Standup Notes 2021 07 06

Participants (alphabetical): Allie, Conor, Cory, Erik, John, Kevin, Kushal, Nina, Ro

Topics and Call-outs

SecureDrop Workstation apt.freedom.press breakage

• See https://github.com/freedomofpress/securedrop-workstation/issues/713
• Not breaking other updates because apt exits 0
• Expired key signature needs to be dropped from Release file

SecureDrop Client CI breakage

• https://github.com/freedomofpress/securedrop-client/issues/1267 Client needs dependency update
• Allie will update, John can help review

SecureDrop CI breakage on containers

• https://kushaldas.in/posts/reproducible-wheel-buidling-failure-on-circleci-container.html
• Yet to create issue as we have to figure out how/where it should go.

SecureDrop 2.0.1 point release

• At this time we're operating with 2.0.0 being tagged with the old key, which is now expired. This is causing issues for admin-tests (which run against live tags). A 2.0.1 tag will get these back to passing, and will also make it clear for all users that this is the new signing key.
• Kev's preference is for a no-op release to minimize QA burden.
• Could include Admin Workstation dependency updates
• Aiming for Thursday. Ro will handle Comms.
• May be able to use testinfra automation PR to skip manual testing on server side, but will require manual QA for admin updates.

Meetings this week

• Today: Support Sync as scheduled; check-in on SecureDrop Workstation deployments
• Tomorrow: Sprint planning
• Thursday: Standup switch to async (details TK)

Allie

Yesterday: (half day)

• Updated ram and ssd on qubes laptop, reinstall, report findings around configuration issue where qubes won't let you create a USB qube and PCI troubles on https://github.com/QubesOS/qubes-issues/issues/6754
• Continued to work on https://github.com/freedomofpress/securedrop-export/issues/40
• Also, end of last week, security hiring check-in

Today:

• Traffic meeting, support sync, knowledge share, Erik's and Allie's first 1:1 with our new roles!
• Update https://github.com/freedomofpress/securedrop-client/issues/1267
• Read https://kushaldas.in/posts/reproducible-wheel-buidling-failure-on-circleci-container.html to understand the issue more
• Sync with John on Safe Delete
• Continue with SDW install and securedrop-export#40 if time

Blockers or Asks:

• None

Conor

(Out)

Cory

Yesterday: (Thursday)

1. securedrop#5986: Source Interface template refactoring
2. securedrop-client#239: Confirming l10n approach with Allie
3. Little bit of Rust learning time

Today:

1. cont., aiming for PR by end of week

Blockers or Asks: (none except PR review)

Erik

Yesterday: (Thursday)

• Docs review
• SecEng hiring check-in
• Poke at workstation apt repo issue

Today:

• Prep for next SecureDrop sprint
• Infra->SecureDrop knowledge share
• Hiring: SecEng follow-up; Newsroom Support Coordinator JD tweaks

Blockers or Asks: None

John

Yesterday:

• admin update failure investigation
• safe deletion UI review/iteration with Allie

Today:

• catching up with Allie about next step for safe deletion
• admin crypto test plan
• reviewing Kev's testinfra PR

Blockers or Asks:

• catching up with Allie about next step for safe deletion

Kev

Yesterday:

• PR to update testinfra tests to run cleanly against prod; ready for review

Today:

• Small PR to flag admin-tests test that's failing due to expired tag to xfail
• Reviewed and approved John's cryptography PR
• Prep for 2.0.1; mtgs
• PR review as time allows

Blockers or Asks: None

Kushal

Today:

• More wheels + CI fighting
• meetings Tomorrow:
• May take PTO (will attend sprint planning)

Blockers or Asks:

• NOne

Ro

Yesterday:

• Support comms, DST comms
• Rust/e2e learning time

Today:

• many meetings, DST intake meeting
• support comms
• re-list instance in directory, onion name

Blockers or Asks:

• (low-key) ready for re-review: https://github.com/freedomofpress/securedrop-docs/pull/224
• waiting for new Icinga creds, commented on infra ticket
• onion name signing: is it just kev? (thinking ahead to next week)