build and upload qubes-remote-support package

[adrelanos]

Task for @marmarek. (As confirmed by @marmarek.)

• fork https://github.com/adrelanos/qubes-remote-support to https://github.com/QubesOS/qubes-remote-support
• build https://github.com/QubesOS/qubes-remote-support
• upload qubes-remote-support

---

Background:

https://www.whonix.org/wiki/Dev/Qubes_Remote_Support

[andrewdavidwong]

Was there a security discussion about this somewhere? I'd like to read more of the context.

This will be a sensitive topic for many users, who will want assurance that all remote functionality is strictly opt-in.

Ideally, we'll be able to tell users that, unless they follow specific instructions to install qubes-remote-support, the code will not even be present on their systems, and hence that there will be no possibility of remote compromise through this functionality on a default Qubes installation. I'm guessing that's going to be the case, but I'd like to confirm.

[marmarek]

This will be a sensitive topic for many users, who will want assurance that all remote functionality is strictly opt-in.

This one is easy:

1. The package will not be installed by default.
2. The design requires explicit connection initiation by the user (no any open ports, extra network connections etc before that point). And when the user initiate the connection, it requires sharing a code word with the remote party to be able to connect.

[andrewdavidwong]

This will be a sensitive topic for many users, who will want assurance that all remote functionality is strictly opt-in.

This one is easy:

1. The package will not be installed by default.
2. The design requires explicit connection initiation by the user (no any open ports, extra network connections etc before that point). And when the user initiate the connection, it requires sharing a code word with the remote party to be able to connect.

Good to hear. Thanks!

[tlaurion]

@marmarek the deadline for payout for that NlNet run is on April, after which money disappears.

Can we prioritize this?

[marmarek]

QubesOS/updates-status#2353

[adrelanos]

• https://www.whonix.org/wiki/Remote_Administration#Qubes_-_SSH_or_VNC_into_Qubes_dom0
• https://www.whonix.org/wiki/Dev/Qubes_Remote_Support

[adrelanos]

• https://forums.whonix.org/t/qubes-ssh-soon-vnc-into-qubes-dom0-testers-wanted/11330
• https://groups.google.com/d/msgid/qubes-users/176bd8b8-ade0-3a60-1b12-f168719293a1%40whonix.org

[marmarek]

X2go is currently broken due to upstream issue: ArcticaProject/nx-libs#1009. Fix was already proposed, but wasn't deployed yet.

[mfc]

I would add release notes tag and R4.1 milestone, i think this is quite notable optional functionality now present in R4.1.