Add default policy for qubes.Notifications service

[marmarek]

Cover GUI in dom0 case here.

QubesOS/qubes-issues#889

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.47%. Comparing base (080694e) to head (4b5ce64).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #714   +/-   ##
=======================================
  Coverage   70.47%   70.47%           
=======================================
  Files          61       61           
  Lines       13560    13560           
=======================================
  Hits         9557     9557           
  Misses       4003     4003           

Flag	Coverage Δ
unittests	70.47% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[qubesos-bot]

OpenQA test summary

Complete test suite and dependencies: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=2025080718-4.3&flavor=templates

Test run included the following:

• Set default desktop background on Debian too qubes-artwork#51 (QubesOS/qubes-artwork@7355b56)
• Add default policy for qubes.Notifications service #714 (4b5ce64)
• Do not start xfce4-notifyd anymore qubes-core-agent-linux#601 (QubesOS/qubes-core-agent-linux@c64d519)
• rpm: pull in notification proxy together with gui daemon qubes-gui-daemon#169 (QubesOS/qubes-gui-daemon@9bb8954)
• Replace xfce4-notifyd with qubes-notification-agent qubes-meta-packages#82 (QubesOS/qubes-meta-packages@317f67f)
• Add policy for qubes.Notifications in GUIVM qubes-mgmt-salt-dom0-virtual-machines#80 (QubesOS/qubes-mgmt-salt-dom0-virtual-machines@03ec1d9)
• Update to zbus 5 qubes-notification-proxy#7 (QubesOS/qubes-notification-proxy@1f52541)

New failures, excluding unstable

Compared to: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=2025061004-4.3&flavor=update

• system_tests_network_ipv6

  • VmIPv6Networking_debian-13-minimal: test_710_ipv6_custom_ip_simple (failure)
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError: 1 != 0

• system_tests_guivm_gui_interactive

  • clipboard_and_web: unnamed test (unknown)
  • clipboard_and_web: Failed (test died)
    # Test died: no candidate needle with tag(s) 'clipboard-copy-notifi...

Failed tests

3 failures

• system_tests_network_ipv6

  • VmIPv6Networking_debian-13-minimal: test_710_ipv6_custom_ip_simple (failure)
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError: 1 != 0

• system_tests_guivm_gui_interactive

  • clipboard_and_web: unnamed test (unknown)
  • clipboard_and_web: Failed (test died)
    # Test died: no candidate needle with tag(s) 'clipboard-copy-notifi...

Fixed failures

Compared to: https://openqa.qubes-os.org/tests/142375#dependencies

9 fixed

• system_tests_extra

  • TC_10_Thunderbird_whonix-workstation-17: test_000_send_receive_default (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

  • TC_10_Thunderbird_whonix-workstation-17: test_010_send_receive_inline_signed_only (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

  • TC_10_Thunderbird_whonix-workstation-17: test_020_send_receive_inline_with_attachment (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

  • TC_00_QVCTest_whonix-workstation-17: test_010_screenshare (failure)
    AssertionError: 1 != 0 : Timeout waiting for /dev/video0 in test-in...

• system_tests_splitgpg

  • TC_10_Thunderbird_whonix-workstation-17: test_000_send_receive_default (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

  • TC_10_Thunderbird_whonix-workstation-17: test_010_send_receive_inline_signed_only (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

  • TC_10_Thunderbird_whonix-workstation-17: test_020_send_receive_inline_with_attachment (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

• system_tests_audio

  • TC_20_AudioVM_Pulse_debian-12-xfce: test_252_audio_playback_audiovm_switch_hvm (failure)
    AssertionError: only silence detected, no useful audio data

  • TC_20_AudioVM_Pulse_whonix-workstation-17: test_225_audio_rec_unmuted_hvm (failure)
    AssertionError: too short audio, expected 10s, got 7.95233560090703...

Unstable tests

Details

Performance Tests

Performance degradation:

No issues

Remaining performance tests:

No remaining performance tests