Standup Notes 2021 04 07

Top 3 priorities during 3/24-4/7 sprint

1. Finalize and land key deliverables for SecureDrop 1.8.1 release
2. Restore reproducibility for SecureDrop Workstation build artifacts; update docs
3. Finalize design for SecureDrop Client Safe Deletion and begin implementation

Note: Sprint period ended today; we're now transitioning into Kanban mode until the release is complete.

Topics and Call-outs

1.8.1

• https://github.com/freedomofpress/securedrop/pull/5886 and https://github.com/freedomofpress/securedrop/pull/5882 merged

• RM responsibilities

  • Kushal will be RM, Mickael Deputy RM

• Release scheduled to 4/14

• release/1.8.1 changes pushed up - PR should be up soon

• Mickael to open release ticket today, Kushal will poke at test plan tomorrow

• Aiming to be ready for QA by tomorrow afternoon

Reproducible wheels update

CI overrides in component repos

• CI override was required for wheel changes to both securedrop-debian-packaging and the component repos that consumed them
• Conor will file discussion issue and we'll kick around options

Follow-up CI job for testing reproducibility

Close out "build" issue

Follow-up work

• Kushal is willing to update diagram sometime in coming days

CoC

• Please poke at README language in https://github.com/freedomofpress/securedrop/pull/5889 before it's being added to all repos

Tomorrow's Python module development using Rust workshop

• Requirements posted in the #learning channel

Allie

Yesterday:

Today:

• Participate in CI-override-for-updated-wheels discussion
• Review Updater PRs
• Double-export debugging
• Review #686 and #667

Blockers or Asks:

• None

Conor

Yesterday:

• Investigation of RPM signing requirement, does not affect dom0 yet - https://github.com/freedomofpress/securedrop-workstation/issues/669
• Merged "build" changes for wheels https://github.com/freedomofpress/securedrop-debian-packaging/pull/240

Today:

• Packaging ticket for CI overrides: what do?
• CI job for wheels
• Review of SDW PRs, particularly https://github.com/freedomofpress/securedrop-workstation/pull/684

Blockers or Asks:

• Kushal: are you already working on CI job for wheels?

Erik

Yesterday:

• securedrop.org troubleshooting
• SDW updater fixes
  • Fixed issue with updater hanging when run_full_install fails
  • Fixed issue with updater swallowing errors during apply_dom0
  • Ready for review: https://github.com/freedomofpress/securedrop-workstation/pull/686

Today:

• More Safe Deletion fun
• Phone screen for Internews 6 month contract
• Tweak Tor v3 validation regex as warranted: https://github.com/freedomofpress/securedrop-workstation/issues/660
• Poke at SDW updater error logging story as time permits

Blockers or Asks: None

John

Yesterday:

• reviewed/merged #5886
• reviewed docs #141
• looking into Qt questions for safe deletion

Today:

• merged #141
• looking into Qt questions for safe deletion

Blockers or Asks:

• None

Kev

Yesterday:

• Review John's PR for server OS detection

Today:

• Support troubleshooting
• 1.8.1 RC1 branch - PR is up
• Getting caught up on support

Blockers or Asks: None

Kushal

Today:

• ✅ Merged https://github.com/freedomofpress/securedrop/pull/5882
• ✅ Started updating https://github.com/freedomofpress/securedrop/wiki/How-to-add-new-ossec-rules%3F (Kev will review)
• 🔲 Started digging into https://github.com/freedomofpress/securedrop-debian-packaging/issues/241
• ✅ Provided required steps for tomorrow's workshop

Tomorrow:

• 🔲 Release management
• 🔲 Create the workshop material

Blockers or Asks:

• none

Mickael

Yesterday:

• Added tests/rebased/approved https://github.com/freedomofpress/securedrop/pull/5882
• Audit (threat model) follow up Today:
• Look at packaging/wheel changes (specifically merge policies)
• RM tasks
• Safe deletion
• Preparing for workshop Blockers or Asks:
• Please reach out to Mickael or Erik if you want to be on hiring panel for Internews contract