Package dom0 configuration as RPM

[conorsch]

We currently provision the VMs for the SecureDrop Workstation via Makefile, shipped from this repository. That works fine for development, but is untenable for shipping updates to production instances in the wild (#24) over time. We should instead package the dom0 configuration items into an RPM package, for installation in dom0 (tracking upstream updates).

Over time we may rethink how we manage the VMs (#159). As of right now, however, the plan is to ship:

• Salt configs (.top and .sls files) for VM management
• Qubes RPC policy creates (to authorize inter-VM communication)
• Helper scripts for unattended-updates (Workstation update process #24)
• Helper scripts for admin tooling (unimplemented; see Create VM provisioning utility script #51)

The RPM build logic can reside inside this repository. The admin tooling referenced in #51 should set up the dom0 yum repository for pooling in the Workstation-specific dom0 configs, which are then automatically updated over time (#24).

Related to #157, the RPM for the qubes-template-securedrop-workstation VM image.

[kushaldas]

I am picking this up. Going through the current configs first for the same.