Release SecureDrop 1.7.0 #5689

sssoleileraaa · 2021-01-05T20:25:10Z

This is a tracking issue for the release of SecureDrop 1.7.0

Tentatively scheduled as follows:

String and feature freeze: 2021-01-11
String comment period: 2021-01-11 - 2021-01-18
Translation period: 2021-01-18 - 2021-01-25
Pre-release announcement: 2021-01-19
Release date: 2021-01-26

Release manager: @creviera (surprise!)
Deputy release manager: @emkll
Localization manager: @rmol
Deputy localization manager: @kushaldas
Communications manager:: @eloquence

SecureDrop maintainers and testers: As you QA 1.7.0, please report back your testing results as comments on this ticket. File GitHub issues for any problems found, tag them "QA: Release", and associate them with the 1.7.0 milestone for tracking (or ask a maintainer to do so).

Test debian packages will be posted on https://apt-test.freedom.press signed with the test key. An Ansible playbook testing the upgrade path is here.

QA Matrix for 1.7.0

Test Plan for 1.7.0

Prepare release candidate (1.7.0~rc1)

Link to latest version of Tails, including release candidates, to test against during QA: https://deb.tails.boum.org/dists/4.14/
Prepare 1.7.0~rc1 release changelog
Branch off release/1.7.0 from develop https://github.com/freedomofpress/securedrop/tree/release/1.7.0
Prepare 1.7.0~rc1
Build debs and put up 1.7.0~rc1 on test apt server (this is now done via a PR into this repository)
Commit build logs to https://github.com/freedomofpress/build-logs

After each test, please update the QA matrix and post details for Basic Server Testing, Application Acceptance Testing and 1.7.0-specific testing below in comments to this ticket.

Final release

Post release

Create GitHub release object https://github.com/freedomofpress/securedrop/releases/tag/1.7.0
Once release object is created, update versions in securedrop-docs and Wagtail
Build readthedocs and verify new docs show up on https://docs.securedrop.org
Publish announcements
Merge changelog back to develop
Update upgrade testing boxes

1.7.1 had to be released right after so boxes were updgraded to 1.7.1 instead, see Upgrade boxes for SecureDrop 1.7.1 #5763
Update roadmap wiki page: https://github.com/freedomofpress/securedrop/wiki/Development-Roadmap

The text was updated successfully, but these errors were encountered:

conorsch · 2021-01-15T00:32:06Z

Test report from 1.7.0~rc1. Mostly completed yesterday. Omitted the portions I skipped, after encountering #5703

Environment

Install target: Clean install
Tails version: 4.10 [sic, my Admin VM was out of date]
Test Scenario: Clean install, v3-only, with zh_Hans
SSH over Tor: Yes, v3 only
Onion service version: v3 only
Release candidate: 1.7.0~rc1

Basic Server Testing

Command Line User Generation

Can successfully add admin user and login

Administration

I have backed up and successfully restored the app server following the backup documentation
If doing upgrade testing, make a backup on 1.6.0 and restore this backup on 1.7.0
"Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
Can successfully add journalist account with HOTP authentication
- ❌ Failed, see report in [QA 1.7.0] Admin actions for user management trigger 500 #5703

Application Acceptance Testing

Source Interface

Landing page base cases

JS warning bar does not appear when using Security Slider high
JS warning bar does appear when using Security Slider Low

First submission base cases

(did not test, presumably prevented by #5703)

On generate page, refreshing codename produces a new 7-word codename
On submit page, empty submissions produce flashed message
On submit page, short message submitted successfully
On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
On submit page, file less than 500 MB submitted successfully

Returning source base cases

(did not test)

Nonexistent codename cannot log in
Empty codename cannot log in
Legitimate codename can log in
Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

Can log in with 2FA tokens
incorrect password cannot log in - did not test
invalid 2fa token cannot log in
2fa immediate reuse cannot log in - did not test
Journalist account with HOTP can log in - did not test

1.7.0 release-specific changes

kushaldas · 2021-01-18T11:57:52Z

Environment

Install target: prod vm
Tails version: 4.14
Test Scenario: update testing from 1.6.0
SSH over Tor: no
Onion service version: v2 + v3
Release candidate: rc2
General notes: During fresh installs, attempt to select zh_Hans as a language choice.

