Gerrrr commented on issue #51: URL: https://github.com/apache/otava/issues/51#issuecomment-2840955137
### RC3 **Issues with RC2** 1. weird OS X files in `-sources.tar.gz`. 2. `.git` directory in `-sources.tar.gz`. 3. `<sha512> dist/<filename>` in `.sha512` files instead of `<sha512> <filename>`. **Solution for problems 1 and 2** Download source archive from GH tags (https://github.com/apache/otava/tags) instead of trying to hand-roll it on my laptop. **Solution for problem 3** Create sha512 in the dist directory **Command log** Create new tag: ``` $ git tag -a 0.6.0+incubating-RC3 -m "0.6.0+incubating-RC3" $ git push origin --tags ``` Build: ``` $ ./poetryw build mkdir -p /Users/asorokoumov/Projects/otava/build/venvs /Users/asorokoumov/Projects/otava/build/wrappers/bin python3 -m venv /Users/asorokoumov/Projects/otava/build/venvs/poetry source /Users/asorokoumov/Projects/otava/build/venvs/poetry/bin/activate python3 -m pip install -qqq --upgrade pip python3 -m pip install -qqq poetry==1.8.3 ln -fs ../../venvs/poetry/bin/poetry /Users/asorokoumov/Projects/otava/build/wrappers/bin/poetry deactivate /Users/asorokoumov/Projects/otava/build/venvs/poetry/lib/python3.9/site-packages/urllib3/__init__.py:35: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020 warnings.warn( Building otava (0.6.0+incubating) - Building sdist - Built otava-0.6.0+incubating.tar.gz - Building wheel - Built otava-0.6.0+incubating-py3-none-any.whl ``` Download sources from GH: ``` $ cd dist $ wget -O otava-0.6.0+incubating-sources.tar.gz https://github.com/apache/otava/archive/refs/tags/0.6.0+incubating-RC3.tar.gz --2025-04-29 23:24:57-- https://github.com/apache/otava/archive/refs/tags/0.6.0+incubating-RC3.tar.gz Resolving github.com (github.com)... 140.82.116.4 Connecting to github.com (github.com)|140.82.116.4|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://codeload.github.com/apache/otava/tar.gz/refs/tags/0.6.0%2Bincubating-RC3 [following] --2025-04-29 23:24:58-- https://codeload.github.com/apache/otava/tar.gz/refs/tags/0.6.0%2Bincubating-RC3 Resolving codeload.github.com (codeload.github.com)... 140.82.116.9 Connecting to codeload.github.com (codeload.github.com)|140.82.116.9|:443... connected. HTTP request sent, awaiting response... 200 OK Length: unspecified [application/x-gzip] Saving to: ‘otava-0.6.0+incubating-sources.tar.gz’ otava-0.6.0+incubating-so [ <=> ] 107.68K 698KB/s in 0.2s 2025-04-29 23:24:58 (698 KB/s) - ‘otava-0.6.0+incubating-sources.tar.gz’ saved [110261] ``` Create signatures ``` $ gpg --armor --output otava-0.6.0+incubating-py3-none-any.whl.asc --detach-sig otava-0.6.0+incubating-py3-none-any.whl $ gpg --armor --output otava-0.6.0+incubating-sources.tar.gz.asc --detach-sig otava-0.6.0+incubating-sources.tar.gz $ gpg --armor --output otava-0.6.0+incubating.tar.gz.asc --detach-sig otava-0.6.0+incubating.tar.gz ``` Verify signatures ``` $ ls -la total 424 drwxr-xr-x@ 8 asorokoumov staff 256 Apr 29 23:26 ./ drwxr-xr-x@ 26 asorokoumov staff 832 Apr 29 23:16 ../ -rw-r--r--@ 1 asorokoumov staff 51495 Apr 29 23:16 otava-0.6.0+incubating-py3-none-any.whl -rw-r--r--@ 1 asorokoumov staff 833 Apr 29 23:23 otava-0.6.0+incubating-py3-none-any.whl.asc -rw-r--r--@ 1 asorokoumov staff 110261 Apr 29 23:24 otava-0.6.0+incubating-sources.tar.gz -rw-r--r--@ 1 asorokoumov staff 833 Apr 29 23:25 otava-0.6.0+incubating-sources.tar.gz.asc -rw-r--r--@ 1 asorokoumov staff 38810 Apr 29 23:16 otava-0.6.0+incubating.tar.gz -rw-r--r--@ 1 asorokoumov staff 833 Apr 29 23:26 otava-0.6.0+incubating.tar.gz.asc $ gpg --verify otava-0.6.0+incubating-py3-none-any.whl.asc otava-0.6.0+incubating-py3-none-any.whl gpg: Signature made Tue Apr 29 23:22:57 2025 PDT gpg: using RSA key E81152E1F17593C0949A9D235E2C934B6C5147A0 gpg: Good signature from "Alex Sorokoumov <[email protected]>" [ultimate] $ gpg --verify otava-0.6.0+incubating-sources.tar.gz.asc otava-0.6.0+incubating-sources.tar.gz gpg: Signature made Tue Apr 29 23:25:27 2025 PDT gpg: using RSA key E81152E1F17593C0949A9D235E2C934B6C5147A0 gpg: Good signature from "Alex Sorokoumov <[email protected]>" [ultimate] $ gpg --verify otava-0.6.0+incubating.tar.gz.asc otava-0.6.0+incubating.tar.gz gpg: Signature made Tue Apr 29 23:26:30 2025 PDT gpg: using RSA key E81152E1F17593C0949A9D235E2C934B6C5147A0 gpg: Good signature from "Alex Sorokoumov <[email protected]>" [ultimate] ``` Create checksums ``` $ sha512sum otava-0.6.0+incubating-py3-none-any.whl > otava-0.6.0+incubating-py3- none-any.whl.sha512 $ sha512sum otava-0.6.0+incubating-sources.tar.gz > otava-0.6.0+incubating-sources.tar.gz.sha512 $ sha512sum otava-0.6.0+incubating.tar.gz > otava-0.6.0+incubating.tar.gz.sha512 ``` Verify checksums ``` $ ls -la total 448 drwxr-xr-x@ 11 asorokoumov staff 352 Apr 29 23:28 ./ drwxr-xr-x@ 26 asorokoumov staff 832 Apr 29 23:16 ../ -rw-r--r--@ 1 asorokoumov staff 51495 Apr 29 23:16 otava-0.6.0+incubating-py3-none-any.whl -rw-r--r--@ 1 asorokoumov staff 833 Apr 29 23:23 otava-0.6.0+incubating-py3-none-any.whl.asc -rw-r--r--@ 1 asorokoumov staff 170 Apr 29 23:27 otava-0.6.0+incubating-py3-none-any.whl.sha512 -rw-r--r--@ 1 asorokoumov staff 110261 Apr 29 23:24 otava-0.6.0+incubating-sources.tar.gz -rw-r--r--@ 1 asorokoumov staff 833 Apr 29 23:25 otava-0.6.0+incubating-sources.tar.gz.asc -rw-r--r--@ 1 asorokoumov staff 168 Apr 29 23:28 otava-0.6.0+incubating-sources.tar.gz.sha512 -rw-r--r--@ 1 asorokoumov staff 38810 Apr 29 23:16 otava-0.6.0+incubating.tar.gz -rw-r--r--@ 1 asorokoumov staff 833 Apr 29 23:26 otava-0.6.0+incubating.tar.gz.asc -rw-r--r--@ 1 asorokoumov staff 160 Apr 29 23:28 otava-0.6.0+incubating.tar.gz.sha512 $ sha512sum --check otava-0.6.0+incubating.tar.gz.sha512 otava-0.6.0+incubating.tar.gz: OK $ sha512sum --check otava-0.6.0+incubating-py3-none-any.whl.sha512 otava-0.6.0+incubating-py3-none-any.whl: OK $ sha512sum --check otava-0.6.0+incubating-sources.tar.gz.sha512 otava-0.6.0+incubating-sources.tar.gz: OK ``` Publish RC ``` $ cd .. $ mkdir ../otava-dist/0.6.0+incubating-RC3 $ cp dist/* ../otava-dist/0.6.0+incubating-RC3 $ cd ../otava-dist/ $ svn add 0.6.0+incubating-RC3 A 0.6.0+incubating-RC3 A (bin) 0.6.0+incubating-RC3/otava-0.6.0+incubating-py3-none-any.whl A (bin) 0.6.0+incubating-RC3/otava-0.6.0+incubating.tar.gz A (bin) 0.6.0+incubating-RC3/otava-0.6.0+incubating-sources.tar.gz A 0.6.0+incubating-RC3/otava-0.6.0+incubating-py3-none-any.whl.sha512 A 0.6.0+incubating-RC3/otava-0.6.0+incubating.tar.gz.sha512 A 0.6.0+incubating-RC3/otava-0.6.0+incubating-sources.tar.gz.sha512 A 0.6.0+incubating-RC3/otava-0.6.0+incubating.tar.gz.asc A 0.6.0+incubating-RC3/otava-0.6.0+incubating-py3-none-any.whl.asc A 0.6.0+incubating-RC3/otava-0.6.0+incubating-sources.tar.gz.asc $ svn ci -m "[otava] Add 0.6.0+incubating-RC3" Adding 0.6.0+incubating-RC3 Adding (bin) 0.6.0+incubating-RC3/otava-0.6.0+incubating-py3-none-any.whl Adding 0.6.0+incubating-RC3/otava-0.6.0+incubating-py3-none-any.whl.asc Adding 0.6.0+incubating-RC3/otava-0.6.0+incubating-py3-none-any.whl.sha512 Adding (bin) 0.6.0+incubating-RC3/otava-0.6.0+incubating-sources.tar.gz Adding 0.6.0+incubating-RC3/otava-0.6.0+incubating-sources.tar.gz.asc Adding 0.6.0+incubating-RC3/otava-0.6.0+incubating-sources.tar.gz.sha512 Adding (bin) 0.6.0+incubating-RC3/otava-0.6.0+incubating.tar.gz Adding 0.6.0+incubating-RC3/otava-0.6.0+incubating.tar.gz.asc Adding 0.6.0+incubating-RC3/otava-0.6.0+incubating.tar.gz.sha512 Transmitting file data .........done Committing transaction... Committed revision 76576. ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
