sometimes being shown on `lpinfo -v` and other times not. It seems to be inconsistent and is...

> @deeplow: re printer detection via lpinfo: can you post the exact steps you are doing to configure the printer, either in a draft PR or a gist somewhere? I...

Update from https://github.com/freedomofpress/securedrop-client/pull/2332: `ippfind` ended up proving to be a stable way to identify IPP printers.

> Update from [#2332](https://github.com/freedomofpress/securedrop-client/pull/2332): `ippfind` ended up proving to be a stable way to identify IPP printers. This later changed to `sudo ipp-usb check` and then later to checking if...

I should have mentioned before, but I have had issues in the past with fwupd where it didn't fully shut down my system prior to firmware updates. So it just...

### Implementation ideas **Setup:** - install a package (e.g. `htop`) on dom0 and all sdw-managed templates - then downgrade said package (e.g. `qubes-dom0-update --action=downgrade htop`) **When:** - SDW Updater is...

My suggestion until the EOW would be to: - compare deployment methods and share development best practices - mapping the various deployments stages on the lookout for unnecessary bits (perhaps...