Basic Server Testing

Command Line User Generation

Can successfully add admin user and login

Administration

I have backed up and successfully restored the app server following the backup documentation
If doing upgrade testing, make a backup on 1.6.0 and restore this backup on 1.7.0
"Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
Can successfully add journalist account with HOTP authentication

Application Acceptance Testing

Source Interface

Landing page base cases

JS warning bar does not appear when using Security Slider high
JS warning bar does appear when using Security Slider Low

First submission base cases

On generate page, refreshing codename produces a new 7-word codename
On submit page, empty submissions produce flashed message
On submit page, short message submitted successfully
On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
On submit page, file less than 500 MB submitted successfully

Returning source base cases

Nonexistent codename cannot log in
Empty codename cannot log in
Legitimate codename can log in
Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

Can log in with 2FA tokens
incorrect password cannot log in
invalid 2fa token cannot log in
2fa immediate reuse cannot log in
Journalist account with HOTP can log in

Index base cases

Filter by codename works
Starring and unstarring works
Click select all selects all submissions
Selecting all and clicking "Download" works

Individual source page

You can submit a reply and a flashed message and new row appears
You cannot submit an empty reply
Clicking "Delete Source And Submissions" and the source and docs are deleted
You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

The Updater GUI appears on boot
Updating occurs without issue

1.7.0 release-specific changes

Preflight

Ensure the builder image is up-to-date on release day

These tests should be performed the day of release prior to live debian packages on apt.freedom.press

Basic testing

Install or upgrade occurs without error
Source interface is available and version string indicates it is 1.7.0
A message can be successfully submitted

Tails

The updater GUI appears on boot
The update successfully occurs to 1.7.0

emkll · 2021-01-18T19:23:29Z

Mac Mini - cron-apt upgrade from 1.6.0 (In progress)

Environment

Install target: Mac Mini
Tails version: 4.14
Test Scenario: Cron-apt upgrade
SSH over Tor: Yes
Onion service version: v2+v3 -> v3 only
Release candidate: 1.7.0-rc2
General notes: During fresh installs, attempt to select zh_Hans as a language choice.

Basic Server Testing

Command Line User Generation

Can successfully add admin user and login

Administration

I have backed up and successfully restored the app server following the backup documentation
If doing upgrade testing, make a backup on 1.6.0 and restore this backup on 1.7.0
"Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
Can successfully add journalist account with HOTP authentication (DID NOT TEST)

Application Acceptance Testing

Source Interface

Landing page base cases

JS warning bar does not appear when using Security Slider high
JS warning bar does appear when using Security Slider Low

First submission base cases

On generate page, refreshing codename produces a new 7-word codename
On submit page, empty submissions produce flashed message
On submit page, short message submitted successfully
On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
On submit page, file less than 500 MB submitted successfully

Returning source base cases

Nonexistent codename cannot log in
Empty codename cannot log in
Legitimate codename can log in
Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

Can log in with 2FA tokens
incorrect password cannot log in
invalid 2fa token cannot log in
2fa immediate reuse cannot log in
Journalist account with HOTP can log in

Index base cases

Filter by codename works
Starring and unstarring works
Click select all selects all submissions
Selecting all and clicking "Download" works

Individual source page

You can submit a reply and a flashed message and new row appears
You cannot submit an empty reply
Clicking "Delete Source And Submissions" and the source and docs are deleted
You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

The Updater GUI appears on boot
Updating occurs without issue

1.7.0 release-specific changes

zenmonkeykstop · 2021-01-19T15:40:00Z

QA plan - IN PROGRESS

NUC5s
NUC7s
NUC8s
Mac Minis
1U test servers

1.7.0 QA Checklist

For both upgrades and fresh installs, here is a list of functionality that requires testing. You can use this for copy/pasting into your QA report.

