Erik Moeller

Discussed briefly in backlog review today with @creviera and @conorsch . For configuration management, Salt remains our best option. VM creation and preference management seem good candidate for refactoring to...

In spite of the error on the terminal (which a user ordinarily wouldn't see, if they launch the updater through the desktop icon), the update seems to be continuing.

It looks like it ultimately completed successfully. Here's the remainder of the output: Click to expand ``` local: ---------- ID: template-whonix-ws-15 Function: pkg.installed Name: qubes-template-whonix-ws-15 Result: True Comment: Package qubes-template-whonix-ws-15...

Retitled and rescoped -- we should IMO still understand the cause of any CRITICAL messages during the installation, and suppress if possible and appropriate, as part of getting the workstation...

I've labeled this "needs discussion" because of the recent repeated issues we've seen with Salt upstream breakage (#825, #826). Granted that these issues are less likely to occur when updating...

We discussed this on 8/23. As a next step, we identified that more research is needed to document the user experience of passphrase-protected `gpg` keys in Qubes OS. @emkll will...

Per discussion with @redshiftzero, we're removing this from the must-do alpha requirements. Without additional security mitigation the benefits here don't outweigh the immediate significant increase in complexity. We can reconsider...

Discussed at backlog review on 10/23, still something we may want to consider for defense in depth.

In my own testing, this currently works beautifully: 1) Set up SecureDrop account with HOTP per docs 2) Attach YubiKey to `sd-app` 3) Login with generated tokens to your heart's...

Tracked as release blocker to reflect severity, but we may have to narrow scope of first round fixes if we run out of time.