rocodes

Proposed topics to add to FAQ (self-assigning if agreement from team) based on frequently-asked questions in Support tickets and preliminary calls with orgs interested in running SecureDrop. - Can I...

Make Landing Page scan a pre-requisite for submitting directory listing?

4

Hi all, As we transition to v3 onion services, the idea of onion names will be more and more appealing, and we're hopefully going to get more requests for directory...

[4.2] Write vm-specific config values to qubesdb

19

Tracking/discussion. Let's make use of `.vm-config` part of qubesdb (internal to a VM) to store vm-specific configuration. Eventually this will allow us to get rid of config.json. Upstream documentation: https://dev.qubes-os.org/projects/core-admin-client/en/latest/manpages/qvm-features.html#vm-config...

Make sure SDW won't run if dom0 config rpm is uninstalled?

3

* [x] I have searched for duplicates or related issues * Related: #939, #https://github.com/freedomofpress/securedrop-workstation/issues/951 ## Description Partly filing this for discussion purposes: If the workstation-dom0-config package is uninstalled, sdw should...

dom0 tests run on sd-devices-dvm instead of sd-devices

1

Filing for discussion/to remind myself: we don't run dom0 tests on the sd-devices dispvm, we run them on the dvm [appvm template](https://github.com/freedomofpress/securedrop-workstation/blame/343ed1997269340f4af7eec0f9fa19e56626b471/tests/test_sd_devices.py#L9) It would be better/more accurate if we ran...

Implement export with file "sanitization" (content disarm/reconstruct)

4

This is a tracking issue for all the steps related to a document sanitization (aka content disarmament/reconstruction, aka malware mitigation) workflow. The goal is a workflow that allows users to...

## Status Work in progress - dnm ## Description of Changes Towards #274 Towards #837 (also prereq for moving files out of /srv/salt/ into their own subdirectory) Prereq: #990 Changes...

Filed based on sdw hangout 2021-12-13: This is a tracking issue to discuss changes that need to be made to the codebase, especially the `launcher`, in order to more closely...

`rpm --import` does not update our release pubkey

2

### Summary dom0 updates recently started failing for longstanding SDW installs, with the behaviour that the SDW updater and GUI updater would fail, and on inspection of the updatevm console,...

Discuss update (and/or removal) strategy for non-sys VMs on SDW

5

This is a discussion issue for how we should handle the "gray area" of VMs and templates that are or have been used by SDW, but are not exclusively used...