If you have submitted a QA report already for a 1.7.0 release candidate with successful basic server testing and application acceptance testing sections, then you can skip these sections in subsequent reports, unless otherwise indicated by the Release Manager. This is to ensure that you focus your QA effort on the 1.7.0-specific changes as well as changes since the previous release candidate.

Environment

Install target: Nuc8(app)+Nuc7(mon)
Tails version: 4.14
Test Scenario: fresh
SSH over Tor: yes
Onion service version: v2+v3
Release candidate: rc2
General notes: During fresh installs, attempt to select zh_Hans as a language choice.

Basic Server Testing

Command Line User Generation

Can successfully add admin user and login

Administration

I have backed up and successfully restored the app server following the backup documentation
If doing upgrade testing, make a backup on 1.6.0 and restore this backup on 1.7.0
"Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
Can successfully add journalist account with HOTP authentication not tested

Application Acceptance Testing

Source Interface

Landing page base cases

JS warning bar does not appear when using Security Slider high
JS warning bar does appear when using Security Slider Low

First submission base cases

On generate page, refreshing codename produces a new 7-word codename
On submit page, empty submissions produce flashed message
On submit page, short message submitted successfully
On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
On submit page, file less than 500 MB submitted successfully

Returning source base cases

Nonexistent codename cannot log in
Empty codename cannot log in
Legitimate codename can log in
Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

Can log in with 2FA tokens
incorrect password cannot log in
invalid 2fa token cannot log in
2fa immediate reuse cannot log in
Journalist account with HOTP can log in not tested

Index base cases

Filter by codename works
Starring and unstarring works
Click select all selects all submissions
Selecting all and clicking "Download" works

Individual source page

You can submit a reply and a flashed message and new row appears
You cannot submit an empty reply
Clicking "Delete Source And Submissions" and the source and docs are deleted
You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

The Updater GUI appears on boot
Updating occurs without issue

1.7.0 release-specific changes

Preflight

Ensure the builder image is up-to-date on release day

These tests should be performed the day of release prior to live debian packages on apt.freedom.press

Basic testing

Install or upgrade occurs without error
Source interface is available and version string indicates it is 1.7.0
A message can be successfully submitted

Tails

The updater GUI appears on boot
The update successfully occurs to 1.7.0
After reboot, updater GUI no longer appears

sssoleileraaa · 2021-01-22T02:42:13Z

QA plan

NUC5s
NUC7s
Mac Minis
1U test servers

1.7.0 QA Checklist

Environment

Install target: NUC7
Tails version: 4.14
Test Scenario: NUC 7i5BNH (v3 only clean install)
SSH over Tor: Yes
Onion service version: v3
Release candidate: rc3

Basic Server Testing

I can access both the source and journalist interfaces
I can SSH into both machines over Tor
AppArmor is loaded on app
- 0 processes are running unconfined
```
sudo aa-status
```
  ✔️ everything is in enforce mode
AppArmor is loaded on mon
- 0 processes are running unconfined
```
sudo aa-status
```
  ✔️ everything is in enforce mode
Both servers are running grsec kernels
```
uname -r
4.14.188-grsec-securedrop
```
✔️ both servers show the above output
iptables rules loaded
```
iptables -S
```
✔️ rules look fine for app

✔️ rules look fine for mon
OSSEC emails begin to flow after install
OSSEC emails are decrypted to correct key and I am able to decrypt them
After installing the testinfra dependencies, all tests in ./securedrop-admin verify are passing
- Install dependencies on Admin Workstation with cd ~/Persistent/securedrop && ./securedrop-admin setup -t
- Run tests with ./securedrop-admin verify (this will take a while)
  
