Standup Notes 2019 11 19

Participants (alphabetical): Conor, Erik, Jen, John, Kevin, Mickael, Nina, Ro

Topics and Call-outs

• Reminder: Feature freeze for 1.2.0 EOD today

  • Jen will ping folks today re: release responsibilities

• Diff review policies on deps

1. For dependencies like s3transfer, awscli, boto* that are widely used and used for uploading artifacts that we sign prior to upload and verify after pulling down again, i propose that we do NOT perform diff review in order to focus our (limited) diff review energy on those dependencies that are directly of production code

Conor mentions that we'll be migrating to lfs anyway

• SecureDrop Workstation updater story

proposal :

1. add the cron jobs as kushal found (https://github.com/freedomofpress/securedrop-workstation/issues/238#issuecomment-551865367) such that all sd VMs can be updated using the qubes-updater-gui, and then

2. run our autoupdater (for only the sd-svs-disp) to update the most security sensitive VMs automatically on boot, and then reduce the frequency of the other updater to allow journalists to choose the best time to do it (this does mean we’ll have two autoupdates running in cron so increased complexity, hopefully we can keep it just at two)

(This is the plan of record, with follow-up tracked in https://github.com/freedomofpress/securedrop-workstation/issues/238 and https://github.com/freedomofpress/securedrop-workstation/issues/341 )

Allie

Sick day

Conor

Yesterday:

Today:

Blockers or Asks:

Erik

Yesterday:

• Hiring (phone screen, challenges)
• Pilot/support follow-up

Today:

• More hiring work
• Sprint prep for tomorrow
• Support & non-SD work

Blockers or Asks: None, may need team assistance for Harlo's SDW setup

Jen

Yesterday:

• prepared securedrop-client release and tested in qubes: https://github.com/freedomofpress/securedrop-client/pull/625
• updated https://github.com/freedomofpress/securedrop-debian-packaging/pull/89 with all but one comment addressed (needs the securedrop-client release before the final comment can be addressed), otherwise marked as blocked for now and tossed back to backlog

few small things:

• did the pipenv -> pip-tools change in securedrop-workstation: https://github.com/freedomofpress/securedrop-workstation/pull/318
• added ci job for python 3.7 tests in securedrop-export: https://github.com/freedomofpress/securedrop-export/pull/29
• investigated one of the bugs on the sprint (source list rewriting slowly) for securedrop-client: https://github.com/freedomofpress/securedrop-client/pull/626

Today:

• reviewing/testing #4855
• 1.2.0 prep

Blockers or Asks:

• none

John

Yesterday:

• reworked deletion for https://github.com/freedomofpress/securedrop/pull/4855

Today:

• finishing #4855
• checking new kernels on NUCs

Blockers or Asks: Review on #4855 :)

Kev

Yesterday:

• Two new PRs:
  • add supervisord to packages on dev env
  • attempt to fix setup.py errors in dev env

Today:

• ^^
• Support queue

Blockers or Asks: None

Kushal

Sick day

Mickael

Yesterday:

• Review auto-attach PR
• Debugging Allie's staging issues

Today:

• Debug kernel issue in staging
• Reviewed dev env pip PR
• Builder security PR
• Client release 0.0.10: https://github.com/freedomofpress/securedrop-client/pull/625

Blockers or Asks: None

Nina

Today:

• Small mockup for DrG's PR
• Speedbump messaging
• Poke at CUPS on Qubes

Ro

Yesterday:

• Working on Tails docs
• Working on admin offboarding docs

Today:

• Finish docs, support comms

Blockers or Asks: