This is a tracking issue for the release of SecureDrop 2.8.0

Tentatively scheduled as follows:

Pre-release announcement: 2023-03-05 Release date: 2024-03-12

Release manager: @zenmonkeykstop
Deputy release manager: @legoktm Localization manager: @cfm Communications manager: @eloquence

SecureDrop maintainers and testers: As you QA 2.8.0, please report back your testing results as comments on this ticket. File GitHub issues for any problems found, tag them "QA: Release".

Test debian packages will be posted on https://apt-test.freedom.press signed with the test key.

QA Matrix for 2.8.0

Test Plan for 2.8.0

Tails-only test plan for 2.8.0-rc2

(complete if you've already tested 2.8.0-rc1, there are no server changes in rc2)

Prepare release candidate (2.8.0~rc1)

[ ] Link to latest version of Tails, including release candidates, to test against during QA
- [ ] Tails 5
- [ ] Tails 6
[x] Prepare 2.8.0~rc1 release changelog
[x] Branch off release/2.8.0 from develop
[x] Prepare 2.8.0
[ ] Build debs, preserving build log, and put up 2.8.0~rc1 on test apt server
[ ] Commit build log.

Prepare release candidate (2.8.0~rc2)

[ ] Link to latest version of Tails, including release candidates, to test against during QA
- [x] Tails 5
- [x] Tails 6
[x] Prepare 2.8.0~rc2 release changelog
[x] Branch off release/2.8.0 from develop
[x] Prepare 2.8.0-rc2
[ ] ~Build debs, preserving build log, and put up 2.8.0~rc1 on test apt server~ skipped, as changes are Tails-only.
[ ] ~Commit build log.~

After each test, please update the QA matrix and post details for Basic Server Testing, Application Acceptance Testing and release-specific testing below in comments to this ticket.

Final release

[ ] ~Ensure builder in release branch is updated and/or update builder image~ (no longer in use)
[x] Push signed tag
[x] Pre-Flight: Test updater logic in Tails (apt-qa tracks the release branch in the LFS repo)
[x] Build final Debian packages(and preserve build log)
[x] Commit package build log to https://github.com/freedomofpress/build-logs
[x] Pre-Flight: Test that install and upgrade from 2.7.0 to 2.8.0 works w/ prod repo debs (apt-qa.freedom.press polls the release branch in the LFS repo for the debs)
[ ] Flip apt QA server to prod status (merge to main in the LFS repo)
[ ] Merge Docs branch changes to main and verify new docs build in securedrop-docs repo
[ ] Prepare release messaging

Post release

[ ] Create GitHub release object
[ ] Once release object is created, update versions in securedrop-docs and Wagtail
[ ] Verify new docs show up on https://docs.securedrop.org
[ ] Publish announcements
[ ] Merge changelog back to develop
[ ] Update roadmap wiki page: https://github.com/freedomofpress/securedrop/wiki/Development-Roadmap

2.8.0 QA Checklist IN PROGRESS

Environment

Install target: Nuc13/Nuc8
Tails version: 6
Test Scenario: install
SSH over Tor: Yes
Release candidate: RC1
General notes:

Basic Server Testing

[x] After installing the testinfra dependencies, all tests in ./securedrop-admin verify are passing:
- Install dependencies on Admin Workstation with cd ~/Persistent/securedrop && ./securedrop-admin setup -t
- Run tests with ./securedrop-admin verify (this will take a while) one failing unattended-upgrade test - it's failing because there are no pending updates, and the expected output doesn't include that case - that should probably be fixed.
- Remove test dependencies: rm -rf admin/.venv3/ && ./securedrop-admin setup
[x] QA Matrix checks pass

Command Line User Generation

[x] Can successfully add admin user and login

(Optional) Administration

[x] I have backed up and successfully restored the app server following the backup documentation
[x] If doing upgrade testing, make a backup on 2.7.0 and restore this backup on this release candidate
[x] "Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent Hit #3530 due to a dud pubkey but alert was triggered and the error from the encrypting script was sent
[ ] Can successfully add journalist account with HOTP authentication skipped

