Standup Notes 2021 03 04

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Ro

Topics and Call-outs

1.8.0

• QR code issue on Focal (resolved and backported) - https://github.com/freedomofpress/securedrop/issues/5841

• timesyncd service not starting (no repro but resolved and backported) - https://github.com/freedomofpress/securedrop/issues/5840

• inconsistent testinfra failures - see notes in https://github.com/freedomofpress/securedrop/pull/5839

  • Conor will poke at testinfra failures further.

• backup/restore PR https://github.com/freedomofpress/securedrop/pull/5834

• paxtest on Focal shows "Vulnerable" for "memcpy" tests; this is actually expected, see https://github.com/freedomofpress/securedrop/issues/1039#issuecomment-790033219 for more info

• If #5834 is merged, RC2 will be cut this afternoon.

  • John is picking up review.

• John will file issue for unattended-upgrades being installed on Xenial, Conor will investigate (higher priority than testinfra failures)

Reproducible wheels

• We missed build dependency before https://github.com/freedomofpress/securedrop-debian-packaging/issues/218#issuecomment-790614951
• https://github.com/freedomofpress/securedrop-debian-packaging/issues/218#issuecomment-790621137

SecureDrop Workstation releases

Allie

Yesterday:

Today:

Blockers or Asks:

Conor

Yesterday:

• paxtest research, filed in https://github.com/freedomofpress/securedrop/issues/1039#issuecomment-790033219
• Spike on per-source DispVM behavior in Workstation, based on @deeplow's comments, see discussion in https://github.com/freedomofpress/securedrop-workstation/issues/333#issuecomment-790756552

Today:

• Investigate Xenial unattended-upgrades test failures in
• Focal testinfa test changes (Kev's PR)
• Reviewing the Workstation release mechanics by Erik
• Spike to update paxtest based on behavior described above
• Standing by for Workstation release mechanics as required

Blockers or Asks:

• John: Xenial unattended-upgrades behavior issue, I'll work on repro3

Erik

Yesterday:

• Submitted revised UXFund proposal; early coordination on possible hire of 6 month contract developer
• Draft SDW config package release plan
• Release support.

Today:

• Release/pilot deployment support.

• Picking up other docs/support tasks.

  • May pick up upgrade guide

• Review onion name PRs

Blockers or Asks: None

John

Yesterday:

• #5834

Today:

• #5834
• investigate presence of unattended-upgrades on xenial

Blockers or Asks:

• none

Kev

Yesterday:

• QR code fix
• more fixes on #5834
• QA

Today:

• yet more #5834 fixes
• yet more QA
• docs

Blockers or Asks: none

Kushal

Today:

• One more round of review for https://github.com/freedomofpress/securedrop/pull/5834 and commented on the issue
• backport pr review #5843 and #5845
  • I did a mistake in one of them, merged before a dependency was merged. Thank you Mickael for pointing out.
• Reproducible wheels investigation Tomorrow:

• QA as needed

Blockers or Asks: None, heads up that Kushal will be off Monday

Mickael

Yesterday:

• review/backport qrcode PR
• opened PR for httpse additions
• review of issue 41, 1/2 patches reviewed Today:
• help with rc2
• more review of issue 41
• help w/ testinfra stuff Blockers or Asks:
• pair with allie on issue 41

Ro

Yesterday:

• QA and client meeting prep
• partial review/step through of #5834 + feedback

Today:

• QA, docs (changes to #133?), and client meetings

Blockers or Asks:

• none