deeplow
deeplow
Parent issue to track progress towards the replacement of Qubes CI, now that we have hit functional parity #1300.
## Observation openQA test in scenario qubesos-4.2-securedrop-x86_64-securedrop_install@64bit fails in [install_workstation_updates](https://openqa.qubes-os.org/tests/141124/modules/install_workstation_updates/steps/46) After SDW is installed and the system gets restarted where there is a race condition between the OpenQA initial boot...
## Description "Configure all" step fails without apparent reason in [this](https://openqa.qubes-os.org/tests/149921) OpenQA test. For archival reasons, here are the details:  Log files: - [sdw-admin--apply.log](https://github.com/user-attachments/files/21898537/install_workstation-sdw-admin-apply.8.log) - [journalctl.log](https://github.com/user-attachments/files/21898584/install_workstation-user-journalctl.log) In it the...
The [lint job](https://github.com/freedomofpress/securedrop-workstation/actions/runs/16964519452/job/48084987018), for example, takes only 7 seconds. Yet, installing dependencies takes 1m27s: With some caching we could get this down to near-zero. Any reason not to go this...
## Description This is because the updater stops at 10% while [applying the dom0 salt states](https://github.com/freedomofpress/securedrop-workstation/blob/release/1.2.1/sdw_updater/UpdaterApp.py#L256-L262). This step is regularly just a few minutes, but in case of a template...
## Proposal Make `sd-gpg` disposable, through on-boot configuration. ### Affected components - SecureDrop Workstation - SecureDrop Client ### Problem Statement **Context**: `sd-gpg` has been [a straggler](https://github.com/freedomofpress/securedrop-workstation/blob/6224e5b/securedrop_salt/sd-workstation.top#L35) in the migration to...
In #1337 the goal was to have initial support for pytest in dom0. However, this leaves many tests in need of conversion (search for `unittest` and you'll still find many...
MVP to convert current SaltStack code to make use of Ansible. Specifically looking for missing regressions in current [qubes-ansible](https://github.com/QubesOS/qubes-ansible/) for full conversion and filing issues for that.
Demonstrate the potential of Management VMs and study the feasibility to make use of them in the workstation or Dangerzone.
> This works well with HTTPS git remotes, but not with ssh, so it will work for unauthenticated pulls from public repos. I'm approving it as is and we can...