A somewhat simpler solution is to use a split-printer, where you print
as usual from a qube, and the print job is passed by qrexec.
The printing qube has no knowledge of the printer at all, or of the
“print” qube, since this is handled at the admin level, so there is no
risk of unique identification.
GitHub - unman/qubes-print has some details.
1 Like