Skip to content

Standup Notes 2018 12 19

Jump to bottom
Erik Moeller edited this page Dec 20, 2018 · 1 revision

Participants (alphabetical): Conor, Emmanuel, Erik, Heartsucker, Jaysinh, Jen, Kevin, Kushal, Mike, Mickael, Nina (async)

Call-outs

0.10->0.11 issue

  • Root cause appears to be securedrop-ossec-agent postinst script that attempts to modify OSSEC conf based on /etc/hosts -- on some older instances, /etc/hosts may have duplicate entries that cause sed to fail. Confirmed at least with one instance. Possibly no Ansible playbook run since 0.4. This was a SecureDrop config bug.
  • Actions:
    • Kevin will do additional testing & put together instructions to fix hosts file and run cron-apt
    • Kevin will notify impacted instances we have contact info for, "we think this will fix"
    • Pending confirmation, Emmanuel/Erik/Kevin will prepare & post an advisory on securedrop.org -- ideally pre-break
    • Focus on manual release; may look into cron-apt compatible resolution via point release or otherwise
    • Longer term, we need to work with instances to re-provision workstations & re-run playbooks

Conor

Yesterday: Investigating the 0.11.0 upgrade problems, submitted report suggesting /etc/hosts duplication.

Today: Further coordination with support; infra review; standing by for additional help on upgrade issue

Blockers: None

Emmanuel

Yesterday: Support

Today: Helping with writing docs for 0.10.0->0.11.0 fixes

Blockers: None

Erik

Yesterday:

  • 0.10->0.11 related coordination, support outreach
  • Work w/ Nina on OTF funding proposal

Today:

  • Hiring
  • Follow-up regarding the 0.10->0.11 upgrade issue as appropriate;
  • Discussions w/ Qubes re: UX collab

Blockers:

  • None

Heartsucker

Back to client work; have static config PR ready to go. Have gotten screen to stop flickering -- if we cache widgets and don't destroy them when we change views, it immediately removes the flickering issue.

Jen

Yesterday: PTO

Today:

Blockers:

  • None

Kevin

Yesterday:

  • Wrote up docs for reinstalling individual servers, for support purposes
  • Upgrade issue
  • Filed issue for graphical updater network issue, cron-apt Today:
  • Upgrade issue

Blockers:

Kushal

Yesterday:

  • more failed xenial updates
  • Debugging the cause for the flag file staying back in the journalist_gui (could not figure out why it can be left behind on a tails system).
  • Qubes fun (sys-net was not coming up) Today:

Blockers:

  • None

Mike

Yesterday: Got GCE killer script in-place pending PR review but otherwise running

Today: Focused majority on infrastructure tasks today

Blockers: None

Mickael

Yesterday:

Today: Worked on reproducing updater bug. Hiring &

Blockers:

Nina

Yesterday: Writing grant-y things

Today: @ the US Passport office in SF, until hopefully no later than 1pm (I was late for my appointment, grrr); VisualDesign things in their crappy lobby and at the SF FPF office. @conor @Emmanuel should I be any later than 1pm, I'll ping Slack! Qubes peeps meeting, early-evening, with Erik and Jen.

Blockers: Oversleeping this AM? :/

Clone this wiki locally