Release SecureDrop 0.11.1

[redshiftzero]

This is a tracking issue for the upcoming release of SecureDrop 0.11.1, a point release containing a fix for new installs for CVE-2019-3462 (#4058) - tasks may get added or modified.

Feature freeze: AM Pacific time January 24, 2019
String freeze: N/A, strings will not be updated in this point release
Pre-release announcement: N/A
Release date: January 24, 2019

Test debian packages will be posted on https://apt-test.freedom.press signed with the test key.

Prepare point release

• Prepare 0.11.1 release changelog - @emkll
• Branch off release/0.11.0 for release/0.11.1 - @redshiftzero

Final release

• Ensure builder in release branch is updated and/or update builder image - @emkll
• Push signed tag - @redshiftzero & @emkll
• Build and upload final Debian packages for 0.11.1 - @conorsch
• Pre-Flight: Test fresh install works w/ prod repo debs - @emkll
• Pre-Flight: Test upgrade to 0.11.1 works w/ prod repo debs - @zenmonkeykstop
• Pre-Flight: Test updater logic in Tails - @zenmonkeykstop
• Write and publish release notes on securedrop.org - @eloquence
• Tweet - @eloquence

Post release

• Merge changelog (i.e. rc commits) back to develop - @emkll or @redshiftzero
• Update upgrade testing boxes - @conorsch (Adds upgrade testing boxes for 0.11.1 #4093)
• Update roadmap wiki page

[zenmonkeykstop]

0.11.1 QA Checklist

Environment

• Install target:
• Tails version:
• Test Scenario:
• SSH over Tor:
• Release candidate:
• General notes:

0.11.1-specific changes

• APT version on app and mon servers is [versionhere]

Preflight

• Ensure the builder image is up-to-date on release day

These tests should be performed the day of release prior to live debian packages on apt-qa.freedom.press

Basic testing

• Install or upgrade occurs without error
• Source interface is available and version string indicates it is 0.11.1
• A message can be successfully submitted

Tails

• The updater GUI appears on boot
• The update successfully occurs to 0.11.1
• After reboot, updater GUI no longer appears

[zenmonkeykstop]

0.11.1 QA Checklist

Environment

• Install target: Mac Mini App, NUC7 Mon
• Tails version: 3.11
• Test Scenario: preflight upgrade
• SSH over Tor: enabled
• Release candidate: 0.11.1
• General notes:

0.11.1-specific changes

• APT version on app and mon servers is 1.0.1ubuntu2.19

Preflight

• Ensure the builder image is up-to-date on release day

These tests should be performed the day of release prior to live debian packages on apt-qa.freedom.press

Basic testing

• Install or upgrade occurs without error
• Source interface is available and version string indicates it is 0.11.1
• A message can be successfully submitted

Tails

• The updater GUI appears on boot
• The update successfully occurs to 0.11.1
• After reboot, updater GUI no longer appears

[emkll]

0.11.1 QA Checklist

Environment

• Install target: Prod VMs
• Tails version: 3.10.1
• Test Scenario: Clean install
• SSH over Tor: No
• Release candidate: n/a
• General notes:

0.11.1-specific changes

• APT version on app and mon servers is 1.0.1ubuntu2.19

Preflight

• Ensure the builder image is up-to-date on release day

These tests should be performed the day of release prior to live debian packages on apt-qa.freedom.press

Basic testing

• Install occurs without error
• Source interface is available and version string indicates it is 0.11.1
• A message can be successfully submitted

Tails

• The updater GUI appears on boot
• The update successfully occurs to 0.11.1
• After reboot, updater GUI no longer appears

[conorsch]

Last item on the post-release task list is updating the "upgrade" scenario boxes, will work on that today.

[emkll]

SecureDrop 0.11.1 was released on Jan 24th 2019, and the final item on the list (upgrade boxes) has been merged, per the above. Closed via #4093