  ❌ Lots of errors when running this, see No longer auto-rename /etc/apt/sources.list.d/apt_test_freedom_press.list or make sure to change contents of file too #5737 (comment)
- Remove test dependencies: rm -rf admin/.venv3/ && ./securedrop-admin setup
QA Matrix checks pass

sudo bash meltdown.sh failure is expected:
CVE-2018-3615 aka 'Foreshadow (SGX), L1 terminal fault'
- CPU microcode mitigates the vulnerability: NO
  STATUS: VULNERABLE (your CPU supports SGX and the microcode is not up to date)
SUMMARY: CVE-2018-3615:KO

To mock this CPU, set those vars: SMC_MOCK_CMDLINE='BOOT_IMAGE=/vmlinuz-4.14.188-grsec-securedrop root=/dev/mapper/app--vg-root ro mds=full,nosmt noefi' SMC_MOCK_CPU_FAMILY='6' SMC_MOCK_CPU_FRIENDLY_NAME='Intel(R) Core(TM) i5-7260U CPU @ 2.20GHz' SMC_MOCK_CPUID_1=' 526057 1050624 2147154879 3219913727' SMC_MOCK_CPUID_7=' 0 43804591 0 2617255424' SMC_MOCK_CPUINFO='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' SMC_MOCK_CPU_MODEL='142' SMC_MOCK_CPU_STEPPING='9' SMC_MOCK_CPU_UCODE='0xde' SMC_MOCK_CPU_VENDOR='GenuineIntel' SMC_MOCK_RDMSR_0x123='0' SMC_MOCK_RDMSR_0x48='0' SMC_MOCK_WRMSR_0x10b_RET=1 SMC_MOCK_WRMSR_0x49_RET=1

A false sense of security is worse than no security at all, see --disclaimer

Command Line User Generation

Can successfully add admin user and login
```
./manage.py add-admin
```
✔️ able to create an account and log in with it

Administration

I have backed up and successfully restored the app server following the backup documentation
If doing upgrade testing, make a backup on 1.6.0 and restore this backup on 1.7.0

N/A
"Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
Can successfully add journalist account with HOTP authentication

Application Acceptance Testing

Source Interface

Landing page base cases

JS warning bar does not appear when using Security Slider high
JS warning bar does appear when using Security Slider Low

First submission base cases

On generate page, refreshing codename produces a new 7-word codename
On submit page, empty submissions produce flashed message
On submit page, short message submitted successfully
On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
On submit page, file less than 500 MB submitted successfully

Returning source base cases

Nonexistent codename cannot log in
Empty codename cannot log in
Legitimate codename can log in
Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

Can log in with 2FA tokens
incorrect password cannot log in
invalid 2fa token cannot log in
2fa immediate reuse cannot log in
Journalist account with HOTP can log in

Index base cases

Filter by codename works
Starring and unstarring works
Click select all selects all submissions
Selecting all and clicking "Download" works

Individual source page

You can submit a reply and a flashed message and new row appears
You cannot submit an empty reply
Clicking "Delete Source And Submissions" and the source and docs are deleted
You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

The Updater GUI appears on boot

❌ When I run securedrop-admin tailsconfig and reboot I don't see a gui updater
Updating occurs without issue

❌ I don't recall seeing a gui updater

1.7.0 release-specific changes

Preflight

Ensure the builder image is up-to-date on release day

N/A

These tests should be performed the day of release prior to live debian packages on apt.freedom.press

Basic testing

Install or upgrade occurs without error
Source interface is available and version string indicates it is 1.7.0
A message can be successfully submitted

kushaldas · 2021-01-22T06:28:39Z

Spent some time on this:

