Standup Notes 2020 07 28

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Ro

Topics and Call-outs

SecureDrop 1.5.0

• Release ticket: https://github.com/freedomofpress/securedrop/issues/5368
• QA matrix: https://docs.google.com/spreadsheets/d/1Y8Kiy0NzWxKsoKy9KmmtfQNpCWZxZsbDymP6yJg7FJs/edit#gid=696651901
• Translations are merged
• #5366 change for disabling deprecation warning tested by John and Kushal
• Deprecation warning translations tested by John
• Ready for pre-flight testing
• Docs update for screenshots pending

Reproducible build improvements

• Quick debrief on dynamic tarball builds: https://github.com/freedomofpress/securedrop-debian-packaging/pull/185
• Note that the Debian packaging process itself is already reproducible, thanks to SOURCE_DATE_EPOCH, making the lack of tarball reproducibility potentially a non-issue
• We can potentially retire tarball archiving
• Some concern about potentially deviating from standard distribution build practices
• Reminder: In-depth discussion on Thursday

Pilot/Support Sync

• Happening as scheduled
• Will debrief on latest research findings

Allie

Yesterday:

Today:

Blockers or Asks:

Conor

Yesterday:

• Quick spike (2h) on reproducible builds https://github.com/freedomofpress/securedrop-debian-packaging/issues/182

Today:

• Poking at v3 onion URLs for some websites
• Hardware setup for upcoming workstation demo

Blockers or Asks: None

Erik

Yesterday:

• Reviewed Ro's OSSEC PR and debugged odd file ownership issues with /var/ossec/.gnupg files on mon server
• Reviewed release comms
• Prepared Internews MoU

Today:

• Further Internews follow-up - looks like we may actually be getting two folks to help out, including 1 developer
• Support 1.5.0/release comms as needed
• Poke at potentially automatically adding screenshots for translators as time permits.

Blockers or Asks: None

John

Yesterday:

Today: 1.5.0 release

Blockers or Asks:

Kev

Yesterday: Resolving i18n merge issues

Today:

• Updating screenshots
• Preflight checks
• Final docs merge and other release fun

Blockers or Asks: None

Kushal

Today:

• Tested 1.5.0-rc3 for #5366 and updated the release ticket
• Reviewing https://github.com/freedomofpress/securedrop-client/pull/1130/
  • The code changes looks okay
  • applied the Patch on sd-app, things worked according to the test plan
  • approving but will wait for others before merge

Tomorrow:

• Touch the Focal build
• Other things on plate/review already Blockers or Asks:
• none

Mickael

Yesterday:

• reviewed https://github.com/freedomofpress/securedrop-client/pull/1130 (full screen behavior)
• reviewed https://github.com/freedomofpress/securedrop-client/pull/1089 (docs for building Qt from source)
• Help w/ release

Today:

• Release tasks
• Meetings

Blockers or Asks: None

Ro

Yesterday:

• Release comms incl https://github.com/freedomofpress/securedrop/pull/5414 (thanks Erik for review)
• Meetings

Today:

• Release comms
• infosec mtg
• support tasks (IVF etc)

Blockers or Asks:

• Thank you John for translator info!
• All FPFers who are contributors to this release and want to be listed specifically in the acknowledgments, please DM me or add your name, Github handle, or both to the Google doc (called [draft] 1.5.0 Release Messaging, shared on Google Drive).