almet/blog.notmyidea.org
1
0
Fork 0
mirror of https://github.com/almet/notmyidea.git synced 2025-04-28 11:32:39 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
blog.notmyidea.org/content/pages/worklog/dangerzone.md
Alexis Métaireau bf5e3a9c3d
update
2024-05-27 19:02:46 +02:00

4.5 KiB
Raw Blame History

title save_as template
dangerzone dangerzone/index.html worklog-en

Lundi 27 Mai 2024 (7h, 4/5)

  • Created PGP keys for alexis@freedom.press and setup github to work with it.
  • Synced 1:1 with AlexP
  • Got a better understanding of how containers work on different OSes, what's the role of hyperkit, etc.
  • Triggered Debian builds on my machine, and continued the deep dive in Debian packages and stdeb to fix #780 (to have pyside6 newer versions work on our releases).

Vendredi 24 Mai 2024 (5h, 5/5)

  • Completed the Sexual Harassment NYC training, and forms. I was pretty surprised by the (good) quality of it, actually.
  • Reviewed alex.p PR on the gVisor design document.
  • Read the currently opened pull requests.
  • build: bumped the minimum python version to 3.9 (in a PR)

Jeudi 23 Mai 2024 (8h, 5/5)

  • Read on how Dangerzone is currently being integrated in the tails docs, yay!
  • Synced this morning with Alex, and discussed about how containerization works, and what's the difference between OSes.
  • Split my "small changes" pull request in two parts, with minor changes on one side, and changes on how test fixtures are run on the other side.
  • Spent some time with Alex understanding why the tests weren't working anymore, and we found that the current tests weren't using the proper fixtures. That was fun and instructive: I'm happy to have a better understanding of how the test suite works, and interacts with QT apps.
  • Read the gVisor documentation Alex wrote. Learned about secomp filters.
  • Started using the devscripts to install the different environments locally, and started to install a X11 server on OSX to have the application show up... to be continued tomorrow.

Mercredi 22 Mai 2024 (8h, 5/5)

What I did today (a lot of reading, some meetings):

  • Read a bunch of issues to better understand the packaging status of dangerzone. Notes for myself:
  • Read the documentation of PyMuPDF, and the presentation that was made for DangerZone (found out about dangerzone-test-set)
  • Read on the difference between podman and Docker, I'm still lagging on this front, as I'm not a user myself.
  • Read the different Pull Requests on the repository to get a grasp of what is currently going on. (I learned about MacOS entitlements and more specifically App Sandbox)
  • Read the security audit for dangerzone (and the OWASP Docker security cheatsheet that was linked there)
  • Looked at the dangerzone redesign documents from superbloom, both for the application and for the website. Nice work :-)
  • Read the current code and made a PR with minor changes, and currently trying to setup my machine to work the same way Circle CI does.
  • Did the security 101 presentation with Davis and David
  • Welcome meeting with Erik, Harris and Alex.p

Mardi 21 Mai 2024 (9h, 5/5)