$ sudo apt update
Get:1 http://security.ubuntu.com/ubuntu xenial-security InRelease [109 kB]
Hit:2 http://archive.ubuntu.com/ubuntu xenial InRelease  
Get:3 http://archive.ubuntu.com/ubuntu xenial-updates InRelease [109 kB]
Get:4 http://archive.ubuntu.com/ubuntu xenial-backports InRelease [107 kB]
Get:5 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages [1,931 kB]
Get:6 http://archive.ubuntu.com/ubuntu xenial-updates/main i386 Packages [1,473 kB]
Ign:7 https://apt-test.freedom.press xenial InRelease     
Err:8 https://apt-test.freedom.press xenial Release
  403  Forbidden
Reading package lists... Done
E: The repository 'https://apt-test.freedom.press xenial Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

It seems our server is throwing 403 for both https://apt-test.freedom.press/dists/xenial/Release https://apt-test.freedom.press/dists/xenial/InRelease.

Finally, just downloaded the package and updated by hand.

kushaldas · 2021-01-22T13:39:46Z

Environment

Install target: prod vm
Tails version: 4.14
Test Scenario: update testing from 1.6.0
SSH over Tor: no
Onion service version: v2 + v3
Release candidate: rc4
General notes: During fresh installs, attempt to select zh_Hans as a language choice.

Basic Server Testing

Command Line User Generation

Can successfully add admin user and login

Administration

I have backed up and successfully restored the app server following the backup documentation
If doing upgrade testing, make a backup on 1.6.0 and restore this backup on 1.7.0
"Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
Can successfully add journalist account with HOTP authentication

Application Acceptance Testing

Source Interface

Landing page base cases

JS warning bar does not appear when using Security Slider high
JS warning bar does appear when using Security Slider Low

First submission base cases

On generate page, refreshing codename produces a new 7-word codename
On submit page, empty submissions produce flashed message
On submit page, short message submitted successfully
On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
On submit page, file less than 500 MB submitted successfully

Returning source base cases

Nonexistent codename cannot log in
Empty codename cannot log in
Legitimate codename can log in
Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

Can log in with 2FA tokens
incorrect password cannot log in
invalid 2fa token cannot log in
2fa immediate reuse cannot log in
Journalist account with HOTP can log in

Index base cases

Filter by codename works
Starring and unstarring works
Click select all selects all submissions
Selecting all and clicking "Download" works

Individual source page

You can submit a reply and a flashed message and new row appears
You cannot submit an empty reply
Clicking "Delete Source And Submissions" and the source and docs are deleted
You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

The Updater GUI appears on boot
Updating occurs without issue

1.7.0 release-specific changes

Preflight

Ensure the builder image is up-to-date on release day

These tests should be performed the day of release prior to live debian packages on apt.freedom.press

Basic testing

Install or upgrade occurs without error
Source interface is available and version string indicates it is 1.7.0
A message can be successfully submitted

Tails

The updater GUI appears on boot
The update successfully occurs to 1.7.0

emkll · 2021-01-22T15:43:58Z

1.6.0-> 1.7.0-rc4

Environment

Install target: mac mini
Tails version: 4.14
Test Scenario: cron-apt upgrade
SSH over Tor: yes
Onion service version: v2+v3 -> v3 only
Release candidate: 1.7.0-rc4
General notes: During fresh installs, attempt to select zh_Hans as a language choice.

Basic Server Testing

Command Line User Generation

Can successfully add admin user and login

Administration

I have backed up and successfully restored the app server following the backup documentation (DID NOT TEST)
If doing upgrade testing, make a backup on 1.6.0 and restore this backup on 1.7.0 (DID NOT TEST)
"Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
Can successfully add journalist account with HOTP authentication

Application Acceptance Testing

Source Interface

Landing page base cases

JS warning bar does not appear when using Security Slider high
JS warning bar does appear when using Security Slider Low

First submission base cases

On generate page, refreshing codename produces a new 7-word codename
On submit page, empty submissions produce flashed message
On submit page, short message submitted successfully
On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
On submit page, file less than 500 MB submitted successfully

Returning source base cases

Nonexistent codename cannot log in
Empty codename cannot log in
Legitimate codename can log in
Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

