Overview

• Support Launch of Provider MVS (Android V3 against latest lilypad)
• Desktop: Create rapid release process
• Desktop: Public release
• Android: Public release
• Lilypad: Public release

Release Readiness Checklists

• Desktop: bitmask-vpn#882 (closed)
• Android: bitmask_android#9168 (closed)
• Platform: leap/container-platform/lilypad#84 (closed)

Timing

• Wk1: 06.24 Planning and Scoping
• Wk2: 07.01 Dev
• Wk3: 07.08 Dev
• Wk4: 07.15 Dev
• Wk5: 07.22 Release and testing
• Wk6: 08.05 Release and testing
• Wk7: 08.12 Release and testing

KCP+Obfs4 Deliverable

• Release a containerized version ready for use by partner providers and the internet freedom community.
• Integration into Lilypad (platform)
• Integration into Android clients
• Integration into Desktop clients
• Stable tag of each ready to be deployed by ST
• Collect and analyze OONI measurement data and provider bridge data

Later

• Provide internationalized documentation for deployment and use
• Create a report detailing field testing and OONI measurement results
• Share results with ST, LEAP VPN provider partners, and the internet freedom community
• Field test on ST with min of 10 users for 4 hours each

Andriod Client

Estimated Hours: 126hrs or 15.75 8hr days

Issues List

• JNI bindings for Bitmask-core (v5) bitmask-core#5 (closed) 16hrs
• rename Android's bitmaskcore to sth. else to avoid naming confusion leap/android_libs/bitmaskcore#3 (moved) 4hrs
• Integration of Bitmask-core shared library in into Android's former bitmaskcore go library bitmask_android#9172 (closed) 16hrs
• update the former bitmaskcore lib in Bitmask bitmask_android#9183 (closed) (2hrs ( bitmask_android!282 (closed))
• create mobile package for the public API for Android / iOS
• ensure v3 backwards compatibility bitmask_android#9172 (closed) (16hrs)

Desktop

Peanut

Time Estimate: (~50 hrs)

Issues List

Bugs

• v3: If manual location is selected, the first gateway gets returned twice bitmask-vpn#823 (closed)
• Error handling broken when fetching a certificate fails bitmask-vpn#837 (closed) (CANT REPRODUCE)
• build/qt/release/riseup-vpn --install-helpers sets wrong permission bitmask-vpn#838 (closed)

Technical Debt

• Close log file during teardown bitmask-vpn#815 (closed)
• Bitmask.ReloadFirewall gets never executed bitmask-vpn#824 (closed)
• Unify and document environment variables for debugging bitmask-vpn#772 (closed)

Packaging

• Create an AUR package bitmask-vpn for Arch Linux bitmask-vpn#849 (closed)
• Update readme with information about supported versions of debian bitmask-vpn#830 (closed)
• Update Linux make dependencies in Makefile bitmask-vpn#839 (closed)
• Remove qt6-5compat-dev from build depends bitmask-vpn!208 (merged)
• bitmask-vpn crashes if iptables is not installed bitmask-vpn#829 (closed)

V5 Follow Ups/ Test

• v5 follow-up: Improve some logging, cleanup code bitmask-vpn!201 (merged)

Anjan

Time Estimate: (41hrs or 5.1 days)

Issues List

Release process

Development work:

• running bitmask-vpn on windows with non-admin user account (6h) bitmask-vpn#779 (closed)
• update obfs4 to latest (8h) bitmask-vpn#831 (closed)
• Fix snowflake support (6h) bitmask-vpn#846 (closed)
• macOS regression issue with prefrences bitmask-vpn#845 (closed)
• KCP support exposed on the UI (8h) bitmask-vpn#847 (closed)
• Fix message from installer when uninstalling on windows (30mins) bitmask-vpn#857 (closed)
• Github CI builds for macOS (update the gh action jobs) (1h) bitmask-vpn#820 (closed)

Pushed to next milestone:

• Release checklist/doc (tagging conventions, etc.) (4h) bitmask-vpn#789
• Create cross platform builds of win on linux (8h) bitmask-vpn#298
• Fix snowflake support (6h) bitmask-vpn#832

Lilypad

Time Estimate: 64hrs

Issues List

• Deploy and test (8hrs)
• lilypad: deploy obfs4 + kcp with lilypad 16hrs leap/container-platform/lilypad#97 (closed)
• lilypad: deploy introducer with lilypad 16hrs leap/container-platform/lilypad#90 (closed)
• lilypad: float upgrade 8hrs leap/container-platform/lilypad#96 (closed)
• lilypad: block direct access to openvpn 8hrs leap/container-platform/lilypad#88 (closed)

Circumvention Work

• Optimize KCP+Obfs4 in the field, its much slower then just Obfs4: obfsvpn#49 (closed) (Max)
• obfsvpn: obfsvpn option/flag for proxy-ing http endpoints : obfsvpn#38 (closed)

Experimental Track

• Deploy KCP+Obfs4 optimization on the field testing bridge server