(Optional) Application Acceptance Testing

Source Interface

Landing page base cases

[x] JS warning bar does not appear when using Security Slider high
[x] JS warning bar does appear when using Security Slider Low

First submission base cases

[x] On generate page, refreshing page produces a new 7-word codename
[x] On submit page, empty submissions produce flashed message
[x] On submit page, short message submitted successfully
[x] On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
[x] On submit page, file less than 500 MB submitted successfully

Returning source base cases

[x] Nonexistent codename cannot log in
[x] Empty codename cannot log in
[x] Legitimate codename can log in
[x] Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

[x] Can log in with 2FA tokens
[x] incorrect password cannot log in
[x] invalid 2fa token cannot log in
[x] 2fa immediate reuse cannot log in
[ ] Journalist account with HOTP can log in

Index base cases

[x] Filter by codename works
[x] Starring and unstarring works
[x] Click select all selects all submissions
[x] Selecting all and clicking "Download" works

Individual source page

[x] You can submit a reply and a flashed message and new row appears
[x] You cannot submit an empty reply
[x] Clicking "Delete Source Account" and the source and docs are deleted
[x] You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

[x] The Updater GUI appears on boot

2.8.0 release-specific changes

Update to 5.15.148 kernel (https://github.com/freedomofpress/securedrop/issues/7113)

[x] Kernel-specific checks in QA matrix pass on instance hardware.

Tails 6 support (https://github.com/freedomofpress/securedrop/pull/7116)

Fresh install (Tails 6)

Set up a Tails 6 workstation using the latest RC tag and verify that:
- [x] ./securedrop-admin setup completes successfully, installing required apt packages and creating a virtualenv with updated dependencies listed above
- [x] ./securedrop-admin --force sdconfig completes successfully
- [x] ./securedrop-admin --force install completes successfully
- [x] ./securedrop-admin --force tailsconfig completes successfully with ssh targets, desktop icons, and SecureDrop menu available.
reboot the admin workstation and verify that:
- [x] The network hook runs successfully on network connection, and the ssh targets, desktop icons, and SecureDrop menu are available.
Create a new source account via the SI and make a submission. Then, confirm that:
- [x] ./securedrop-admin backup completes successfully
- [x] in the JI, the first source is present.
Create a second source account via the SI and make a submission, then run ./securedrop-admin restore
and confirm that
- [x] the restore command completes successfully
- [x] in the JI, the first source is present but the second source is not.

Preflight testing

Basic testing

[ ] Install or upgrade occurs without error (from apt-qa.freedom.press per preflight procedure)
[ ] Source interface is available and version string indicates it is 2.8.0
[ ] A message can be successfully submitted

Tails 5

[ ] The updater GUI appears on boot
[ ] The update successfully occurs to 2.8.0
[ ] After reboot, updater GUI no longer appears

Tails 6

[ ] Manual install of 2.8.0 is successful
[ ] After reboot, updater GUI does not appear

Install target: NUC11s
Tails version: 5.20
Test Scenario: upgrade
SSH over Tor: yes
Release candidate: 2.8.0-rc1
General notes:

Basic Server Testing

[x] After installing the testinfra dependencies, all tests in ./securedrop-admin verify are passing:
- Install dependencies on Admin Workstation with cd ~/Persistent/securedrop && ./securedrop-admin setup -t
- Run tests with ./securedrop-admin verify (this will take a while)
- Remove test dependencies: rm -rf admin/.venv3/ && ./securedrop-admin setup
[x] QA Matrix checks pass

Command Line User Generation

[x] Can successfully add admin user and login

(Optional) Administration

[x] I have backed up and successfully restored the app server following the backup documentation
[x] If doing upgrade testing, make a backup on 2.7.0 and restore this backup on this release candidate
[x] "Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
[-] Can successfully add journalist account with HOTP authentication

(Optional) Application Acceptance Testing

Source Interface

Landing page base cases

[x] JS warning bar does not appear when using Security Slider high
[x] JS warning bar does appear when using Security Slider Low

