Standup Notes 2020 10 27

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Ro

Topics and Call-outs

SecureDrop Workstation 0.5.0 / Template Consolidation

(Mickael) Tested in dev, had to bump version to match what's on the server, once that was done it worked well. What's currently on yum-test?

(Conor) The PR itself bumps it to 0.5.0rc1

(Mickael) Oops, using old branch

(Conor) Agree with comment in https://github.com/freedomofpress/securedrop-workstation/pull/619#issuecomment-717335007 that we should get it in and start testing rigorously

(Kev) One concern I have is that the "sad path" doesn't work the way I expected it to. No user-visible error.

(Erik) Proposing release date for November 4, comms via existing channels

(Mickael) Sounds good, as Conor says let's ensure we don't observe unrecoverable errors

(Kev) After my sad path testing, good to go ahead with finalizing #619. Can move switcher script into its own folder that doesn't get picked up by RPM.

(Conor) Proposing that we get all template consolidation PRs merged today after #619

SDK release

(Allie) What's the preferred method for building the SDK wheels? Can we build them ahead of time, independently of the SecureDrop Client?

(Kushal) When we do builds via client, it goes through all dependencies via pip, and pulls them in and builds them separately. Because SDK is baked into client package, don't see an easy way to build it independently other than moving it into its own Debian package.

(Allie) For now we can just document whole process from the beginning of pushing out new wheels for the SDK all the way to the SecureDrop Client release. Will chat with Kushal a bit more later.

Allie

Yesterday:

• SDK 0.2.0 release, ran into an issue: https://github.com/freedomofpress/securedrop-debian-packaging/pull/204, but also taking my time so I can update docs tohelpwith clarity
• Opened https://github.com/freedomofpress/securedrop-client/pull/1172
• https://github.com/freedomofpress/securedrop-client/pull/1164/files is ready for review
• https://github.com/freedomofpress/securedrop-client/pull/1162 is merged

Today:

• Available to help with template consolidation if needed today
• Finish https://github.com/freedomofpress/securedrop-sdk/issues/141 and followup by releasing the client and asking someone to review https://github.com/freedomofpress/securedrop-client/pull/1172
• Review https://github.com/freedomofpress/securedrop-client/pull/1167
• Review https://github.com/freedomofpress/securedrop/pull/5573

Blockers or Asks: None

Conor

Yesterday:

• Reviewed T490 workstation docs
• Tested happy path for template-consolidation, filed positive report https://github.com/freedomofpress/securedrop-workstation/pull/619#issuecomment-716890467

Today:

• Dropping temporary commits from template-consolidation PR, aiming for merge across the board today.
• More happy/sad path testing post-merge, for start of QA

Blockers or Asks:

• Kev: remove qa-switch script from RPM, leave in repo branch though

Erik

Yesterday:

• Audit prep
• Sprint prep
• UXFund proposal
• First pass at seen/unseen PR

Today:

• Cont'd on sprint prep & UXFund proposal
• Prod install for SD Workstation
• QA as needed, otherwise pick up a couple of smaller docs tasks from sprint / docs review

Blockers or Asks: None

John

Yesterday:

• reviews, learning time

Today:

• reviews

Blockers or Asks:

• none

Kev

Yesterday:

• Writing up test plan for template consolidation / going through sad path

Today:

• ^^
• NUC8 docs

Blockers or Asks: None

Kushal

Today:

• Reviewed https://github.com/freedomofpress/ansible-role-grsecurity-build/pull/61
  • no power to merge
• Updated https://github.com/freedomofpress/securedrop/pull/5544
• After a lot of fighting updated https://github.com/freedomofpress/securedrop/pull/5585

Tomorrow:

• next set of reviews + whatever required + cleaning up Focal EPIC

Blockers or Asks:

• Can anyone tell me what package/service I need on Debian Buster to have NFS working (for upgrade scenario) with vagrant?
• Need someone to look at https://github.com/freedomofpress/securedrop/issues/5592 (important for Focal)

Mickael

Yesterday:

• Rewiewed template consolidation PR (note rpm version finding)
• reviewed https://github.com/freedomofpress/securedrop/pull/5544 , looks like its blocked by https://github.com/freedomofpress/securedrop/pull/5585 (which john is reviewing?) Today:
• meet with erik to prepare for next sprint
• review https://github.com/freedomofpress/securedrop/pull/5544 once 5585 is merged
• https everywhere update
• help with template consolidation

Blockers or Asks: None

Ro

Yesterday:

• Mtgs, support

Today:

• Sprint task pickup

Blockers or Asks: None, ask: Kev - v3 backup/restore