Ensure Support and Transition to Qubes 4.3

[deeplow]

• I have searched for duplicates or related issues

Description

Ensure support and timely transition to Qubes 4.3.

How will this impact SecureDrop/SecureDrop Workstation users?

There will be an in-place upgrade. It may require some admin follow-up.

How would this affect the SecureDrop Workstation threat model?

It shouldn't unless some fundamental Qubes behavior changes in a way that breaks some of our assumptions.

[deeplow]

I ran the installation in OpenQA and it had challenges finding python3.11 and python3-qt. And this is odd, since supposedly this is available in Fedora 41 (the likely dom0 candidate).

[legoktm]

IIRC sudo dnf install in dom0 does not resolve dependencies (per #1063).

Presumably those were always pre-installed in dom0 so it happened to work, if you sudo qubes-dom0-update -y python3-qt5 what happens?

Also note that the default Python version on Fedora 41 is actually 3.13; we should just install python3. Fedora provides all the different versions of Python to make testing easier, but per https://developer.fedoraproject.org/tech/languages/python/multiple-pythons.html:

Warning: For production purposes you should use the python3 package only. Other CPython versions might be unstable or even dangerous (either because they are extremely old or quite the contrary alpha/beta quality) and are intended solely for development.

[deeplow]

Presumably those were always pre-installed in dom0 so it happened to work, if you sudo qubes-dom0-update -y python3-qt5 what happens?

That's what I was testing, but something went wrong, apparently. Doing it now.

Also note that the default Python version on Fedora 41 is actually 3.13; we should just install python3.

💯