Standup Notes 2021 03 29

Participants (alphabetical): Allie, Conor, Erik, Kevin, Kushal, Mickael

Top 3 priorities during 3/24-4/7 sprint

1. Finalize and land key deliverables for SecureDrop 1.8.1 release
2. Restore reproducibility for SecureDrop Workstation build artifacts; update docs
3. Finalize design for SecureDrop Client Safe Deletion and begin implementation

Topics and Call-outs

Reproducible wheels

Issue: https://github.com/freedomofpress/securedrop-debian-packaging/issues/218

Next step: Allie/Kushal will collaborate on bootstrapping step described in https://github.com/freedomofpress/securedrop-debian-packaging/issues/218#issuecomment-804900737

After transition to new build system, all wheels will need to be rebuilt

Upgrade boxes status

PR: https://github.com/freedomofpress/securedrop/pull/5870

Breakage is not related to changes in the PR - Conor will ping John when he's back

Allie

Yesterday:

• SDW release

Today:

• Will pick up reviews

• Backlog grooming

• Catch up on https://github.com/freedomofpress/securedrop-debian-packaging/issues/218

  • Do step 1 (build wheels for the bootstrapping process): https://github.com/freedomofpress/securedrop-debian-packaging/issues/218#issuecomment-804900737

  • start thinking about how we will manage maintainers of repoducible wheels (one day it'll be nice to no longer host wheels that are reproducible)

Blockers or Asks:

• None

Conor

Yesterday:

Today:

• Review secureboot checker https://github.com/freedomofpress/securedrop/pull/5879/files
• Upgrade boxes, we need an issue for that breakage - I'll open
• Kev had a nice idea: does the upgrade-box breakage affect Focal? Maybe not

Blockers or Asks:

• Kev: Paxtest changes in place, please re-review https://github.com/freedomofpress/securedrop/pull/5848
• Mickael: Addressed RPM comments, needs stamp https://github.com/freedomofpress/securedrop-workstation/pull/666

Erik

Yesterday: (Friday)

• securedrop-export QA; audit comms & issues
• Update docs requirements across docs repos (motivated by dependabot PRs)

Today:

• File some low/informational issues from audit
• Look into workstation updater issue if time allows

Blockers or Asks: None

John

(OOO)

Kev

Yesterday: (Friday)

• OrgSec & learning time & misc

Today:

• Changes to restore playbook per sprint plan
• Will verify Conor's testinfra
• Docs repo updates

Blockers or Asks: None

Kushal

Today:

• Reading about OSSEC and how the rules work
• https://github.com/freedomofpress/securedrop/pull/5882 created PR for OSSEC rules for fwupd

Tomorrow:

• As required Blockers or Asks:
• Can we please add OSSEC knowledge to our development docs?
  • Kushal will start putting some notes in wiki for initial review

Mickael

Yesterday:

• workstation release and audit publication
• https://github.com/freedomofpress/securedrop-client/pull/1210
• merged https://github.com/freedomofpress/securedrop-workstation/pull/666 Today:
• https://github.com/freedomofpress/securedrop-client/pull/1210
• https://github.com/freedomofpress/securedrop/pull/5882 also look at FWUPD options (and open a follow up)

Blockers or Asks: None