Standup Notes 2020 02 03
Erik Moeller edited this page Feb 4, 2020
·
1 revision
Participants (alphabetical): Allie, Conor, Erik, Jen, John, Kevin, Mickael, Nina, Ro
- Kernel rebuild schedule
- Mickael: Not sold on the value of dev only templates. Differences are going to be between the updates and packages they'll get. We may not need to maintain a dev template - instead, promote kernels to prod, sign with release key, build prod template. Then deploy that template to dev server. When we update to kernels, push them to apt-test, later promote to prod.
- Conor: We do need to sign with test key, and then later re-sign with prod key.
- Mickael: What's preventing us from installing prod key in dev?
- Conor: So we have both keys in dom0 at all times? Sure.
- Mickael: if dev, add dev key, but in all cases add prod key.
- Conor: Sounds like a plan. At some point we need to build new kernel.
- Mickael: Agreed, will also allow us to go through the procedures. Maybe in next sprint, or the one immediately after.
- Conor: Above plan implies we build prod-ready packages at the beginning of the QA window, two weeks in advance of the pilot start.
- Mickael: Can't we do it even earlier for kernel?
- Conor: Earlier the better. The sooner we can run through prod release workflow.
- Mickael: Need a signed tag.
-
sd-gpgkeyring access warnings now extremely annoying because we make calls to gpg for metadata syncs (apparently we have a fingerprint column, if fingerprint is set after successful key import, then we can only import key (i.e. access gpg keyring) if fingerprint column is null)
Yesterday:
(Friday)
- Reviewed/merged https://github.com/freedomofpress/securedrop-client/pull/755 for checking subprocess output
- Worked on token invalid PR, make sync continuous PR
- Files failed to decrypt can never be successfully opened: https://github.com/freedomofpress/securedrop-client/issues/756
- Downloading anim never ends if file can't be decrypted: https://github.com/freedomofpress/securedrop-client/issues/754
Today:
- Address PR comments
- Work on #666 (application modal for print/export)
- Remove "change journalist designation" feature from Journalist Interface
Blockers or Asks: None
Yesterday:
- Further collab on https://github.com/freedomofpress/securedrop-workstation/pull/432, almost done
- Merged https://github.com/freedomofpress/securedrop-workstation-dev-rpm-packages-lfs/pull/4
Today:
- Aiming to get 432 in
- Investigate testinfra failure on https://github.com/freedomofpress/securedrop/pull/5110 (Kev handling primary review)
Blockers or Asks:
- Kushal: re-review of https://github.com/freedomofpress/securedrop-workstation/pull/436 ? (nay, Jen grabbed)
- Mickael: holler if you want to chat synchronously about SDW 432
Yesterday: (Friday)
- Testing Icinga (new monitoring system used for SD instances) and tweaking associated messages
- SD support
- Audit & update user stories tracking sheet: https://docs.google.com/spreadsheets/d/1DQEQp-0e6zN-pCPa0qqY-MGtmpc2SN5mzUsR4nEkpCQ/edit#gid=0
- Updates to PR #389 (write logs to ~/.securedrop_launcher, code cleanup, exception handling, docs)
Today:
- Prep for Wednesday's sprint planning mtg
- Updates to PR #389: move lockfiles to /run/user , run cronjob as GUI user via crontab
- Docs work as time allows
Blockers or Asks: None but feedback on #389 always appreciated
Yesterday: (Friday) Travel
Today:
- reviewed the logout PR (750) in client repo
- some meetings i deferred from last week
- review securedrop-workstation reboot updater PR
- else i'm going to pick up a ticket from the backlog
Blockers or Asks:
- none
Yesterday:
- Looking at CI failures caused by dev container concurrency changes
- reviewed #418 (stop updater progress at 95% for reboot)
Today:
- review continuous sync
- #756 download failures
- could look at quieting the fingerprint GPG noise
Blockers or Asks: Coordinate on client issues w/ Allie
Yesterday: (Friday)
- Working through SD core issues
Today:
- Put in small PR for testinfra target
- Preparing datasets and associated changes for securedrop-admin for SDW testing
- Cont'd review re: #5109
Blockers or Asks: Coordination w/ Conor #5109
Time off
Yesterday:
- Digging into template build logic to see if we can have split dev and prod templates. May be a little complicated, but have tested changes locally.
Today:
- Updates to #436 (updater behavior)
- Log PR
Blockers or Asks: None
- Today: *
- Addressed performance issues in PR #752 - ready for review.
- Investigated #693 and concluded "won't fix" (not worth the effort given the small benefit)
- Added a PR to address #639 (remaining client blocker) to gracefully handle lack of GPG public key edge case. See PR #759 DRAFT PR. Erik, Nina - needs copy for the messaging (easy to change).
- Thanks to @rmol I had a few niggly issues with #752 which I'm in the process of addressing. Should push fixes by EOD (my time).
Blockers or Asks:
- Please give feedback on above PRs.
- I'm trying to work sprint backlog in order of "urgency" (blockers first). Please suggest what you think I should be doing Erik, Jen, Allie since AFAICT all blockers are in-flight or addressed in some way.
Traveling
Yesterday:
- Various support comms/a few interesting tickets - thanks K & E for assistance
- IVF /directory listing update
Today:
- Following up on a few potential DST engagements
- start on https://github.com/freedomofpress/securedrop/issues/4952
- Support comms
- This is the first day of https://journalismcourses.org/INV0120.html, which will be my Feb learning time/a good opportunity to connect with investigative journalists
Blockers or Asks:
- none