Standup Notes 2021 02 09

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Nina, Ro

Topics and Call-outs

Focal

Release blockers

iptables issue

Issue: https://github.com/freedomofpress/securedrop/issues/5776 PR: https://github.com/freedomofpress/securedrop/pull/5780

Conor will do additional functional testing today, verifying iptables-persistent behavior

email delivery issue

Issue: https://github.com/freedomofpress/securedrop/issues/5775 PR: https://github.com/freedomofpress/securedrop/pull/5777

ossec agent / Apache config issue

Issue: https://github.com/freedomofpress/securedrop/issues/5778 John will help investigate

Triage

• Add dependency to ubuntu-release-upgrader-core: https://github.com/freedomofpress/securedrop/issues/5781

  • (Added to sprint)

• Session termination issue: https://github.com/freedomofpress/securedrop/issues/5779

  • No immediate action required (seems to only impact idle connections), but watch for session termination issues during QA

Code of Conduct

We can manage for all repos in one place -- generalized some language, comments welcome: https://github.com/freedomofpress/.github/pull/1

Firewall conversation? (Support sync?)

• +1 to support sync, Conor will attend

Allie

Yesterday:

• focuesd on focal install

Today:

Blockers or Asks:

Conor

Yesterday:

• iptables debugging for focal, including testinfra
• requested account for LL Mattermost

Today:

• iptables resolution
• qubes testinfra merged

Blockers or Asks:

• John, can you push any work related to metapackage in https://github.com/freedomofpress/securedrop/pull/5772 (otherwise I'll merge 5772 and we can follow up)
• John, Kushal: let's chat iptables-persistent (at end of meeting is OK)
• Kev: let's chat about support this week (support sync OK)

Erik

Yesterday:

• Added CI PR to HTTPSE repo: https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/34
• Created rep / opened PR to centralize Code of Conduct management: https://github.com/freedomofpress/.github/pull/1
• Investigated CI failure in securedrop-workstation repo, notes: https://github.com/freedomofpress/securedrop-workstation/issues/657
• Cont'd poking a bit at securedrop-admin, for now added docs clarification on how to run it outside Tails: https://github.com/freedomofpress/securedrop-docs/pull/149

Today:

• Chat w/ SimplySecure folks (they might partner with us for our next SecureDrop UXFund application)
• Cont'd technical work on securedrop-admin, SDW issues as needed
• Review docs & support backlogs, maybe follow-up with a couple of potential SDW pilot users/ follow on support-sync topics as needed

Blockers or Asks: Review/comments on the above as time permits

John

Yesterday:

• Focal issues

Today:

• Focal issues
• ossec agent/error detection testing

Blockers or Asks:

• Asking for extra review work on #5772 this afternoon, once I confirm that the remaining conf test errors aren't specific to my changes

Kev

Yesterday:

• Focal VM install; did not see iptables issue or release-upgrader package issue
• Building out new Qubes workstation

Today:

• Prep for a pilot install
• Safe Delete follow-up

Blockers or Asks: None

Kushal

Today:

• Fighting with Firewall and then finally getting the hardware focal installed from Develop
• Created https://github.com/freedomofpress/securedrop/pull/5780 (iptables PR)
• Updated https://github.com/freedomofpress/securedrop/pull/5777 based on feedback Tomorrow:
• Next tasks

Blockers or Asks:

• None

Mickael

Yesterday:

• reviewed https://github.com/freedomofpress/securedrop/pull/5777

• updated grsec metapackage https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/89

• https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/90

  • Allie will review

Today:

• more review of https://github.com/freedomofpress/securedrop/pull/5777
• Review/help with firewall config changes if needed
• safe deletion meeting later today

Blockers or Asks:

• None

Nina

Yesterday:

Today:

Blockers or Asks:

Ro

Yesterday:

• PTO

Today:

• Support comms, Redmine onboarding, IVF
• Firewall stuff
• Icinga updates
• later this week: attempt focal install on nuc7s?

Blockers or Asks:

• firewall info/interim recommendation as requested on internal comms (async or team) - thanks for chiming in folks :)