Repository: incubator-hivemall Updated Branches: refs/heads/master c119e7929 -> 448847fa2
Renamed a file Project: http://git-wip-us.apache.org/repos/asf/incubator-hivemall/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-hivemall/commit/448847fa Tree: http://git-wip-us.apache.org/repos/asf/incubator-hivemall/tree/448847fa Diff: http://git-wip-us.apache.org/repos/asf/incubator-hivemall/diff/448847fa Branch: refs/heads/master Commit: 448847fa2d1457af960909c30e7840377c3b02da Parents: c119e79 Author: Makoto Yui <m...@apache.org> Authored: Wed Feb 14 16:50:14 2018 +0900 Committer: Makoto Yui <m...@apache.org> Committed: Wed Feb 14 16:50:14 2018 +0900 ---------------------------------------------------------------------- src/site/markdown/verify_artifacts.md | 121 +++++++++++++++++++++++++++++ src/site/markdown/verify_howto.md | 121 ----------------------------- 2 files changed, 121 insertions(+), 121 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-hivemall/blob/448847fa/src/site/markdown/verify_artifacts.md ---------------------------------------------------------------------- diff --git a/src/site/markdown/verify_artifacts.md b/src/site/markdown/verify_artifacts.md new file mode 100644 index 0000000..f5226f0 --- /dev/null +++ b/src/site/markdown/verify_artifacts.md @@ -0,0 +1,121 @@ +<!-- + Licensed to the Apache Software Foundation (ASF) under one + or more contributor license agreements. See the NOTICE file + distributed with this work for additional information + regarding copyright ownership. The ASF licenses this file + to you under the Apache License, Version 2.0 (the + "License"); you may not use this file except in compliance + with the License. You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, + software distributed under the License is distributed on an + "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + KIND, either express or implied. See the License for the + specific language governing permissions and limitations + under the License. +--> + +<!-- toc --> + +# 1. Preparation + +## Install required softwares + +GPG and Maven, JDK 7 is mandatory for verification. + +```sh +brew install gpg gpg-agent pinentry-mac +brew install maven +brew install md5sha1sum +``` + +## Import GPG KEYS + +```sh +# Download GPG KEYS +wget https://dist.apache.org/repos/dist/dev/incubator/hivemall/KEYS + +# import KEYS for GPG verification +gpg --import KEYS +``` + +# 2. Download all release artifacts + +```sh +VERSION=0.5.0 +RC_NUMBER=3 + +wget -e robots=off --no-check-certificate \ + -r -np --reject=html,txt,tmp -nH --cut-dirs=5 \ + https://dist.apache.org/repos/dist/dev/incubator/hivemall/${VERSION}-incubating-rc${RC_NUMBER}/ +``` + +# 3. Verify SHA1, MD5, and GPG signatures. + +```sh +cd ${VERSION}-incubating-rc${RC_NUMBER}/ + +for f in `find . -type f -iname '*.sha1'`; do + echo -n "Verifying ${f%.*} ... " + sha1sum ${f%.*} | cut -f1 -d' ' | diff -Bw - ${f} + if [ $? -eq 0 ]; then + echo 'Valid' + else + echo "SHA1 is Invalid: ${f}" >&2 + exit 1 + fi +done +echo +for f in `find . -type f -iname '*.md5'`; do + echo -n "Verifying ${f%.*} ... " + md5sum ${f%.*} | cut -f1 -d' ' | diff -Bw - ${f} + if [ $? -eq 0 ]; then + echo 'Valid' + else + echo "MD5 is Invalid: ${f%.*}" >&2 + exit 1 + fi +done +echo +for f in `find . -type f -iname '*.asc'`; do + gpg --verify ${f} + if [ $? -eq 0 ]; then + echo "GPG signature is correct: ${f%.*}" + else + echo "GPG signature is Invalid: ${f%.