Can log in with 2FA tokens
incorrect password cannot log in
invalid 2fa token cannot log in
2fa immediate reuse cannot log in
Journalist account with HOTP can log in

Index base cases

Filter by codename works
Starring and unstarring works
Click select all selects all submissions
Selecting all and clicking "Download" works

Individual source page

You can submit a reply and a flashed message and new row appears
You cannot submit an empty reply
Clicking "Delete Source And Submissions" and the source and docs are deleted
You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

The Updater GUI appears on boot
Updating occurs without issue

1.7.0 release-specific changes

RC4-specific testing

#5718, #5726

On a v2+v3 install, disabling v2 removes the v2 ssh config in /etc/tor/torrc and no ossec alerts are sent about v2 deprecation after running the playbook
The banner disappears on a simple page refresh (without rebooting or apache restart)

#5721, #5722

Submit multiple files via the SI, delete manually one from the store on the app server, files can be downloaded via "N unread" or select all download link on JI.

#5724

Submit multiple files via the SI, delete manually one or more the store on the app server. After manually deleting the files on disk, submit a new file as that source. zero-length files are not created

sssoleileraaa · 2021-01-23T00:53:22Z

1.7.0 QA Checklist

Environment

Install target: NUC7
Tails version: 4.14
Test Scenario: NUC 7i5BNH (v3 only clean install)
SSH over Tor: Yes
Onion service version: v3
Release candidate: rc4

Basic Server Testing

A false sense of security is worse than no security at all, see --disclaimer

Command Line User Generation

Can successfully add admin user and login

Administration

I have backed up and successfully restored the app server following the backup documentation
If doing upgrade testing, make a backup on 1.6.0 and restore this backup on 1.7.0

N/A
"Send Test OSSEC Alert" button in the journalist triggers an OSSEC alert and an email is sent
Can successfully add journalist account with HOTP authentication

Application Acceptance Testing

Source Interface

Landing page base cases

JS warning bar does not appear when using Security Slider high
JS warning bar does appear when using Security Slider Low

First submission base cases

On generate page, refreshing codename produces a new 7-word codename
On submit page, empty submissions produce flashed message
On submit page, short message submitted successfully
On submit page, file greater than 500 MB produces "The connection was reset" in Tor Browser quickly before the entire file is uploaded
On submit page, file less than 500 MB submitted successfully

Returning source base cases

Nonexistent codename cannot log in
Empty codename cannot log in
Legitimate codename can log in
Returning user can view journalist replies - need to log into journalist interface to test

Journalist Interface

Login base cases

Can log in with 2FA tokens
incorrect password cannot log in
invalid 2fa token cannot log in
2fa immediate reuse cannot log in
Journalist account with HOTP can log in

Index base cases

Filter by codename works
Starring and unstarring works
Click select all selects all submissions
Selecting all and clicking "Download" works

Individual source page

You can submit a reply and a flashed message and new row appears
You cannot submit an empty reply
Clicking "Delete Source And Submissions" and the source and docs are deleted
You can click on a document and successfully decrypt using application private key

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

The Updater GUI appears on boot
Updating occurs without issue

1.7.0 release-specific changes

RC4-specific testing

#5718, #5726

On a v2+v3 install, disabling v2 removes the v2 ssh config in /etc/tor/torrc and no ossec alerts are sent about v2 deprecation after running the playbook

I had to reinstall since I was testing v3 only earlier
The banner disappears on a simple page refresh (without rebooting or apache restart)

#5721, #5722

Submit multiple files via the SI, delete manually one from the store on the app server, files can be downloaded via "N unread" or select all download link on JI.

#5724

Submit multiple files via the SI, delete manually one or more the store on the app server. After manually deleting the files on disk, submit a new file as that source. zero-length files are not created

zenmonkeykstop · 2021-01-25T21:08:46Z

QA plan - IN PROGRESS

NUC5s
NUC7s
Mac Minis
1U test servers

1.7.0 QA Checklist

For both upgrades and fresh installs, here is a list of functionality that requires testing. You can use this for copy/pasting into your QA report.

