I thought this would work, but it doesn’t keep the root folder /snap persistent. So something is wrong with bind-dirs in Qubes presently, or their documentation is simply wrong.
FYI - the root /snap folder has inside of it /bin, /core18, /gtk-common-themes, /wickrme and README, with a bunch of those having sub-folders.
Hard to know what it necessary to bind i.e. would you have to add many multiples of sub-folders? (If so, a useless functionality.) Of if just having the bind-dirs for the root folder /snap is enough to cover off all files and sub-folders within it?
See: Clarify bind-dirs documentation · Issue #5862 · QubesOS/qubes-issues · GitHub here also. Any ideas? If not, your option C might be the only viable one.
{{Box|text=
‘’‘1.’‘’ Clone the anon-whonix AppVM.
Create a standalone anon-whonix-wickr AppVM with Qubes Manager.
‘’‘2.’‘’ Create a Qubes [How to make any file persistent (bind-dirs) | Qubes OS bind-dirs] folder for the Wickr Me application.
In the new AppVM, ensure folder /rw/config/qubes-bind-dirs.d exists.
{{CodeSelect|code=
sudo mkdir -p /rw/config/qubes-bind-dirs.d
}}
‘’‘3.’‘’ Create a user.conf file with root rights.
{{CodeSelect|code=
sudoedit /rw/config/qubes-bind-dirs.d/50_user.conf
}}
‘’‘4.’‘’ Append the necessary Wickr Me folder name to the binds variable.
Add.
{{CodeSelect|code=
binds+=( ‘/snap’ )
}}
‘’‘5.’‘’ Save the file and reboot the anon-whonix-wickr AppVM.
From now on any sub-folders and files within the folders above will persist across reboots.
Note: It is possible to make make many files or folders persist, simply by making multiple entries in the 50_user.conf file, each on a separate line. For example, if you added the file /etc/tor/torrc to the binds variable, any modifications to that file will persist across reboots.
‘’‘6.’‘’ Open a terminal.
{{Open_a _product_ws_terminal}}
‘’‘7.’‘’ Install dependencies.
{{Update}}
{{CodeSelect|code=
sudo apt-get update
}}
Install dependencies.
{{CodeSelect|code=
sudo apt install snapd
}}
‘’‘8.’‘’ Reboot.
A reboot is required so snap can add itself to the PATH environment variable. Otherwise, following installation it can be launched from the absolute path:
{{CodeSelect|code=
/snap/bin/wickrme
}}
‘’‘9.’‘’ Install Wickr Me.
{{CodeSelect|code=
snap install wickrme
}}
The installation process is now complete.
}}
)
Besides, Qubes-Whonix users have far more secure options available, so they need to develop good habits instead of relying on security theater like Wickr Me.