Fedora Atomic as base OS for SD

[heartsucker]

Feature request

Description

Related to the #3204 (xenial) and #2966 (libostree), it may be easier for us to make packages and deploy using full OS like Fedora Atomic instead of use a minimal environment like Yocto and starting from scratch.

This issue is mostly a place for me to keep track of my investigation.

User Research Evidence

Admins don't do manual updates quick enough, and our configuration logic is complex enough that we need to be able deploy major changes without admin intervention.

User Stories

As SD, I don't want to delay changes because they wouldn't be covered by an unattended upgrade.

As an SD dev, I don't want my changes rolled out of a release.

As SD, we want robust upgrades, especially if an OS is EOL.

[heartsucker]

Apparently @kushaldas already has done work on this, so I'm just gonna stop and wait for him to get back.

[eloquence]

Would also love your input here: https://forum.securedrop.club/t/architecture-rfc-securedrop-server-operating-system-transition/721

[kushaldas]

@heartsucker I will pass you the details on how to use my PoC tree to deploy SecureDrop on a Fedora Atomic system.

[redshiftzero]

hey @kushaldas did you get a chance to share these details with @heartsucker ?

[eloquence]

We've not made a final commitment to a change of server OS or the utilization of containers on the server. We'll re-evaluate our options after the transition to Ubuntu 20.04 is complete (#4768). See #5517. Closing this old issue and retiring the associated label for now.