If you have submitted a QA report already for a 1.7.0 release candidate with successful basic server testing and application acceptance testing sections, then you can skip these sections in subsequent reports, unless otherwise indicated by the Release Manager. This is to ensure that you focus your QA effort on the 1.7.0-specific changes as well as changes since the previous release candidate.

Environment

Install target: Nuc8(app)+Nuc7(mon)
Tails version: 4.14
Test Scenario: fresh
SSH over Tor: yes
Onion service version: v3
Release candidate: rc4
General notes: During fresh installs, attempt to select zh_Hans as a language choice.

Basic Server Testing SKIPPED

Application Acceptance Testing SKIPPED

Basic Tails Testing

After updating to this release candidate and running securedrop-admin tailsconfig

The Updater GUI appears on boot
Updating occurs without issue

1.7.0 release-specific changes

RC4-specific testing

#5718, #5726

On a v2+v3 install, disabling v2 removes the v2 ssh config in /etc/tor/torrc and no ossec alerts are sent about v2 deprecation after running the playbook N/A
The banner disappears on a simple page refresh (without rebooting or apache restart) N/A

#5721, #5722

Submit multiple files via the SI, delete manually one from the store on the app server, files can be downloaded via "N unread" or select all download link on JI. - FAILS - instead get flashed error on existing page, which I think is actually correct based on the original PR

#5724

Submit multiple files via the SI, delete manually one or more the store on the app server. After manually deleting the files on disk, submit a new file as that source. zero-length files are not created

Preflight

Ensure the builder image is up-to-date on release day

These tests should be performed the day of release prior to live debian packages on apt.freedom.press

Basic testing

Install or upgrade occurs without error
Source interface is available and version string indicates it is 1.7.0
A message can be successfully submitted

Tails

The updater GUI appears on boot
The update successfully occurs to 1.7.0
After reboot, updater GUI no longer appears

emkll · 2021-01-28T14:42:26Z

SecureDrop 1.7.0 was released on January 26th. The only outstanding task in this ticket is to build and upload the upgrade boxes. With the release of #5758, and because only support a single version of upgrade boxes is supported in the tooling, there is little benefit to building 1.7.0 upgrade boxes. We will provide 1.7.1 upgrade boxes, tracked in #5758

emkll pinned this issue Jan 5, 2021

sssoleileraaa mentioned this issue Jan 11, 2021

clarify pre-release instuctions freedomofpress/securedrop-docs#130

Merged

conorsch mentioned this issue Jan 12, 2021

Update tor version to improve v3 Onion reliability #5699

Closed

sssoleileraaa mentioned this issue Jan 12, 2021

Add debs for SecureDrop 1.7.0-rc1 freedomofpress/securedrop-apt-test#80

Merged

2 tasks

sssoleileraaa mentioned this issue Jan 15, 2021

SecureDrop 1.7.0-rc2 #5710

Merged

emkll mentioned this issue Jan 19, 2021

[1.7.0] Backport 5718,5720 and bump to 1.7.0-rc3 #5723

Merged

4 tasks

sssoleileraaa mentioned this issue Jan 20, 2021

Add debs for SecureDrop 1.7.0-rc3 (xenial+focal) freedomofpress/securedrop-apt-test#84

Merged

2 tasks

conorsch mentioned this issue Jan 21, 2021

Focal channel in apt-test isn't serving all packages freedomofpress/securedrop-apt-test#85

Closed

sssoleileraaa mentioned this issue Jan 21, 2021

SecureDrop 1.7.0-rc4 #5738

Merged

eloquence mentioned this issue Jan 22, 2021

Add 1.6.0->1.7.0 upgrade guide; Focal prep guide freedomofpress/securedrop-docs#139

