Standup Notes 2020 07 01

Participants (alphabetical): Allie, Conor, Erik, John, Kushal

Topics and Call-outs

Updates/reminders

• Thursday/Friday are FPF holidays :-)

Kernel update

• Conor may start review today

Qubes base template update (keyring bump)

• Conor/John to investigate https://github.com/freedomofpress/qubes-template-securedrop-workstation/issues/14#issuecomment-652362362

RPM release (updater changes)

• Build ready for review: https://github.com/freedomofpress/securedrop-workstation-dev-rpm-packages-lfs/pull/14 - Conor will review
• Allie will review/finalize RPM update PR in securedrop-workstation

Allie

Yesterday:

• RPM build & signing with dev key
• Updater troubleshooting, document on wiki

Today:

• Prototyping read/unread
• RPM wrap-up
• Resolution min-size follow-up

Blockers or Asks: None

Conor

Yesterday:

• Documented RPM rc build steps: https://github.com/freedomofpress/securedrop-workstation/wiki/Building-securedrop-workstation-dom0-config-RPM-package
• Filed a few issues to improve qubes-builder logic (still blocked)

Today:

• Review of dom0-config RPM changes by Allie
• Review state of kernel PRs
• Kernel source storage for Kev, related to ongoing Workstation kernel PRs
• Digging into qubes-builder logic, trying to unblock TemplateVM with new keyring

Blockers or Asks:

• Allie: available to pair on qubes vault vm config if helpful

Erik

Yesterday:

• Drafted package pruning guidelines: https://github.com/freedomofpress/securedrop-debian-packages-lfs/pull/28
• Tested and documented Tails 4.8 "unsafe browser" behavior (unsafe browser is used during firewall config)
• Documented updater changes for SD Workstation
• Implemented stable docs build for workstation docs, via tag
• Conor/Allie debugging session re: updater issues, potentially clock drift related

Today:

• "Unsafe browser" docs follow-up for workstation docs (we recommend use of Tails/unsafe browser during initial ThinkPad hardening)
• Fundraising planning (deferred from y'day)
• Issues/PR curation, PR follow-up as needed

Blockers or Asks: Thoughts on https://github.com/freedomofpress/securedrop-debian-packages-lfs/pull/28 ?

John

Yesterday:

• downloaded Qubes 4.1, took too long to get to trying it
• reviewed/merged Jen's CI package reproducibility checks
• started on the testinfra prod review; working on adding qubes-staging as a target so I can testinfra there

Today:

• Merged prateekj117's disconnected submission/reply PRs
• Added Pillow upgrade PR
• more work on testinfra PR
• working with Conor on https://github.com/freedomofpress/qubes-template-securedrop-workstation/issues/14#issuecomment-652362362

Blockers or Asks:

• Review Pillow update https://github.com/freedomofpress/securedrop/pull/5356 once CI is green

Kev

Holiday

Kushal

Today:

• Investigated https://github.com/freedomofpress/qubes-template-securedrop-workstation/issues/14 and commented on the issue
• Reviewed https://github.com/freedomofpress/securedrop-client/pull/1103
• Updated https://github.com/freedomofpress/securedrop/pull/5224 based on new string count
• Reviewed the community PR related to invalid usernames in SecureDrop Tomorrow:
• Holiday :) Blockers or Asks:
• None

Mickael

Holiday

Ro

Holiday