rocodes

Apt repo config via salt vs qubes-update-check.timer: it's a race!

2

* [x] I have searched for duplicates or related issues ## Description Noticed during a [CI run](https://github.com/freedomofpress/securedrop-workstation/pull/1078#issuecomment-2168331413) that sometimes the apt-repo salt config fails because another process is using apt,...

* [x] I have searched for duplicates or related issues ## Description Inspecting the journal of a 4.2 (dev) instance, I see an error at every boot: ``` dom0 systemd[1]:...

Simpler rpm build (and/or more legible repo)

2

* [x] I have searched for duplicates or related issues. [Mildly conceptually related: #837] ## Description In our rpm build, we create a source tarball, but we don't really need...

Use dev/staging pillars to remove branching logic in provisioning

5

* [x] I have searched for duplicates or related issues ## Description Filing for discussion Right now our provisioning logic copies everything needed for provisioning into one common Salt directory,...

Use preset files for conditionally enabling/disabling systemd services

2

[Preset files](https://www.freedesktop.org/software/systemd/man/latest/systemd.preset.html) allow for the %post of a package installation to simply call `systemctl preset mycoolservicename.service` no matter what, and the service will be conditionally enabled/disabled depending on the contents...

Create backup method for workstation config files

3

[Issue based on today's SecureDrop tech meeting] In order to preserve secrets/config files required for SecureDrop Workstation during a backiup/restore process, `dom0`'s `/usr/share/securedrop-workstation-dom0/config` folder, which contains `config.json` (including the `app-journalist.auth_private`...

* [x] I have searched for duplicates or related issues ## Description From review of #1165 : `sd_supported_fedora_version` and `sd_fedora_supported_template` are both in use now as of 4.2 compat. This...

* [x] I have searched for duplicates or related issues ## Description QA report: If a subkey is used as the Submission Private Key, the SDWConfigValidator fails with the message...

Improve error-handling for deleted files, messages, and replies

1

## Status Ready for review ## Description Fixes #2217 by ensuring that database queries expecting exactly one File, Message, or Reply are error-handled. Note: This is a deliberately limited-scope fix;...

## Status Ready for review but presumes #2230 which should be reviewed first, will rebase once that's merged ## Description Towards #2160 ## Test Plan TK ## Checklist If these...