1.0.0 Migration Testing

ssh-over-tor and v2/v3 service migration test scenarios

Overview

In each scenario below, install to prod VMs or HW with the settings listed, then update settings via ./securedrop-admin sdconfig, ./securedrop-admin install, and ./securedrop-admin tailsconfig.

The scenario passes if the Source and Journalist desktop shortcuts work and use the appropriate service URL, and ssh app and ssh mon also work with the expected values in ~/.ssh/config/.

Do not attempt all scenarios! Pick a couple and claim them with a comment below. Scenarios are listed roughly in order of relative probability (most live instances likely use the default SSH-over-Tor option, switching SSH options after an install is unlikely).

ssh-over-tor, service-only change:

Scenario 1:

• Install (ssh-over-tor, v2) and update to (ssh-over-tor, v2+v3)
  • verify shortcuts and ssh
• Next, update to (ssh-over-tor, v3)
  • verify shortcuts and ssh

Scenario 2:

• Install (ssh-over-tor, v2) and update to (ssh-over-tor, v3)
  • verify shortcuts and ssh
• Next, update to (ssh-over-tor, v2+v3)
  • verify shortcuts and ssh

ssh-over-lan, service-only change:

Scenario 3:

• Install (ssh-over-lan, v2) and update to (ssh-over-lan, v2+v3)
  • verify shortcuts and ssh
• Next, update to (ssh-over-lan, v3)
  • verify shortcuts and ssh

Scenario 4:

• Install (ssh-over-lan, v2) and update to (ssh-over-lan, v3)
  • verify shortcuts and ssh
• Next, update to (ssh-over-lan, v2+v3)
  • verify shortcuts and ssh

ssh-only change:

Scenario 5:

• Install (ssh-over-tor, v2) and update to (ssh-over-lan, v2)
  • verify shortcuts and ssh
• Next, update to (ssh-over-tor, v2)
  • verify shortcuts and ssh

Scenario 6:

• Install (ssh-over-tor, v2+v3) and update to (ssh-over-lan, v2+v3)
  • verify shortcuts and ssh
• Next, update to (ssh-over-tor, v2+v3)
  • verify shortcuts and ssh

Scenario 7:

• Install (ssh-over-tor, v3) and update to (ssh-over-lan, v3)
  • verify shortcuts and ssh
• Next, update to (ssh-over-tor, v3)
  • verify shortcuts and ssh

Both change

Scenario 8:

• Install (ssh-over-tor, v3) and update to (ssh-over-lan, v2+v3)
  • verify shortcuts and ssh
• Next, update to (ssh-over-tor, v3)
  • verify shortcuts and ssh

Scenario 9:

• Install (ssh-over-tor, v2+v3) and update to (ssh-over-lan, v3)
  • verify shortcuts and ssh

Scenario 10:

• Install (ssh-over-tor, v2) and update to (ssh-over-lan, v2+v3)
  • verify shortcuts and ssh
• Next, update to (ssh-over-tor, v3)
  • verify shortcuts and ssh

Scenario 11:

• Install (ssh-over-tor, v2) and update to (ssh-over-lan, v3)
  • verify shortcuts and ssh

Scenario 12:

• Install (ssh-over-lan, v2) and update to (ssh-over-tor, v2+v3)
  • verify shortcuts and ssh

Scenario 13:

• Install (ssh-over-lan, v2) and update to (ssh-over-tor, v3)
  • verify shortcuts and ssh