First submission base cases

[x] On generate page, refreshing page produces a new 7-word codename
[x] On submit page, empty submissions produce flashed message
[x] On submit page, short message submitted successfully
[x] On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
[x] On submit page, file less than 500 MB submitted successfully

Returning source base cases

[x] Nonexistent codename cannot log in
[x] Empty codename cannot log in
[x] Legitimate codename can log in
[x] Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

[x] Can log in with 2FA tokens
[x] incorrect password cannot log in
[x] invalid 2fa token cannot log in
[x] 2fa immediate reuse cannot log in
[-] Journalist account with HOTP can log in

Index base cases

[x] Filter by codename works
[x] Starring and unstarring works
[x] Click select all selects all submissions
[x] Selecting all and clicking "Download" works

Individual source page

[x] You can submit a reply and a flashed message and new row appears
[x] You cannot submit an empty reply
[x] Clicking "Delete Source Account" and the source and docs are deleted
[x] You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

[x] The Updater GUI appears on boot

2.8.0 release-specific changes

Update to 5.15.148 kernel (https://github.com/freedomofpress/securedrop/issues/7113)

[x] Kernel-specific checks in QA matrix pass on instance hardware.

Tails 6 support (https://github.com/freedomofpress/securedrop/pull/7116)

Upgrade #1 - updating to 2.8.0 on Tails 5

On a Tails 5 admin workstation with an existing install of 2.7.0, simulate a GUI update with the following commands:
- [x] git fetch && git checkout <latest RC tag> completes
- [x] ./securedrop-admin setup completes
- [x] ./securedrop-admin --force tailsconfig completes
Verify that ssh targets, desktop icons, and SecureDrop menu are still available and working.
[x] Confirm that ./securedrop-admin logs completes successfully, capturing the expected logs
Verify that:
- [x] ./securedrop-admin --force sdconfig lists the expected config settings
- [x] A rerun of ./securedrop-admin --force install completes successfully (may take time over Tor)
reboot the admin workstation and verify that:
- [x] The network hook runs successfully on network connection, and the ssh targets, desktop icons, and SecureDrop menu are available.
Submit via the source interface, create a journalist account, and reply via the journalist interface. Then, confirm that:
- [x] ./securedrop-admin backup completes successfully
Reply again, run ./securedrop-admin restore <backupname> and confirm that
- [x] the restore command completes successfully
- [x] the second reply is not present.

Upgrade #2 - updating to Tails 6, updating to 2.8.0

Create a fresh Tails 6 stick and restore the PV from your Tails 5 admin workstation to it, using these instructions
Perform a manual update:
- [x] git fetch && git checkout <latest RC tag> (simulating ./securedrop-admin update)
- [x] ./securedrop-admin setup - confirm that the tails 5 venv is destroyed and a tails 6 version created
- [x] ./securedrop-admin --force tailsconfig - confirm that ssh targets, icons, and menu are created
[x] Confirm that ./securedrop-admin logs completes successfully, capturing the expected logs
Verify that:
- [x] ./securedrop-admin --force sdconfig lists the expected config settings
- [x] A rerun of ./securedrop-admin --force install completes successfully
reboot the admin workstation and verify that:
- [x] The network hook runs successfully on network connection, and the ssh targets and SecureDrop menu are available.
Submit via the source interface, create a journalist account, and reply via the journalist interface. Then, confirm that:
- [x] ./securedrop-admin backup completes successfully
Reply again, run ./securedrop-admin restore <backupname> and confirm that
- [x] the restore command completes successfully
- [x] the second reply is not present.

Well, modulo #5225 → #7132.

