Standup Notes 2020 11 19

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Nina, Ro

Topics and Call-outs

0.5.1 release / u2mfn issue

• https://github.com/freedomofpress/securedrop-debian-packages-lfs/pull/38

• Updates to package will force installation of latest u2mfn package

• Kev has been doing fedora-31 to fedora-32 upgrade testing

  • (Kev) So far all looks good, still in progress

• (Mickael) We are using prod templates in dev, which hardcode apt.freedom.press

  • Upgrade happens BEFORE apt-test repo URLs are set, see https://github.com/freedomofpress/securedrop-workstation/blob/main/dom0/fpf-apt-test-repo.sls#L10-L11

  • (IMO that's a bug and we should reorder -Conor)

• securedrop-workstation-grsec package can be merged independently

• (Conor) Will prepare release PR for 0.5.1 RPM after tech meeting

• We will wait for Kev's go-ahead based on update testing, then release 0.5.1 package and grsec package together; after release, Conor, Erik, others may do additional smoke testing

Tech meetnig today

SecureDrop Workstation overview

Allie

Yesterday:

• Fixed bug and refactored PR based on review: https://github.com/freedomofpress/securedrop-client/pull/1165
• Worked on refactoring UI of the sourcelist and added blue highlight to source name: https://github.com/freedomofpress/securedrop-client/pull/1191
• Reviewed SDK PR: https://github.com/freedomofpress/securedrop-sdk/pull/148

Today:

• Continue to respond to review feedback on #1165
• Write tests for #1191
• Around for test and review
• Review John's PR that merges QA loader and dev setup script

Blockers or Asks:

• None

Conor

Yesterday:

• QA for u2mfn fix for 0.5.1 release

Today:

• Finalizing 0.5.1 RPM tag & PR, will do so after eng meeting
• Post-release smoke test for 0.5.0 -> 0.5.1 upgrade

Blockers or Asks:

• Kev, I will likely toss RPM review to you in ~2 hours

Erik

Yesterday:

• Docs PR review
• 0.5.1 testing

Today:

• 0.5.1 testing as needed
• Follow-up on SDK PR
• UxR recruiting
• More accounting/payroll fun

Blockers or Asks: None; heads up: PTO tomorrow (will join auditor call)

John

Yesterday:

• bugcrowd review
• https://github.com/freedomofpress/securedrop/pull/5644
  • Kev will take a look
• https://github.com/freedomofpress/securedrop/pull/5645
  • Allie will poke

Today:

• merged DrG's test fix: https://github.com/freedomofpress/securedrop/pull/5634
• reviewed https://github.com/freedomofpress/securedrop/pull/5641
• meetings
• more bugcrowd
• hopefully LFS automation

Blockers or Asks:

• anyone who has time today or tomorrow, would appreciate review of #5644/#5645

Kev

Yesterday:

• u2mfn fix

Today:

• upgrade testing for 0.5.1
• release task as needed / smoke testing
• Review John's static asset testing PR
• Poked at git tutorial

Blockers or Asks: None

Kushal

Today:

• Reviewed and merged https://github.com/freedomofpress/securedrop/pull/5571
• Digging into Focal test failures
  • ossec service is not starting up at the end of Ansible run, thus failing test on UDP port 1514 not listening on mon-staging
  • gpg decided to output different text string in Focal than Xenial Tomorrow:
• next tasks Blockers or Asks:
• if anyone has time to look into the ossec service issue?

Mickael

Yesterday:

• u2mfn review/merge/release prep
• client review for seen/unseen https://github.com/freedomofpress/securedrop-client/pull/1165
• UX research interview Today:
• help w/ 0.5.1 release
• investigate https://github.com/freedomofpress/securedrop-client/pull/1165
• meetings Blockers or Asks:
• none

Nina

Yesterday:

• Mickael UxR debrief
• Updating "reverse" script
• UxR session #1 for safe delete
• Post-sesh synthesis w/ Mickael
• Post-synthesis transcription/report-out
• Follow-up w/ participant wrt colleague engagement as our 2nd participant

Today:

• AM doctor appt; after that, not sure!
• Need to add "Send Reply" button onto prototype individual Source pages

Blockers or Asks:

• Erik, 1:1 time after 11am to chat recruiting next-steps/timeframe for more participants?

Ro

Yesterday:

• IVFs and related support correspondence
• Support sync + regular meetings
• #5377 &/ ansible and molecule learning

Today:

• 2 DST meetings and some associated prep
• Pinging a couple instances about downtime/Icinga updates
• outreach to Canadian Press Freedom Project
• more on #5377

Blockers or Asks:

• A non-urgent, post 0.5.1 check-in with Kev