Standup Notes 2020 09 15
Erik Moeller edited this page Sep 16, 2020
·
1 revision
Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Ro
- Scoping next round of issues for template consolidation: Kev, Conor, Mickael, +
- Next on Focal
- (Kushal) add optional CI target for package builds during this sprint; will post comment on epic with next steps
- (Mickael) Let's open for gpg/python integration, we'll need to coordinate with upstream
- Proposal (with Conor amendment): https://github.com/freedomofpress/securedrop/issues/5435#issuecomment-692363291
- Right now the default Focal kernel is higher version, so by default it be selected for boot
- What is the difference between creating PAXCTL headers and converting from GNU_*?
- Should we also mess with filesystem attributes?
- paxctl -> paxctld for SD, same as in SDW (https://github.com/freedomofpress/securedrop/issues/5495#issuecomment-692811279)
- (Kev) We should consider shipping a 5.4-based kernel for future hardware compatibility
- (Mickael) Hardware support won't be there during initial Ubuntu install. Perhaps we can start with the current version and then upgrade later.
- (Mickael) Let's pause on paxctl work until the next round of Focal work
- No support sync today, see Wire for some updates
Yesterday:
-
Discussions around handling deletions of journalist accounts
-
Began work on the new seen tables
-
Discussions with Mickael around journalist badges and seen/unseen features and how to move forward with the unknowns of how we are going to handle deletions
- Decided to continue to focus on the GUI PR and getting that merged while opening an early PR to get feedback around removing user info
Today:
- Threat modeling for user deletion
- A little background investigation around https://github.com/orgs/freedomofpress/projects/1#card-45249488
- Continue work on seen tables and data migration of historical records of "downloaded" submissions.
- Continue work on journalist badges - start writing unit tests
Blockers or Asks:
- Would like to meet with John to go over alembic migrations on the server
Yesterday:
- Reviewed and merged setuptools fix, +1'd Kushal's review
- Made focal staging PR ready for review
- Submitted kernel metapackage for focal to apt-test
Today:
- Available for review, non-SD work
Blockers or Asks:
- Kushal: can we close https://github.com/freedomofpress/securedrop/pull/5110 now that https://github.com/freedomofpress/securedrop/pull/5484 is merged?
Yesterday:
- User deletion discussions
- Initial notes on product development process
- Non-SD work (insurance & contract fun; metrics)
Today:
- User deletion threat modeling
- More insurance & contract fun
- Sprint prep for Thursday
- Standalone docs repo work as time allows
Blockers or Asks: None
Yesterday:
- I don't know, some setuptools packaging focal thing.
Today:
- more focal stuff (trying to repro failure of #5487, looking into PAX marking)
- seen/unseen API, if I can find time between meetings
Blockers or Asks:
- None
Yesterday:
- meeting-heavyish (1-1s and deletion feature chat)
- (this morning) reviewed & merged https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/61
- Worked on #5402 (Source Interface 500 error with missing reply files)
Today:
- Submitting a PR for #5402
- Revisiting logging in the template consolidation spike
- finish plucking the albatross that is testinfra in prod.
Blockers or Asks:
- wanna check in with Ro re: NUC8s for recommended hardware list
Today:
- Reviewed https://github.com/freedomofpress/securedrop/pull/5464 on IRC 2 other people confirmed that they are seeing same mypy error.
- Reviewed and merged https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/62
- Reviewed https://github.com/freedomofpress/securedrop/pull/5486 and merged
- Created https://github.com/freedomofpress/securedrop/issues/5495 for the focal
Tomorrow:
- CI work + documentation on the EPIC. Blockers or Asks:
- None
Yesterday:
- meetings
- seen/unseen discussions
- review of https://github.com/freedomofpress/securedrop/pull/5464 Today:
- Threat model discussion for journalist endpoint
- help review or contribute template consolidation or focal tasks
- New stable tor release, will open a ticket and prioritize as appropriate Blockers or Asks:
- None
Yesterday:
- comms, emails, meeting scheduling and support sync
- unsolicited opinions on user research
Today:
- a few support tickets this am
- https://github.com/freedomofpress/securedrop/issues/5496 (self-assigned v3-related docs task)
- SD dev environment tweaks: SOPS + keybase with split-gpg in qubes
- a support task (below, if no one has done this already)
Blockers or Asks:
- Has anyone tried restoring SD from a backup with v2+v3 onion services, then running the updater?
- Offer: now that I have a NUC8 (not yet set up) I will have an extra NUC (presumably a NUC7 but it could be either) if this becomes relevant for any of our Focal testing.