Standup Notes 2020 02 03

Participants (alphabetical): Allie, Conor, Erik, Jen, John, Kevin, Mickael, Nina, Ro

Topics and Call-outs

• Kernel rebuild schedule
  • Mickael: Not sold on the value of dev only templates. Differences are going to be between the updates and packages they'll get. We may not need to maintain a dev template - instead, promote kernels to prod, sign with release key, build prod template. Then deploy that template to dev server. When we update to kernels, push them to apt-test, later promote to prod.
  • Conor: We do need to sign with test key, and then later re-sign with prod key.
  • Mickael: What's preventing us from installing prod key in dev?
  • Conor: So we have both keys in dom0 at all times? Sure.
  • Mickael: if dev, add dev key, but in all cases add prod key.
  • Conor: Sounds like a plan. At some point we need to build new kernel.
  • Mickael: Agreed, will also allow us to go through the procedures. Maybe in next sprint, or the one immediately after.
  • Conor: Above plan implies we build prod-ready packages at the beginning of the QA window, two weeks in advance of the pilot start.
  • Mickael: Can't we do it even earlier for kernel?
  • Conor: Earlier the better. The sooner we can run through prod release workflow.
  • Mickael: Need a signed tag.
• sd-gpg keyring access warnings now extremely annoying because we make calls to gpg for metadata syncs (apparently we have a fingerprint column, if fingerprint is set after successful key import, then we can only import key (i.e. access gpg keyring) if fingerprint column is null)

Allie

Yesterday:

(Friday)

• Reviewed/merged https://github.com/freedomofpress/securedrop-client/pull/755 for checking subprocess output
• Worked on token invalid PR, make sync continuous PR
• Files failed to decrypt can never be successfully opened: https://github.com/freedomofpress/securedrop-client/issues/756
• Downloading anim never ends if file can't be decrypted: https://github.com/freedomofpress/securedrop-client/issues/754

Today:

• Address PR comments
• Work on #666 (application modal for print/export)
• Remove "change journalist designation" feature from Journalist Interface

Blockers or Asks: None

Conor

Yesterday:

• Further collab on https://github.com/freedomofpress/securedrop-workstation/pull/432, almost done
• Merged https://github.com/freedomofpress/securedrop-workstation-dev-rpm-packages-lfs/pull/4

Today:

• Aiming to get 432 in
• Investigate testinfra failure on https://github.com/freedomofpress/securedrop/pull/5110 (Kev handling primary review)

Blockers or Asks:

• Kushal: re-review of https://github.com/freedomofpress/securedrop-workstation/pull/436 ? (nay, Jen grabbed)
• Mickael: holler if you want to chat synchronously about SDW 432

Erik

Yesterday: (Friday)

• Testing Icinga (new monitoring system used for SD instances) and tweaking associated messages
• SD support
• Audit & update user stories tracking sheet: https://docs.google.com/spreadsheets/d/1DQEQp-0e6zN-pCPa0qqY-MGtmpc2SN5mzUsR4nEkpCQ/edit#gid=0
• Updates to PR #389 (write logs to ~/.securedrop_launcher, code cleanup, exception handling, docs)

Today:

• Prep for Wednesday's sprint planning mtg
• Updates to PR #389: move lockfiles to /run/user , run cronjob as GUI user via crontab
• Docs work as time allows

Blockers or Asks: None but feedback on #389 always appreciated

Jen

Yesterday: (Friday) Travel

Today:

• reviewed the logout PR (750) in client repo
• some meetings i deferred from last week
• review securedrop-workstation reboot updater PR
• else i'm going to pick up a ticket from the backlog

Blockers or Asks:

• none

John

Yesterday:

• Looking at CI failures caused by dev container concurrency changes
• reviewed #418 (stop updater progress at 95% for reboot)

Today:

• review continuous sync
• #756 download failures
• could look at quieting the fingerprint GPG noise

Blockers or Asks: Coordinate on client issues w/ Allie

Kev

Yesterday: (Friday)

• Working through SD core issues

Today:

• Put in small PR for testinfra target
• Preparing datasets and associated changes for securedrop-admin for SDW testing
• Cont'd review re: #5109

Blockers or Asks: Coordination w/ Conor #5109

Kushal

Time off

Mickael

Yesterday:

• Digging into template build logic to see if we can have split dev and prod templates. May be a little complicated, but have tested changes locally.

Today:

• Updates to #436 (updater behavior)
• Log PR

Blockers or Asks: None

Nicholas

• Today: *
  • Addressed performance issues in PR #752 - ready for review.
  • Investigated #693 and concluded "won't fix" (not worth the effort given the small benefit)
  • Added a PR to address #639 (remaining client blocker) to gracefully handle lack of GPG public key edge case. See PR #759 DRAFT PR. Erik, Nina - needs copy for the messaging (easy to change).
  • Thanks to @rmol I had a few niggly issues with #752 which I'm in the process of addressing. Should push fixes by EOD (my time).

Blockers or Asks:

• Please give feedback on above PRs.
• I'm trying to work sprint backlog in order of "urgency" (blockers first). Please suggest what you think I should be doing Erik, Jen, Allie since AFAICT all blockers are in-flight or addressed in some way.

Nina

Traveling

Ro -async

Yesterday:

• Various support comms/a few interesting tickets - thanks K & E for assistance
• IVF /directory listing update

Today:

• Following up on a few potential DST engagements
• start on https://github.com/freedomofpress/securedrop/issues/4952
• Support comms
• This is the first day of https://journalismcourses.org/INV0120.html, which will be my Feb learning time/a good opportunity to connect with investigative journalists

Blockers or Asks:

• none