Use Fedora 34 in sys-* VMs

[conorsch]

It'll soon be that time again. We're still running Fedora 33 (#691), which goes EOL on 2021-11-30: https://endoflife.date/fedora Unfortunately, it looks like there's no qubes-template-fedora-34 RPM available in the dom0 repos for 4.0 yet. Lets investigate upstream and try to get a sense of timeline.

[conorsch]

Great opportunity to tackle #702.

[conorsch]

Still in progress upstream, see QubesOS/qubes-issues#6568. We can and should pull the template in from the "testing" repository to evaluate how it'll work.

[sssoleileraaa]

I can enable the the qube template test repos (maybe this sprint but would be interested in doing this for the next sprint) and test the fedora-34 template with our updater. i think the fedora-35 template will also be accessible, so worth testing with that too to put us much further away from the next eol.

[conorsch]

Sounds wonderful, @creviera. In the interest of clarity, I see the testing steps we can do on this issue immediately as:

1. Run sudo qubes-dom0-update --enablerepo=qubes-templates-itl-testing qubes-template-fedora-34 to grab the "testing" rpm.
2. Edit this var:

   securedrop-workstation/dom0/sd-sys-vms.sls

   Line 12 in 0197699

   {% set sd_supported_fedora_version = 'fedora-33' %}

   to use fedora-34
3. Run make clone && make prep-dev
4. Run the updater
5. Log into the client and test is functionally.

If you run into any errors, document them here and we'll investigate. Any blockers for our needs will need to be reported upstream, but let's confer amongst ourselves first.

[sssoleileraaa]

I was able to follow @conorsch's steps above and do basic client testing that included:
✔️ Export-to-usb workflow
✔️ Syncing with the server
✔️ Downloading and decrypting new files, messages, and replies sent via the web clients
✔️ Sending replies from the client

I'll check to see if we run into any issues with the fedora-35 template next.

[sssoleileraaa]

Oh, never mind about testing fedora-35, since it's not yet on the testing repo: QubesOS/qubes-issues#6969

[conorsch]

Good news, upstream's already published the F34 RPM in the prod repo for Qubes 4.0.4. We're now unblocked to migrate and release the change. Let's get an RPM up with changes and try to ship next week, to stay ahead of the EOL date. @creviera if you've got a branch lying around, mind opening a PR?