Standup Notes 2020 05 07

Participants (alphabetical): Conor, Erik, Jen, Kevin, Kushal, Mickael, Ro

Topics and Call-outs

• SecureDrop 1.3.0 Release Update

  • Testing proceeding on RC2
  • Some discussion about batch deletion issue, defer to 1.4.0
  • Terminal menu item has moved in Tails 4.6, added docs PR for that
  • Kev will add test scenario for prod workstation testing, Jen will verify that SF instance is running RC2

• Staging RPM for testing (versioning scheme)

  • We may not be able to use "rc1" type pragma for RPMs -- major/minor + package-specific version info, e.g. x.y.z-1
    • https://docs.fedoraproject.org/en-US/packaging-guidelines/Versioning/#_versioning_prereleases_with_tilde
  • Do we want to promote package we use in staging to prod? May be easier if we don't use RC-specific numbering
  • Discussion invited here: https://github.com/freedomofpress/securedrop-workstation/issues/540

• Qubes upstream issue for Salt vuln?

  • Mickael will follow up further on Qubes Slack channel

• Input on how to manage securedrop-workstation-docs repo branching & releases: https://github.com/freedomofpress/securedrop-workstation-docs/issues/41

• UX meeting agenda for today:

  • UX discussion re: message display in the client
  • Discussion of pilot research plan

Conor

Yesterday:

• Pilot kick-off meeting

Today:

• HTTPS docs redirect https://github.com/freedomofpress/securedrop/issues/5081
• Non-SD work

Blockers or Asks:

• Mickael, good news on the F31 upgrade https://github.com/freedomofpress/securedrop-workstation/issues/544 - need repro on that?

Erik

Yesterday:

• Sprint planning and associated follow-up & backlog grooming
• Call w/ pilot org
• Testing workstation updates w/ qmemman patch in place to monitor for recurrence of #498
• Cont'd HTTPSE outreach

Today:

• Review https://github.com/freedomofpress/securedrop/pull/5240
• Flesh out test plan & begin testing nightlies
• Redmine4 inbound email re-testing
• Docs as time permits

Blockers or Asks: None

Jen

Yesterday:

• Mostly meetings (ux, sprint planning etc)
• Debugged small issue allie asked me to peek at - pushed up branch resolving
• chatted a bit w john about the deletion issue

Today:

• been lookin at kushal comment in 1022, will make some more comments
• after meetings, will see where things are at

Blockers or Asks:

• none

Kev

Yesterday:

• sprint planning
• finished NUC5 rc2 testing
• submitted docs PR to address Tails 4.6 changes

Today:

• further release tasks as required - adding test scenario for RC behaviour with Qubes workstation
• carried-over sprint tasks (hopefully RTD version cleanup)
• (stretch) env prep for workstation kernel builds

Blockers or Asks:

• none

Kushal

Today:

• Worked on client #1022, comment has the findings https://github.com/freedomofpress/securedrop-client/pull/1022#issuecomment-625184989
• Commented on 1004 https://github.com/freedomofpress/securedrop-client/issues/1004#issuecomment-625213673
• Finished off the QA steps, and updated the issue

Tomorrow:

• picking up issues from the sprint Blockers or Asks:
• none

Mickael

Yesterday:

• changelog for workstation
• QA on Mac minis (in progress)
• Updated Workstation RM docs for kernel builds Today:
• F31 investigation (successful, so far) https://github.com/freedomofpress/securedrop-workstation/issues/544#issuecomment-625330870 Blockers or Asks:
• workstation version scheme

Ro

Yesterday:

• QA, mtgs
• RC2 testing Today:
• ^^
• Mainly focused on support/QA

Blockers or Asks: Finishing up audit report, comments appreciated but not necessary