Standup Notes 2020 09 09

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael

Topics and Call-outs

securedrop-workstation-grsec package prod release

• See Conor's positive test report: https://github.com/freedomofpress/securedrop-workstation/issues/590#issuecomment-689061342
• Kev/Conor to coordinate release today

Tails testing

• Tails 4.11-RC1 is out, be good to test against it for upcoming release
• Kev and Kushal will test 4.11 during 1.6.0 release cycle

Reminder to reviewers: PRs with many commits typically should get squashed

Allie

Yesterday: PTO

Today:

• Rebuilt Qubes workstation and only one failing test self.assertFalse("host" in log_dirs). Once I firgure out if it's a bug or something wrong with my workstation config
  • Known issue: https://github.com/freedomofpress/securedrop-workstation/issues/583
• Approve https://github.com/freedomofpress/securedrop-debian-packaging/pull/190 (all tests pass except the one mentioned above, which also fails on main)
• Catch up on SDK release, if it's ready rebase client PRs and get them ready for review
• Set up meeting with John and whoever else wants to join to go over seen-by APIs and database migration plan one more time before we start making the changes
• Draft review of https://github.com/freedomofpress/securedrop-client/pull/1145

Blockers or Asks: None

Conor

Yesterday:

• Tested metapackage on staging, see report in https://github.com/freedomofpress/securedrop-workstation/issues/590#issuecomment-689061342
• Otherwise a halfday

Today:

• Pairing with Kev on prod release of new metapackage
• Catching up on template consolidation progress, Kev will ping you likely by tomorrow to compare notes

Blockers or Asks:

• Holding off on focal packaging work unless review explicitly requested

Erik

Yesterday:

• Added tests, PyQt5 support for sdw-notify to https://github.com/freedomofpress/securedrop-workstation/pull/610
• Reproducible builds planning chat w/ Mickael, started drafting issues for future sprints
• Audit comms & planning
• Threat modeling session w/ Jen & Kev

Today:

• Discuss & file repro builds issues with Mickael/Conor
• Touch base with Joan, potentially follow up on standalone docs repo work
• Follow-up on open PRs as needed

Blockers or Asks: None

John

Yesterday:

• blocked on demo, seen/unseen, so worked on #856 cleanup and a bit of learning time

Today:

• Push updated builder image to unblock https://github.com/freedomofpress/securedrop/pull/5484
• hopefully seen/unseen and/or demo

Blockers or Asks:

• None

Kev

Yesterday:

• Notes & material for privacy meetup talk

Today:

• Threat modeling with Mickael & Kushal re: template consolidation
• Release grsec package to prod
• Working on small & large template provisioning

Blockers or Asks: None

Kushal

Today:

• Reviewed and merged https://github.com/freedomofpress/securedrop-debian-packaging/pull/193
• Template merging meeting
• QA for the https://github.com/freedomofpress/securedrop/pull/5484 on prod VM, approved.

Tomorrow:

• First thing is https://github.com/freedomofpress/securedrop/pull/5486

Blockers or Asks:

• None

Mickael

Yesterday:

• Released sdk on pypi mirrors, https://github.com/freedomofpress/securedrop-debian-packaging/pull/193
• Reviewed https://github.com/freedomofpress/securedrop-client/pull/1137 , ready for updating sdk requirements and final review
• reviewed https://github.com/freedomofpress/securedrop-workstation/pull/610 (so far so good)
• threat modeling with kev and kushal

Today:

• Will comment on https://github.com/freedomofpress/securedrop-workstation/pull/610 with results
• review https://github.com/freedomofpress/securedrop/pull/5484 Blockers or Asks:
• None

Ro

(On leave until September 14)