*}" >&2 + exit 1 + fi + echo +done +``` + +# 4. Build, Test, and Verify source + +```sh +unzip hivemall-${VERSION}-incubating-source-release.zip +cd hivemall-${VERSION}-incubating + +# workaround for Maven sign-release-artifacts plugin +export GPG_TTY=$(tty) + +# JDK 7 is required for packaging +export JAVA_HOME=`/usr/libexec/java_home -v 1.7` + +# Java 8 is required for building Spark 2.2 module +export JAVA8_HOME=`/usr/libexec/java_home -v 1.8` + +# Try to create artifacts +export MAVEN_OPTS=-XX:MaxPermSize=256m + +# Try to create artifacts +# RAT license check and unit tests will be issued +mvn -Papache-release clean install + +# Verify Signatures of Release Artifacts +cd target/ +for file in `find . -type f -iname '*.asc'`; do + gpg --verify ${file} +done +``` \ No newline at end of file http://git-wip-us.apache.org/repos/asf/incubator-hivemall/blob/448847fa/src/site/markdown/verify_howto.md ---------------------------------------------------------------------- diff --git a/src/site/markdown/verify_howto.md b/src/site/markdown/verify_howto.md deleted file mode 100644 index f5226f0..0000000 --- a/src/site/markdown/verify_howto.md +++ /dev/null @@ -1,121 +0,0 @@ -<!-- - Licensed to the Apache Software Foundation (ASF) under one - or more contributor license agreements. See the NOTICE file - distributed with this work for additional information - regarding copyright ownership. The ASF licenses this file - to you under the Apache License, Version 2.0 (the - "License"); you may not use this file except in compliance - with the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - - Unless required by applicable law or agreed to in writing, - software distributed under the License is distributed on an - "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY - KIND, either express or implied. See the License for the - specific language governing permissions and limitations - under the License. ---> - -<!-- toc --> - -# 1. Preparation - -## Install required softwares - -GPG and Maven, JDK 7 is mandatory for verification. - -```sh -brew install gpg gpg-agent pinentry-mac -brew install maven -brew install md5sha1sum -``` - -## Import GPG KEYS - -```sh -# Download GPG KEYS -wget https://dist.apache.org/repos/dist/dev/incubator/hivemall/KEYS - -# import KEYS for GPG verification -gpg --import KEYS -``` - -# 2. Download all release artifacts - -```sh -VERSION=0.5.0 -RC_NUMBER=3 - -wget -e robots=off --no-check-certificate \ - -r -np --reject=html,txt,tmp -nH --cut-dirs=5 \ - https://dist.apache.org/repos/dist/dev/incubator/hivemall/${VERSION}-incubating-rc${RC_NUMBER}/ -``` - -# 3. Verify SHA1, MD5, and GPG signatures. - -```sh -cd ${VERSION}-incubating-rc${RC_NUMBER}/ - -for f in `find . -type f -iname '*.sha1'`; do - echo -n "Verifying ${f%.*} ... " - sha1sum ${f%.*} | cut -f1 -d' ' | diff -Bw - ${f} - if [ $? -eq 0 ]; then - echo 'Valid' - else - echo "SHA1 is Invalid: ${f}" >&2 - exit 1 - fi -done -echo -for f in `find . -type f -iname '*.md5'`; do - echo -n "Verifying ${f%.*} ... " - md5sum ${f%.*} | cut -f1 -d' ' | diff -Bw - ${f} - if [ $? -eq 0 ]; then - echo 'Valid' - else - echo "MD5 is Invalid: ${f%.*}" >&2 - exit 1 - fi -done -echo -for f in `find . -type f -iname '*.asc'`; do - gpg --verify ${f} - if [ $? -eq 0 ]; then - echo "GPG signature is correct: ${f%.*}" - else - echo "GPG signature is Invalid: ${f%.*}" >&2 - exit 1 - fi - echo -done -``` - -# 4. Build, Test, and Verify source - -```sh -unzip hivemall-${VERSION}-incubating-source-release.zip -cd hivemall-${VERSION}-incubating - -# workaround for Maven sign-release-artifacts plugin -export GPG_TTY=$(tty) - -# JDK 7 is required for packaging -export JAVA_HOME=`/usr/libexec/java_home -v 1.7` - -# Java 8 is required for building Spark 2.2 module -export JAVA8_HOME=`/usr/libexec/java_home -v 1.8` - -# Try to create artifacts -export MAVEN_OPTS=-XX:MaxPermSize=256m - -# Try to create artifacts -# RAT license check and unit tests will be issued -mvn -Papache-release clean install - -# Verify Signatures of Release Artifacts -cd target/ -for file in `find . -type f -iname '*.asc'`; do - gpg --verify ${file} -done -``` \ No newline at end of file
