0.5.4 Test Plan

This test plan covers release 0.5.4 of the SecureDrop Workstation.

Test plan

Test parameters

• Hardware target: e.g. Thinkpad X1 20KH002JUS
• Install type: fresh install/"happy path" upgrade/"sad path" upgrade
• securedrop-workstation-dom0-config version: Check via dnf list in dom0
• Release candidate version: 0.5.1-rcN

Acceptance Testing

• standard acceptance tests should be completed for each release candidate

Scenario: Fresh Install

• If an existing production install is being used for testing, remove it completely with the following commands in dom0:

  sdw-admin --uninstall
  qvm-kill securedrop-workstation-buster
  sudo dnf remove qubes-template-securedrop-workstation-buster
  sudo dnf remove qubes-template-fedora-33 # may already be absent
  sudo dnf clean all
  qvm-ls | grep fedora-33 # should show no hits
  

fedora-33 migration

• Observe that sys-firewall, sys-net and sys-usb are all based on fedora-33.
• Observe that qvm-prefs default-mgmt-dvm template shows fedora-33

update-xfce-settings fixes

1. • Observe that "Suspend" and "Hibernate" options are not available in the top right user menu in Qubes, or on the "Log out" screen from the application menu. This confirms that the update-xfce-settings script is still doing its job.
2. In dom0, run sudo /srv/salt/update-xfce-settings
3. • Observe that the script exits with "This script should not be run as root"

detailed logging and improved error handling

1. Modify your copy of /srv/salt/update-xfce-settings to exit 1 immediately
2. Run the updater with /opt/securedrop/launcher/sdw-launcher.py --skip-delta 0
3. • Observe that the updater ultimately reports an error
4. • Observe that the apply_dom0 error is logged in ~/.securedrop_launcher/logs/launcher.log, and that details are available in ~/.securedrop_launcher/logs/launcher-detail.log (launcher-detail.log is newly added in this release).
5. Undo your local modification

Scenario: in-place upgrade

fedora-33 migration

1. Ensure that you do not have a fedora-33 template present on your system from prior runs or a manual update. If necessary, remove the template with sudo dnf remove qubes-template-fedora-33.
2. Run the updater with /opt/securedrop/launcher/sdw-launcher.py --skip-delta 0.
3. • Observe that the update completes successfully
4. • Observe that the fedora-33 template is now installed
5. • Observe that qvm-ls | grep fedora shows that sys-net, sys-usb, and sys-firewall are all based on fedora-33.
6. • Observe that qvm-prefs default-mgmt-dvm template shows fedora-33

update-xfce-settings fixes

As above.

detailed logging and improved error handling

As above.