Sprint Planning Meeting 2021 11 10
Previous sprint priorities:
-
Release SecureDrop Workstation RPM & get SD Client release-ready
- partially complete: RPM released, sdc deb still WIP
-
Test OpnSense firewall as potential alternative recommendation to SG-3100
- Docs PR up and availability
- we should order 6100 separately, to go to cfm
-
Get feature-complete PR for semantic HTML5/ARIA page structure in JI to "Ready"
- partially complete, progress bar at 90%. features good, pixels need some cajoling.
- Saptak will provide initial accessibility review of draft, prior to pixel-polishing (next week).
- Carry over to next sprint, confident final review lands before holidays.
Other sprint accomplishments:
- Dev env fix via Gonzalo & Kev (pending review)
- Tor version bump in the works
- Mucho onboarding for client dev w/ Allie & Gonzalo
- Qt consulting engagement, full steam ahead!
- Outreachy process: candidate selected! Not the same as approved, so now we wait.
- Event prep: hackathon updates (https://securedrop.org/hackathon)
- Conferred with upstream re: Fedora update schedule
What worked well:
- Great balance between typical ticket-grind work tasks and event/talk/outreach planning. Especially with outreachy review in the mix, time has been tight, and we still got a lot done!
- We selected an Outreachy candidate! The whole process overall has been quite well handled by Allie.
What can be improved:
-
even with OPNSense recco, hardware availability is a problem for instnaces in the planning stage - probably need more recommended fw/server hardware or more guidance on DIY solutions
- +1 let's order at least an SG-6100 for cfm (as noted above)
- let's also order an opnsense firewall from a US-focused provider, to broaden coverage
-
cfm underestimated time involved in accessibility refactoring (based on optimistic memory of previous phase ;-).
- +1 time estimates in general are tough. fw docs took a while, conorsch committed to docs changes that are as yet unresolved.
-
Client docs need to be updated to make it easier for folks to contribute (they're just getting a bit stale)
- Allie volunteered to update dev docs for client
- Kev is resurrecting macos deps for client (and Cory will review)
-
Running
make devto create a dev server creates a bunch of test data that isn't consistent, making it harder to quickly see what others see when pairing or debugging- +1 this is one of the reasons I always use the SF hardware instance: the submissions are predictable. (similarly QOL improvement like onions for docker)
-
Explicit documentation (somewhere, if only for onboarding purposes) of team conventions around review/merge workflow. E.g., when does a maintainer-author want to merge themselves after maintainer's review?)
- +1, we've had recent comms here.
- In general, it's the maintainer-author's responsibility to set/manage these expectations in the PR itself.
What's still a puzzle:
-
addressing tech debt responsibility: near-term client work may require
APIchanges on server.+1 tho potential DB changes are where the pain is gonna be (ah, right, i misread slack comms today! -c)- also requires database changes on the server since we delete user accounts that are referenced by other records
- see details in https://github.com/freedomofpress/securedrop-client/issues/1143#issuecomment-742043843
- let's carve out dedicated planning time for this set of changes. could seriously unblock some outreachy intern work.
-
hardware: what do?
What are we #learning:
- cfm will attend https://hmntycntrd.com/critical-ux this Friday (at Nina's recommendation). Back to Rust next sprint for real!
- Conor giving lots of talks, that's taking up learning time. ASD, Tor SOTU, and ADS within the coming sprint.
2021-11-08 to 2021-11-12: PTO: Erik (Victoria, BC :-)
2021-11-08 to 2021-11-16: Some PTO: Abigail
2021-11-11 : US/Canada holiday: Veterans Day / Remembrance Day
2021-11-13 : Aaron Swartz Day & International Hackathon
2021-11-15 : Ro returns from break
2021-11-16 : Conor PTO
2021-11-19, 22 : Conor PTO
2021-11-18~ : Comp time for various folks from Aaron Swartz Day event
After sprint:
2021-11-25 to 2021-11-26: US holiday: Thanksgiving
2021-12-07 : Tails 4.25
2021-12-15~ : SecureDrop 2.2.0? Maybe? January probably.
Top 3 sprint priorities:
- Release SecureDrop Client 0.5.0
- Update Fedora template to F34 for Workstation
- Client localization workflows
Async-friendly reminders:
- Gonzalo cannot attend sprint-planning due to time, let's explicitly share with him
- Ro returns next week! Allie has some suggestions for assignments, we'll reshare this doc with her next week