Add qubes-core-admin-addon-kicksecure to Qubes repositories

[ArrayBolt3]

How to file a helpful issue

The problem you're addressing (if any)

sdwdate-gui has been rewritten to overcome shortcomings in its original implementation, and to allow Kicksecure qubes to show their sdwdate user interface in the global sdwdate-gui menu provided by sys-whonix. In order for this to work, it will be necessary for Kicksecure qubes to be able to call the sdwdate.Connect and sdwdate.ConnectCheck qrexec calls in sys-whonix. I will be submitting an update to qubes-core-admin-addon-whonix that provides the proper configuration for these calls to work for properly tagged VMs, and tags Whonix qubes properly.

Currently there's nothing in Qubes OS that can tag a Kicksecure qube as a valid sdwdate-gui client. This must be overcome in order to resolve #7447. While this bug is very closely related to the linked bug, I'm treating them as separate as the request here is a vital part of the fix, but not the entire fix.

The solution you'd like

Add a new package, qubes-core-admin-addon-kicksecure that will tag Kicksecure qubes with the needed sdwdate-client tag, very similar to how qubes-core-admin-addon-whonix already works.

The value to a user and who that user might be

People can use Kicksecure qubes without getting bombarded with qrexec denial error messages.

Completion criteria checklist

(This section is for developer use only. Please do not modify it.)

[ArrayBolt3]

Forgot to actually link to the repo. https://github.com/ArrayBolt3/qubes-core-admin-addon-kicksecure Note that only the code should be considered for integration, I have a weird tag in this repo that I added to convince qubes-builderv2 to fetch and build this, and I don't think we want that in the official Qubes OS repo. So please don't just fork this into the QubesOS organization.

[ArrayBolt3]

qubes-core-admin-addon-whonix PR: QubesOS/qubes-core-admin-addon-whonix#21

[ArrayBolt3]

Here are the Kicksecure/Whonix side changes that go along with this:

• https://github.com/ArrayBolt3/sdwdate-gui/tree/arraybolt3/qubes-redesign
• https://github.com/ArrayBolt3/anon-gw-base-files/tree/arraybolt3/sdwdate-gui
• https://github.com/ArrayBolt3/kicksecure-base-files/tree/arraybolt3/sdwdate-gui

[ArrayBolt3]

@andrewdavidwong I'm not sure I should be the one assigned to this, since while I have created the package, I have no power (and should remain having no power) to add a package to the QubesOS Github organization or do any of the other things involved in publishing a package onto Qubes OS's servers.

[ArrayBolt3]

Patrick pointed out that the tag naming I chose with sdwdate-client and sdwdate-server isn't quite accurate, they should be sdwdate-gui-client and sdwdate-gui-server. Thus please consider this blocked until I have those changes made.

[ArrayBolt3]

Fixed tag naming, I believe this is now unblocked.