Standup Notes 2021 01 20
Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Mickael, Ro
Release issue: https://github.com/freedomofpress/securedrop/issues/5689
-
RC3 (which includes SSH-over-v2-Tor fix) is on apt-test
-
Fix for bouncing Apache after restarting Tor: https://github.com/freedomofpress/securedrop/pull/5726
-
Fix for avoiding 0-byte-file creation for deleted submissions: https://github.com/freedomofpress/securedrop/pull/5724
-
Still open: 500 error on "Download unread" when file is missing: https://github.com/freedomofpress/securedrop/issues/5721 - John will investigate
-
Still open: 404 error in similar scenario: https://github.com/freedomofpress/securedrop/issues/5722
-
Low-priority session expiry issue will be fixed in nabla-c0d3's refactor PR: https://github.com/freedomofpress/securedrop/pull/5694/files#diff-c2cc3d723ead9193ae70023970aee1a19eaec93bf2c0ffbf1a9a19d89dfb00feL124
-
Updating the builder image during releases (https://github.com/freedomofpress/build-logs/commit/93bef8a999a75a6fb5ad218576d509904eb709af#diff-3aa7de48727bdfacafd9c9910dfa12762106d8c0256d27b28b37a5262a7533ebR788)
-
(Mickael) Longstanding proposal is to update builder at runtime. We now update builder on morning of release day to make sure final build has all security updates applied.
-
It was closed in favor of reproducible builds see https://github.com/freedomofpress/securedrop/issues/4533 for more details
-
(Allie) Will update docs as needed
-
-
Clobbering debs (focal+xenial, https://github.com/freedomofpress/securedrop-dev-packages-lfs/pull/84/files )
Yesterday:
- Release management/ QA/ Docs
Today:
- Release management/ QA/ Docs
Blockers or Asks:
- None
Yesterday:
- Workstation demo
- Wheels packaging PR CI spike (we can't use reprotest & containers, see comment in https://github.com/freedomofpress/securedrop-debian-packaging/pull/213#issuecomment-763263526 )
- Rc3 packages review
Today:
- Reviewing final draft of audit report
- SD QA for rc3, cron-apt upgrade on prod VMs
- Some apt client testing to evaluate dual-distro repo support on apt-test (the HTTPS webview is a bit confusing)
Blockers or Asks:
- None
Yesterday:
- Pre-release comms & release support
- Priorities / Ubuntu Focal timeline review w/ Mickael & sprint prep
Today:
- Re-focus on docs / docs review for 1.7.0 including advisory messaging
- Audit support as needed
Blockers or Asks: None
Yesterday:
Today:
- Investigate issues found in QA
- Focal testing as time allows
Blockers or Asks: None / reviews as usual
Yesterday:
- QA for RC2
Today:
- Reviewed John's fix for
touchissue - QA
- Docs
Blockers or Asks: None
Time off
Yesterday:
- release management and qa Today:
- review https://github.com/freedomofpress/securedrop/pull/5726/files
- release management (as needed) and qa
- audit follow up Blockers or Asks:
- nominate any tasks