Sprint Planning Meeting 2020 01 08
What we said we would do:
- SecureDrop Workstation: Move off Whonix 14 EOL templates
Sprint goal fully met: SecureDrop Workstation updated to Whonix 15
- SecureDrop Workstation: Complete iteration of print/export acceptable for beta (UI may still be in unpolished state)
Sprint goal partially met:
- Export/print workflows working reliably (with supported printers)
- Significant code refactor completed: https://github.com/freedomofpress/securedrop-export/pull/41
Key remaining issues, in descending order of priority:
-
Auto-attach not yet merged (tracking upstream, aiming to merge): https://github.com/freedomofpress/securedrop-workstation/pull/324
-
Passphrase has to be entered for each export ( https://github.com/freedomofpress/securedrop-client/issues/667 )
-
Multiple USB sticks / printers case not handled yet
-
SecureDrop Workstation: Complete iteration of global network error handling acceptable for beta
Sprint goal partially met:
- Deletion now handled via queue: https://github.com/freedomofpress/securedrop-client/pull/674
- Failed replies now more clearly identified as such: https://github.com/freedomofpress/securedrop-client/issues/638
- Agreed upon strategy for background syncs & associated error handling: https://github.com/freedomofpress/securedrop-client/issues/652
Additional accomplishments (including Kanban period):
- Landed AppArmor profile for client
- Landed securedrop-log support
- Landed support for v3 onion addresses in SD Workstation
- Landed Tor browser detection fix for SD core
- Set up prod RPM LFS repo: https://github.com/freedomofpress/securedrop-workstation-prod-rpm-packages-lfs
- Draft PR for interactively enforcing high priority updates on login: https://github.com/freedomofpress/securedrop-workstation/pull/396
- Draft PR for show/hide password toggle in client: https://github.com/freedomofpress/securedrop-client/pull/679
- Landed community PR by @DrGFreeman for handling multiple instances of
/generatepage - Landed community PR by @petevdp for showing a confirmation message when submission preferences are updated
- Landed smaller fixes by @ntoll, including keyboard shortcuts for sending replies
- PR in review state #55 on securedrop-proxy to restructure codebase & make it clearer to comprehend
Other comments/observations:
- Significant thought on architecture for logging, updates
- Increased focus in prod-ready RCs, as pilot start date approaches
- (workflow related) A lot of context-switching, trying to figure out how to allocate blocks of time to be more productive
- user docs for the pilot should be considered
- test plan we'll need to start thinking about in this sprint as it'll be all hands on deck next sprint
- troubleshooting - as we find fixes or recommended order of troubleshooting/investigation for Workstation issues, documenting them internally in one place (confluence? other?) will help Support or people less familiar with debugging Qubes issues (me) (repo wiki for now? same for docs?)
- UxR & feedback-loop plan for pilot we should start after this sprint, too
2020-01-13 : OOO: Nina
2020-01-14 : PTO: John
2020-01-15 : PTO: Jen
2020-01-20 : US Holiday: MLK Day
After sprint period:
2020-01-22 : First beta RC and QA kick-off for SecureDrop Workstation
2020-01-28 : QA kick-off for SecureDrop 1.3.0 (TENTATIVE)
Through February : Provisioning time windows for pilot participants
2020-02-11 : SecureDrop 1.3.0 (TENTATIVE)
Time check: https://docs.google.com/spreadsheets/d/1XtCQd-sGWEENyUw77BNgLIlD2DUAkTBXm73YB-OK42k/edit#gid=0
-
SecureDrop Workstation: Implement enforced updates of critical system components in a manner that meets security and usability requirements for beta
-
SecureDrop Workstation: Prepare release management infrastructure for a first beta release
-
SecureDrop Workstation (Client): Implement continuous background syncs and consistent network error handling
https://docs.google.com/spreadsheets/d/116sQZPy4sVlHqUVl5xnNp_Ttvwy4EJdiO8JATN6Kz9M/edit#gid=0