Add debs for SecureDrop 1.7.0-rc3 (xenial+focal)

[sssoleileraaa]

Status

Ready for review

Description of changes

Adds SecureDrop 1.7.0-rc3 packages, towards freedomofpress/securedrop#5689

Test Plan

Xenial build logs can be found: freedomofpress/build-logs@93bef8a
Focal build logs can be found: freedomofpress/build-logs@8b57c54

The errors in the build logs are due to a known issue that I'll link to in a followup comment.

• https://github.com/freedomofpress/securedrop/releases/tag/1.7.0-rc3 tag is used to build the debs (check build logs at the top)
• sha256sum hashes of debs match hashes in the build logs

[conorsch]

Looks like git-lfs wasn't configured when committing these. When I check out this branch locally, I see:

HEAD is now at 8e06d3b Add debs for SecureDrop 1.7.0-rc3 (Focal)
Encountered 6 file(s) that should have been pointers, but weren't:
	securedrop-app-code_1.7.0~rc3+focal_amd64.deb
	securedrop-app-code_1.7.0~rc3+xenial_amd64.deb
	securedrop-config-0.1.3+1.7.0~rc3-amd64.deb
	securedrop-keyring-0.1.4+1.7.0~rc3-amd64.deb
	securedrop-ossec-agent-3.6.0+1.7.0~rc3-amd64.deb
	securedrop-ossec-server-3.6.0+1.7.0~rc3-amd64.deb

If you view "files changed" here vs, say, #82, you can see that GitHub is correctly not labelling these lfs files.

There's also a .tar.gz that should be removed.

[conorsch]

Refetched branch after changes, verified all checksums locally matched what's shown in the build logs. It's worth noting that the Xenial deb files showed an error on the apt updates check: freedomofpress/build-logs@93bef8a#diff-3aa7de48727bdfacafd9c9910dfa12762106d8c0256d27b28b37a5262a7533ebR788

After discussing with @creviera, we decided to press on with rc3 anyway. Closer to final release date, we'll certainly want to update the builder image, but I'd suggest we do that on release day to avoid doing it twice.