Standup Notes 2021 04 06

Participants (alphabetical): Conor, Erik, John, Kevin, Kushal, Mickael, Ro

Top 3 priorities during 3/24-4/7 sprint

1. Finalize and land key deliverables for SecureDrop 1.8.1 release
2. Restore reproducibility for SecureDrop Workstation build artifacts; update docs
3. Finalize design for SecureDrop Client Safe Deletion and begin implementation

Topics and Call-outs

1.8.1 check-in

• Backup/restore changes https://github.com/freedomofpress/securedrop/pull/5886

  • John is reviewing

• OSSEC fix https://github.com/freedomofpress/securedrop/pull/5882

  • Mickael is reviewing

If merged by EOD, we'll cut release/1.8.1 branch (from release/1.8.0) by EOD -- Kev will open draft PR for 1.8.1 branch

RM responsibilities - TBD post-standup

CoC update

• Cross-org preview: https://github.com/freedomofpress/sdstatus/issues/new
• Proposed next step: PRs for removal of existing old CoCs, adding a line to the READMEs to aid discoverability

apt.fp via Tor

Allie

Time off

Conor

Yesterday:

• Initial review on new wheels PRs by Allie, looking good. Heads up, pushed a TEMPORARY commit to securedrop-proxy, let's remove before merge
• Investigation of rpm/dnf signing changes, suprisingly everything is working - https://github.com/freedomofpress/securedrop-workstation/issues/669

Today:

• Final review of wheel changes, Kushal any concerns with merging?
• More rpm/dnf dom0 research

Blockers or Asks:

• None other than signoff on wheel merge ^

Erik

Yesterday:

• securedrop-export test-requirements bump
• added error handling to full state logic in updater

Today:

• ^ test coverage, more bugfixes

Blockers or Asks: None

John

Yesterday:

• Reviewing #5886
• Reviewing #141

Today:

• Finishing those reviews:
  • #5886 prod setup took longer than expected
  • #141, still thinking about the reorganization
• Hoping to get to client safe delete Qt exploration for tomorrow's meeting

Blockers or Asks:

• https://github.com/freedomofpress/securedrop/pull/5863 is ready for review -- was it moved to development to keep it out of the way for 1.8.1?

Kev

Yesterday:

• SSH config backup change & supporting docs PR
• Fixed issue with make lint failure

Today:

• Started looking at Prateek's change to add modal for user deletion
• Review John's PR for generalized OS detection
• 1.8.1 branch

Blockers or Asks: None

Kushal

Today:

• Reviewed and approved https://github.com/freedomofpress/securedrop/pull/5891
• https://github.com/freedomofpress/securedrop-debian-packaging/pull/240
  • new wheels using the build tool
  • https://github.com/freedomofpress/securedrop-debian-packaging/issues/239
  • https://github.com/freedomofpress/securedrop-proxy/pull/85

Tomorrow:

• As required
• Preparing for the tech-talk workshop on Thursday Blockers or Asks:
• None

Mickael

Yesterday:

• PTO
• Started review of https://github.com/freedomofpress/securedrop/pull/5882 Today:
• review of https://github.com/freedomofpress/securedrop/pull/5882
• audit follow-up

Blockers or Asks: None

Nina

Yesterday:

Today:

Blockers or Asks:

Ro

Yesterday:

• migration support
• debugging on Admin workstation PV issue with an instance

Today:

• update: 2 instances migrating today, a few others have not checked in but have gone offline according to our monitoring service (3-4 potentially migrating).
• migration support
• improved screenshare setup (notes async)
• icinga updates

Blockers or Asks:

• no blockers, but possible conflicts with support sync today depending on support requirements. If so will update in Wire
• ask: might be a good time to tweet about OS migration from FPF main twitter account
• ask: 1-2 person increased monitoring of Redmine today/this week for migration support (maybe rotating so that not everyone feels distracted?)