For context, see freedomofpress/securedrop-workstation#887 and freedomofpress/securedrop-yum-test#48
Unpack RPM and reassemble root image
$ rpm2cpio qubes-template-securedrop-workstation-bullseye-4.0.6-202206302135.noarch.rpm | cpio -idmv
$ cat var/lib/qubes/vm-templates/securedrop-workstation-bullseye/root.img.part.* | tar --sparse -xf - -C .
Mount everything that's necessary to use chroot
and ensure DNS will work. losetup
command will give you a /dev/loop
device, the specific number of which depends on whether you already had loop devices established. The specific number of the loop device is replaced with a ?
in these instructions.