deeplow

Closing this, since it has been addressed already. However, [the final file](https://docs.google.com/spreadsheets/d/1u3mhMeLxbArzIwsqfqFx8T9eRhTcXx1pGNJV4UvktU4/edit?gid=526478650#gid=526478650) is private, since this is an internal document.

Interesting! All this time I was thinking that Qubes had no internal concept of what a sys-vm was. I thought it was basically any qube which has " ☑️ provides...

Just a follow up: Marek [alerted](https://github.com/QubesOS/qubes-mgmt-salt-dom0-virtual-machines/pull/63#pullrequestreview-2189084851) to the fact that the `servicevm` property will be reset if `provides network` is ever toggled on and then off again. We don't expect...

I'm not certain this fully resolved issue where it sd-proxy would not be running until the user clicked [login]. So I have filed a related issue as a fallback: https://github.com/freedomofpress/securedrop-workstation/issues/1330.

Adding some context captured on an old commit that won't make it into main: In a [specific set of circumstances](https://github.com/QubesOS/openqa-tests-qubesos/pull/25#issuecomment-2476280844) dropped packets were causing the log uploads to take a...

Thanks! I have added that to the original issue as a necessary part of the solution.

Note to self: qubes-salt has support for this feature as well https://github.com/marmarek/qubes-mgmt-salt-dom0-qvm/commit/2520c10a406fcde5d72b0534a061c733ed53737e

## Feature exploration I'll update this comment with the details I find as following #1458. **Must** - replace existing functionality (udev rules) **Should** - replace existing functionality **Could**: - start...

Per discussion with the Qubes team the auto-attachment logic per device category was considered too risky to be built into the system, which is understandable. On the flip-side we were...

I have broken this issue down into sub-tasks: one for auto-attachment and one for device denial.