Standup Notes 2021 01 20

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Mickael, Ro

Topics and Call-outs

1.7.0

Release issue: https://github.com/freedomofpress/securedrop/issues/5689

QA matrix: https://docs.google.com/spreadsheets/d/1RbFqgphiZZVuAFdvCwJQugTHQw8EWOQdCcPscCXMgQM/edit#gid=1346621636

• RC3 (which includes SSH-over-v2-Tor fix) is on apt-test

• Fix for bouncing Apache after restarting Tor: https://github.com/freedomofpress/securedrop/pull/5726

• Fix for avoiding 0-byte-file creation for deleted submissions: https://github.com/freedomofpress/securedrop/pull/5724

• Still open: 500 error on "Download unread" when file is missing: https://github.com/freedomofpress/securedrop/issues/5721 - John will investigate

• Still open: 404 error in similar scenario: https://github.com/freedomofpress/securedrop/issues/5722

• Low-priority session expiry issue will be fixed in nabla-c0d3's refactor PR: https://github.com/freedomofpress/securedrop/pull/5694/files#diff-c2cc3d723ead9193ae70023970aee1a19eaec93bf2c0ffbf1a9a19d89dfb00feL124

• Updating the builder image during releases (https://github.com/freedomofpress/build-logs/commit/93bef8a999a75a6fb5ad218576d509904eb709af#diff-3aa7de48727bdfacafd9c9910dfa12762106d8c0256d27b28b37a5262a7533ebR788)

  • (Mickael) Longstanding proposal is to update builder at runtime. We now update builder on morning of release day to make sure final build has all security updates applied.

  • It was closed in favor of reproducible builds see https://github.com/freedomofpress/securedrop/issues/4533 for more details

  • (Allie) Will update docs as needed

• Clobbering debs (focal+xenial, https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/84/files )

Allie

Yesterday:

• Release management/ QA/ Docs

Today:

• Release management/ QA/ Docs

Blockers or Asks:

• None

Conor

Yesterday:

• Workstation demo
• Wheels packaging PR CI spike (we can't use reprotest & containers, see comment in https://github.com/freedomofpress/securedrop-debian-packaging/pull/213#issuecomment-763263526 )
• Rc3 packages review

Today:

• Reviewing final draft of audit report
• SD QA for rc3, cron-apt upgrade on prod VMs
• Some apt client testing to evaluate dual-distro repo support on apt-test (the HTTPS webview is a bit confusing)

Blockers or Asks:

• None

Erik

Yesterday:

• Pre-release comms & release support
• Priorities / Ubuntu Focal timeline review w/ Mickael & sprint prep

Today:

• Re-focus on docs / docs review for 1.7.0 including advisory messaging
• Audit support as needed

Blockers or Asks: None

John

Yesterday:

Today:

• Investigate issues found in QA
• Focal testing as time allows

Blockers or Asks: None / reviews as usual

Kev

Yesterday:

• QA for RC2

Today:

• Reviewed John's fix for touch issue
• QA
• Docs

Blockers or Asks: None

Kushal

Time off

Mickael

Yesterday:

• release management and qa Today:
• review https://github.com/freedomofpress/securedrop/pull/5726/files
• release management (as needed) and qa
• audit follow up Blockers or Asks:
• nominate any tasks