Standup Notes 2021 02 22

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Mickael, Ro

Topics and Call-outs

1.8.0

Pending changes

• ntp/ntpdate https://github.com/freedomofpress/securedrop/pull/5806

  • John will follow up, Mickael will review

• Apache configuration https://github.com/freedomofpress/securedrop/pull/5797

• package dependency definitions

  • Conor will do a spike today, possibly hand over to Kushal

• Disable v2 on restore PR: https://github.com/freedomofpress/securedrop/pull/5677

  • John will re-review

• removing v2 option from sdconfig? (didn't see an issue)

  • Erik will take a look today, will discuss further between Ansible server check vs. other approach

Testing backup/restore procedure

• Kev/Ro will apply backup to fresh Focal environment today

Backlog grooming

• Focusing on project board review again today.

Allie

Yesterday:

• Reviewed https://github.com/freedomofpress/securedrop-client/pull/1220
• Review in security repo

Today:

• Review in security repo

Blockers or Asks:

• None

Conor

Yesterday:

• PTO

Today:

• Finish up apache annotations (just test reorg) https://github.com/freedomofpress/securedrop/pull/5797
• First pass at deps reorg https://github.com/freedomofpress/securedrop/issues/2743

Blockers or Asks:

• Timesyncd PR review?

Erik

Yesterday: (Friday)

• CI investigation for securedrop-workstation repo, opened new PR to resolve (since merged)
• Completed 20.04 install on NUC10 and reviewed Kev's docs for that portion
• Drafted test plan for release-specific changes in SecureDrop Client: https://github.com/freedomofpress/securedrop-client/issues/1221

Today:

• More docs review & support

  • Add screenshots to Safe Deletion PR

• Backlog grooming and associated follow-up

• 1.8.0 help as needed / SecureDrop Workstation release prep as time allows

Blockers or Asks: Allie - would appreciate review on the SecureDrop Client test plan

John

Yesterday:

Today:

• Re-work ntp removal PR
• Review "Disable v2 restore PR"
• Investigate resolvconf removal if time permits

Blockers or Asks: None; Conor, will ping re: timesync changes

Kev

Yesterday:

• Over weekend, did a fresh install of Focal on 1U hardware. Some failures on meltdown script I'll document.

Today:

• Safe Deletion changes based on Mickael's feedback
• Backup/restore procedure

Blockers or Asks: None

Kushal

Today:

• Reviewed https://github.com/freedomofpress/securedrop/pull/5806

• Commented about 1.8.0 on NUC5 hardware https://github.com/freedomofpress/securedrop/issues/5794

  • looks solid, a few questions I had asked in the issue:

  Are we supposed to have -rw-rw-r-- permission on /var/ossec/.gnupg/pubring.kbx on the mon server?

  Why is there a /var/crash/_usr_bin_lscpu.1000.crash file on both the servers?

  Why do we have /libx32 and /lib32?

Tomorrow:

Blockers or Asks:

Mickael

Yesterday:

• Review safe deletion https://github.com/freedomofpress/securedrop/pull/5770
• reviewed/merged workstation ci fix: https://github.com/freedomofpress/securedrop-workstation/pull/659
• reviewed/merged xenial eol PR: https://github.com/freedomofpress/securedrop/pull/5789#pullrequestreview-594607319
• reviewed/merged apparmor fix https://github.com/freedomofpress/securedrop/pull/5805#pullrequestreview-594234763 Today:
• final review of safe deletion PR
• Review apache https://github.com/freedomofpress/securedrop/pull/5797
• other review as required
• look at issues described by kushal and open issues/prs as required Blockers or Asks: None

Ro

Today:

• Icinga updates/infra PR
• Many meetings
• Support comms
• Hardware testing/backup-restore testing

Blockers or Asks:

• kev or others: quick sanity-check on backup/restore docs workflow: https://github.com/freedomofpress/securedrop-docs/pull/133#issuecomment-767672354