Merged

3 tasks

emkll mentioned this issue Jan 26, 2021

Update builder image and fix CI target for bandit #5749

Merged

1 task

sssoleileraaa mentioned this issue Jan 26, 2021

[1.7.0] Prepare changelog and version string for final release of SecureDrop 1.7.0 #5753

Merged

3 tasks

emkll closed this as completed Jan 28, 2021

eloquence unpinned this issue Feb 2, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Release SecureDrop 1.7.0 #5689

Release SecureDrop 1.7.0 #5689

sssoleileraaa commented Jan 5, 2021 •

edited

Loading

conorsch commented Jan 15, 2021 •

edited by emkll

Loading

kushaldas commented Jan 18, 2021 •

edited

Loading

emkll commented Jan 18, 2021 •

edited

Loading

zenmonkeykstop commented Jan 19, 2021 •

edited

Loading

sssoleileraaa commented Jan 22, 2021 •

edited

Loading

kushaldas commented Jan 22, 2021 •

edited

Loading

kushaldas commented Jan 22, 2021 •

edited

Loading

emkll commented Jan 22, 2021 •

edited

Loading

sssoleileraaa commented Jan 23, 2021

zenmonkeykstop commented Jan 25, 2021 •

edited

Loading

emkll commented Jan 28, 2021

Release SecureDrop 1.7.0 #5689

Release SecureDrop 1.7.0 #5689

Comments

sssoleileraaa commented Jan 5, 2021 • edited Loading

QA Matrix for 1.7.0

Test Plan for 1.7.0

Prepare release candidate (1.7.0~rc1)

Final release

Post release

conorsch commented Jan 15, 2021 • edited by emkll Loading

Environment

Basic Server Testing

Command Line User Generation

Administration

Application Acceptance Testing

Source Interface

Landing page base cases

First submission base cases

Returning source base cases

Journalist Interface

Login base cases

1.7.0 release-specific changes

kushaldas commented Jan 18, 2021 • edited Loading

Environment

Basic Server Testing

Command Line User Generation

Administration

Application Acceptance Testing

Source Interface

Landing page base cases

First submission base cases

Returning source base cases

Journalist Interface

Login base cases

Index base cases

Individual source page

Basic Tails Testing

1.7.0 release-specific changes

Preflight

Basic testing

Tails

emkll commented Jan 18, 2021 • edited Loading

Mac Mini - cron-apt upgrade from 1.6.0 (In progress)

Environment

Basic Server Testing

Command Line User Generation

Administration

Application Acceptance Testing

Source Interface

Landing page base cases

First submission base cases

Returning source base cases

Journalist Interface

Login base cases

Index base cases

Individual source page

Basic Tails Testing

1.7.0 release-specific changes

zenmonkeykstop commented Jan 19, 2021 • edited Loading

1.7.0 QA Checklist

Environment

Basic Server Testing

Command Line User Generation

Administration

Application Acceptance Testing

Source Interface

Landing page base cases

First submission base cases

Returning source base cases

Journalist Interface

Login base cases

Index base cases

Individual source page

Basic Tails Testing

1.7.0 release-specific changes

Preflight

Basic testing

Tails

sssoleileraaa commented Jan 22, 2021 • edited Loading

1.7.0 QA Checklist

sssoleileraaa commented Jan 5, 2021 •

edited

Loading

conorsch commented Jan 15, 2021 •

edited by emkll

Loading

kushaldas commented Jan 18, 2021 •

edited

Loading

emkll commented Jan 18, 2021 •

edited

Loading

zenmonkeykstop commented Jan 19, 2021 •

edited

Loading

sssoleileraaa commented Jan 22, 2021 •

edited

Loading

kushaldas commented Jan 22, 2021 •

edited

Loading

kushaldas commented Jan 22, 2021 •

edited

Loading

emkll commented Jan 22, 2021 •

edited

Loading