2.8.0 QA Checklist

Environment

Install target: NUC11 (app) / NUC10 (mon)
Tails version: 6.0
Test Scenario: fresh install
SSH over Tor: no
Release candidate: 2.8.0rc1
General notes: all looks good

Basic Server Testing

[ ] After installing the testinfra dependencies, all tests in ./securedrop-admin verify are passing:
- Install dependencies on Admin Workstation with cd ~/Persistent/securedrop && ./securedrop-admin setup -t
- Run tests with ./securedrop-admin verify (this will take a while)
- Remove test dependencies: rm -rf admin/.venv3/ && ./securedrop-admin setup
[ ] QA Matrix checks pass

Command Line User Generation

[x] Can successfully add admin user and login

(Optional) Administration

[ ] I have backed up and successfully restored the app server following the backup documentation
[ ] If doing upgrade testing, make a backup on 2.7.0 and restore this backup on this release candidate
[ ] "Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
[ ] Can successfully add journalist account with HOTP authentication

(Optional) Application Acceptance Testing

Source Interface

Landing page base cases

[x] JS warning bar does not appear when using Security Slider high
[x] JS warning bar does appear when using Security Slider Low

First submission base cases

[x] On generate page, refreshing page produces a new 7-word codename
[x] On submit page, empty submissions produce flashed message
[x] On submit page, short message submitted successfully
[ ] On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
[x] On submit page, file less than 500 MB submitted successfully

Returning source base cases

[x] Nonexistent codename cannot log in
[x] Empty codename cannot log in
[x] Legitimate codename can log in
[x] Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

[x] Can log in with 2FA tokens
[x] incorrect password cannot log in
[x] invalid 2fa token cannot log in
[x] 2fa immediate reuse cannot log in
[ ] Journalist account with HOTP can log in

Index base cases

[x] Filter by codename works
[x] Starring and unstarring works
[x] Click select all selects all submissions
[x] Selecting all and clicking "Download" works

Individual source page

[x] You can submit a reply and a flashed message and new row appears
[x] You cannot submit an empty reply
[x] Clicking "Delete Source Account" and the source and docs are deleted
[x] You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

[x] The Updater GUI appears on boot

2.8.0 release-specific changes

Update to 5.15.148 kernel (https://github.com/freedomofpress/securedrop/issues/7113)

[x] Kernel-specific checks in QA matrix pass on instance hardware.

Tails 6 support (https://github.com/freedomofpress/securedrop/pull/7116)

Fresh install (Tails 6)

Set up a Tails 6 workstation using the latest RC tag and verify that:
- [x] ./securedrop-admin setup completes successfully, installing required apt packages and creating a virtualenv with updated dependencies listed above
- [x] ./securedrop-admin --force sdconfig completes successfully
- [x] ./securedrop-admin --force install completes successfully
- [x] ./securedrop-admin --force tailsconfig completes successfully with ssh targets, desktop icons, and SecureDrop menu available.
- the menu is not available, but that's expected, it only shows up after the reboot
reboot the admin workstation and verify that:
- [x] The network hook runs successfully on network connection, and the ssh targets, desktop icons, and SecureDrop menu are available.
Create a new source account via the SI and make a submission. Then, confirm that:
- [x] ./securedrop-admin backup completes successfully
- [x] in the JI, the first source is present.
Create a second source account via the SI and make a submission, then run ./securedrop-admin restore <backupname> and confirm that
- [x] the restore command completes successfully
- [x] in the JI, the first source is present but the second source is not.

Install target: VMs
Tails version: 6.0
Test Scenario: clean installation
SSH over Tor: yes
Release candidate: 2.8.0-rc1
General notes:

Basic Server Testing

[x] After installing the testinfra dependencies, all tests in ./securedrop-admin verify are passing:
- Install dependencies on Admin Workstation with cd ~/Persistent/securedrop && ./securedrop-admin setup -t
- Run tests with ./securedrop-admin verify (this will take a while)
- Remove test dependencies: rm -rf admin/.venv3/ && ./securedrop-admin setup
[x] QA Matrix checks pass

Command Line User Generation

[x] Can successfully add admin user and login

(Optional) Administration

[x] I have backed up and successfully restored the app server following the backup documentation
[-] If doing upgrade testing, make a backup on 2.7.0 and restore this backup on this release candidate
[x] "Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
[-] Can successfully add journalist account with HOTP authentication

(Optional) Application Acceptance Testing

Source Interface

Landing page base cases

[x] JS warning bar does not appear when using Security Slider high
[x] JS warning bar does appear when using Security Slider Low

