deeplow

Add 4.3 to Current CI setup

1

## Description Install 4.3 on the [current CI](https://github.com/freedomofpress/securedrop-workstation-ci/) to help flag the 4.3 compatibility status.

Ensure Support and Transition to Qubes 4.3

5

## Description Ensure support and timely transition to Qubes 4.3. **Stage 1:** #1458 **Stage 2:** Minimal support - ensure SDW can be clean installed and upgraded to Qubes 4.3 **Stage...

Make use of custom-persist on app qubes

1

## Description Limit persistence on certain directories in the app qubes with [`custom-persist`](https://github.com/QubesOS/qubes-issues/issues/1006). ## How will this impact [SecureDrop/SecureDrop Workstation users](https://github.com/freedomofpress/securedrop-ux/wiki/Users)? No impact. ## How would this affect the SecureDrop...

## Description Some pretty loud complaining [in 4.2 build logs](https://github.com/freedomofpress/build-logs/commit/7b7e83e2bc95e36b0b58386d48cb72bc05a0bb17#diff-507ac44cf3af33b915bc3a584deebe5490a5e7efb7b7bdff4b40082b1d45a82eR1574) about impending `pyproject.toml`'s strictness in project metadata. Fedora 41 (dom0's fedora version) this will actually break the build. ``` ############################...

Simplification: reconsider necessity of sd-log

7

## Description With @zenmonkeykstop we came to the conclusion that sd-log may not need to exist, especially given what it currently provides. **Properties of sd-log:** - append-only - realtime -...

sd-devices should not need to open in disposables

4

## Description Even though `sd-devices` has `default_dispvm` set to `None`, it can still open files in disposables due to qrexec policy: ``` qubes.OpenInVM * sd-devices @dispvm:sd-viewer allow ``` From what...

## Description Some workstation development has been made with the assumption that named disposables inherit features / services from their disposable template. This meant that some services are only set...

Graphical Installer

2

* [ ] I have searched for duplicates or related issues ## Description Graphical installer for the workstation. Even though this has been talked about by the team and even...

## Describe the change As we're slowly opening the doors for the SecureDrop workstation (now in open Beta), we should update the documentation to at least mention both approaches. From...

Graphical Package Manager Support

26

**The problem you're addressing (if any)** The fedora template "Software" graphical installer does not work out of the box, despite being one of the default template shortcuts. This leads to...