configure VMs via vm-config.* features

[cfm]

Status

Work in progress

Description of Changes

Towards #936

• Based/blocked on Update SecureDrop workstation to support 4.2 and use an install-time base template. #970

Changes proposed in this pull request:

Testing

If you made non-trivial code changes, include a test plan and validated it for this PR.

Deployment

Any special considerations for deployment? Consider both:

1. Upgrading existing pilot instances
2. New installs

Checklist

If you have made changes to the provisioning logic

• All tests (make test) pass in dom0

If you have added or removed files

• I have updated MANIFEST.in and rpm-build/SPECS/securedrop-workstation-dom0-config.spec

If documentation is required

• I have opened a PR in the docs repo for these changes, or will do so later
• I would appreciate help with the documentation

[cfm]

As of 5873c63, this works as intended:

Script started on 2024-02-28 16:58:08-08:00 [TERM="xterm-256color" TTY="/dev/pts/6" COLUMNS="80" LINES="24"]
[user@dom0 securedrop-workstation]$ qvm-run --pass-io sd-app qubesdb-list /vm-config/
QUBES_GPG_DOMAIN
SD_SUBMISSION_KEY_FPR
[user@dom0 securedrop-workstation]$ qvm-run --pass-io sd-app qubesdb-read /vm-config/QUBES_GPG_DOMAIN
sd-gpg
[user@dom0 securedrop-workstation]$ qvm-run --pass-io sd-app qubesdb-read /vm-config/SD_SUBMISSION_KEY_FPR
5F4BB12BAF811C789347DDFF148B87347CB3DDA1
[user@dom0 securedrop-workstation]$ 
exit

Script done on 2024-02-28 16:58:36-08:00 [COMMAND_EXIT_CODE="0"]

[cfm]

This will need to be rebased once 4_2-compat-deb12-base hits main.

[cfm]

Superseded by #1001.