First submission base cases

[x] On generate page, refreshing page produces a new 7-word codename
[x] On submit page, empty submissions produce flashed message
[x] On submit page, short message submitted successfully
[x] On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
[x] On submit page, file less than 500 MB submitted successfully

Returning source base cases

[x] Nonexistent codename cannot log in
[x] Empty codename cannot log in
[x] Legitimate codename can log in
[x] Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

[x] Can log in with 2FA tokens
[x] incorrect password cannot log in
[x] invalid 2fa token cannot log in
[x] 2fa immediate reuse cannot log in
[-] Journalist account with HOTP can log in

Index base cases

[x] Filter by codename works
[x] Starring and unstarring works
[x] Click select all selects all submissions
[x] Selecting all and clicking "Download" works

Individual source page

[x] You can submit a reply and a flashed message and new row appears
[x] You cannot submit an empty reply
[x] Clicking "Delete Source Account" and the source and docs are deleted
[x] You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

[x] The Updater GUI appears on boot

2.8.0 release-specific changes

Update to 5.15.148 kernel (https://github.com/freedomofpress/securedrop/issues/7113)

[x] Kernel-specific checks in QA matrix pass on instance hardware.

Tails 6 support (https://github.com/freedomofpress/securedrop/pull/7116)

Fresh install (Tails 6)

Set up a Tails 6 workstation using the latest RC tag and verify that:
- [x] ./securedrop-admin setup completes successfully, installing required apt packages and creating a virtualenv with updated dependencies listed above
- [x] ./securedrop-admin --force sdconfig completes successfully
- [x] ./securedrop-admin --force install completes successfully
- [x] ./securedrop-admin --force tailsconfig completes successfully with ssh targets, desktop icons, and SecureDrop menu available.
reboot the admin workstation and verify that:
- [x] The network hook runs successfully on network connection, and the ssh targets, desktop icons, and SecureDrop menu are available.
Create a new source account via the SI and make a submission. Then, confirm that:
- [x] ./securedrop-admin backup completes successfully
- [x] in the JI, the first source is present.
Create a second source account via the SI and make a submission, then run ./securedrop-admin restore <backupname> and confirm that
- [x] the restore command completes successfully
- [x] in the JI, the first source is present but the second source is not.

Tails-only test plan for RC2

On an existing Tails 5 admin workstation (assuming 2.7.0):

Restore the 2.7.0 version if it's not already in place:
- wipe the virtualenv with rm -rf /home/amnesia/Persistent/securedrop/admin/.venv3
- check out the 2.7.0 tag
- run sudo apt update && ./securedrop-admin setup, then ./securedrop-admin tailsconfig
- reboot Tails.
- [ ] verify that the desktop shortcuts and menu are set up and the GUI updater does not appear
Update to 2.8.0-rc2:
- [ ] check out 2.8.0-rc2
- [ ] run ./securedrop-admin setup and verify that it completes successfully
- [ ] run ./securedrop-admin --force tailsconfig and verify that it completes successfully
- Reboot Tails
- [ ] Verify that the GUI updater appears on boot
- [ ] Close the updater, run sudo journalctl -f | grep nm-dispatcher in a terminal, start the updater from the SecureDrop menu, and verify there are no related QT startup errors and that the updater appears

On an existing Tails 6 admin workstation (assuming 2.8.0-rc1:

Update to 2.8.0-rc2:
- check out 2.8.0-rc2
- [ ] run ./securedrop-admin setup - verify that it completes successfully (this should be a noop)
- [ ] run ./securedrop-admin --force tailsconfig, and verify that it completes successfully, displaying the GUI updater
- reboot Tails
- [ ] Verify that the GUI updater appears on boot
- [ ] Close the updater, run sudo journalctl -f | grep nm-dispatcher in a terminal, start the updater from the SecureDrop menu, and verify there are no related QT startup errors and that the updater appears

On an existing Tails 6 admin workstation (assuming 2.8.0-rc1):

Update to 2.8.0-rc2:
- check out 2.8.0-rc2
- [x] run ./securedrop-admin setup - verify that it completes successfully (this should be a noop)
- [x] run ./securedrop-admin --force tailsconfig, and verify that it completes successfully, displaying the GUI updater
- reboot Tails
- [x] Verify that the GUI updater appears on boot
- [x] Close the updater, run sudo journalctl -f | grep nm-dispatcher in a terminal, start the updater from the SecureDrop menu, and verify there are no related QT startup errors and that the updater appears

Sorry for the delay, took a little too long to find my Tails 5 stick. All good!

