What’s new in SecureDrop Workstation 1.1.1?

This version adds support for Fedora 41-based system VMs and allows for more robust provisioning and updating. This update will take a little longer than usual while it downloads the new Fedora template.

Note: Version 1.1.0 is superseded by 1.1.1 due to an issue uncovered during pre-release QA.

A full list of changes can be found in the changelog. Notable changes are below:

User-facing features

• Add additional Submission Key validation checks in SDWConfigValidator (#1205)
• Replace Salt updates with qubes-vm-update in SecureDrop Updater (#1165)
• Revert internal setting for sd-app and sd-devices (#1216)

Platform and provisioning improvements

• Bump supported Fedora version to Fedora-41 (#1221)
• Set up sd-log at the same time as other VMs (#1253)
• Provisioning/configuration tooling improvements (#1159)
• Remove Salt orchestration of libreoffice and handle via Debian packages (#1162)
• Enforce template setting via qvm-prefs (#1226)

Internal changes

• Remove nopat kernelopt (#1172)
• Use systemd timer instead of Salt for sdw-notify (#1088)

Acknowledgments

We’d like to thank the Qubes team for addressing our feature requests and bugs, as well as providing advice and guidance.

This release incorporates Freedom of the Press Foundation (FPF) contributions by Giulio B, Nathan Dyer, Kunal Mehta, Erik Moeller, Cory Francis Myers, Kevin O'Gorman, Francisco Rocha, and Rowen S.