On an existing Tails 5 admin workstation (assuming 2.7.0):

Restore the 2.7.0 version if it's not already in place:
- wipe the virtualenv with rm -rf /home/amnesia/Persistent/securedrop/admin/.venv3
- check out the 2.7.0 tag
- run sudo apt update && ./securedrop-admin setup, then ./securedrop-admin tailsconfig
- reboot Tails.
- [x] verify that the desktop shortcuts and menu are set up and the GUI updater does not appear
Update to 2.8.0-rc2:
- [x] check out 2.8.0-rc2
- [x] run ./securedrop-admin setup and verify that it completes successfully
- [x] run ./securedrop-admin --force tailsconfig and verify that it completes successfully
- Reboot Tails
- [x] Verify that the GUI updater appears on boot
- [x] Close the updater, run sudo journalctl -f | grep nm-dispatcher in a terminal, start the updater from the SecureDrop menu, and verify there are no related QT startup errors and that the updater appears

Preflight testing

Clean installation to VMs.

Basic testing

[x] Install or upgrade occurs without error (from apt-qa.freedom.press per preflight procedure)
[x] Source interface is available and version string indicates it is 2.8.0
[x] A message can be successfully submitted

Tails 6

[x] Manual install of 2.8.0 is successful
[x] After reboot, updater GUI does not appear

Upgrade preflight is also good!

freedomofpress / securedrop

Release SecureDrop 2.8.0 #7121

QA Matrix for 2.8.0

Test Plan for 2.8.0

Tails-only test plan for 2.8.0-rc2

Prepare release candidate (2.8.0~rc1)

Prepare release candidate (2.8.0~rc2)

Final release

Post release

2.8.0 QA Checklist IN PROGRESS

Environment

Basic Server Testing

Command Line User Generation

(Optional) Administration

(Optional) Application Acceptance Testing

Source Interface

Landing page base cases

First submission base cases

Returning source base cases

Journalist Interface

Login base cases

Index base cases

Individual source page

Basic Tails Testing

2.8.0 release-specific changes

Update to 5.15.148 kernel (https://github.com/freedomofpress/securedrop/issues/7113)

Tails 6 support (https://github.com/freedomofpress/securedrop/pull/7116)

Fresh install (Tails 6)

Preflight testing

Basic testing

Tails 5

Tails 6

Basic Server Testing

Command Line User Generation

(Optional) Administration

(Optional) Application Acceptance Testing

Source Interface

Landing page base cases

First submission base cases

Returning source base cases

Journalist Interface

Login base cases

Index base cases

Individual source page

Basic Tails Testing

2.8.0 release-specific changes

Update to 5.15.148 kernel (https://github.com/freedomofpress/securedrop/issues/7113)

Tails 6 support (https://github.com/freedomofpress/securedrop/pull/7116)

Upgrade #1 - updating to 2.8.0 on Tails 5

Upgrade #2 - updating to Tails 6, updating to 2.8.0

2.8.0 QA Checklist

Environment

Basic Server Testing

Command Line User Generation

(Optional) Administration

(Optional) Application Acceptance Testing

Source Interface

Landing page base cases

First submission base cases

Returning source base cases

Journalist Interface

Login base cases

Index base cases

Individual source page

Basic Tails Testing

2.8.0 release-specific changes

Update to 5.15.148 kernel (https://github.com/freedomofpress/securedrop/issues/7113)

Tails 6 support (https://github.com/freedomofpress/securedrop/pull/7116)

Fresh install (Tails 6)

Basic Server Testing

Command Line User Generation

(Optional) Administration

(Optional) Application Acceptance Testing

Source Interface

Landing page base cases

First submission base cases

Returning source base cases

Journalist Interface

Login base cases

Index base cases