Does "strongly against" in this case mean "-1" or still "-0" ?
On 2018/04/15 17:24:33, Mike Drob <md...@mdrob.com> wrote: > I am strongly against generating and publishing checksum information after > a vote because that ostensibly means it hasn't been verified and voted on. > > On Sun, Apr 15, 2018 at 12:35 AM, Christopher <ctubb...@apache.org> wrote: > > > Mike, > > > > We use stronger checksums (SHA512) in the SVN[1] area and downloads page[2] > > after a vote passes. In fact, we're one of the only "perfect projects" in > > regards to compliance with this policy[3]. > > > > The Maven staging area doesn't follow all the "SHOULD" statements, but > > that's only because these checksums are automatically generated by > > maven-deploy-plugin, and not under our direct control. However, it still > > follows all the "MUST" statements, so it is still in compliance with the > > cited policy. Unless we're willing to circumvent standard Maven tooling and > > risk breaking things which depend on the conventions established by this > > tooling (which, to be clear, I think would be a really terribly bad idea), > > we simply cannot follow all the "SHOULD" statements for the Maven staging > > area. > > > > [1]: https://www.apache.org/dist/accumulo/ > > [2]: https://accumulo.apache.org/downloads/ > > [3]: https://checker.apache.org/dist/unsummed.html > > > > On Sat, Apr 14, 2018 at 11:13 PM Mike Drob <md...@mdrob.com> wrote: > > > > > -0 > > > > > > please do not publish md5 sums > > > please add missing sha256 sums > > > > > > apache release policy: > > > http://www.apache.org/dev/release-distribution#sigs-and-sums > > > > > > On Sat, Apr 14, 2018 at 11:37 AM, Mike Walch <mwa...@apache.org> wrote: > > > > > > > +1 > > > > > > > > * Verified sha1 & md5 hashes matched > > > > * Verified signatures > > > > * Ran binary tarball locally using Uno > > > > * Ran 'mvn verify' successfully for wikisearch using RC jars > > > > > > > > On Thu, Apr 12, 2018 at 6:21 PM, Christopher <ctubb...@apache.org> > > > wrote: > > > > > > > > > Accumulo Developers, > > > > > > > > > > Please consider the following candidate for Apache Accumulo 1.9.0. > > > > > > > > > > Git Commit: > > > > > bca516000bdb54b1e5582f908e0a525634a120f7 > > > > > Branch: > > > > > 1.9.0-rc1 > > > > > > > > > > If this vote passes, a gpg-signed tag will be created using: > > > > > git tag -f -m 'Apache Accumulo 1.9.0' -s rel/1.9.0 \ > > > > > bca516000bdb54b1e5582f908e0a525634a120f7 > > > > > > > > > > Staging repo: > > > > > > > > > > > > https://repository.apache.org/content/repositories/ > > orgapacheaccumulo-1070 > > > > > Source (official release artifact): > > > > > https://repository.apache.org/content/repositories/orgapache > > > > > > > > > > > > accumulo-1070/org/apache/accumulo/accumulo/1.9.0/ > > accumulo-1.9.0-src.tar.gz > > > > > Binary: > > > > > https://repository.apache.org/content/repositories/orgapache > > > > > > > > > > > > accumulo-1070/org/apache/accumulo/accumulo/1.9.0/ > > accumulo-1.9.0-bin.tar.gz > > > > > (Append ".sha1", ".md5", or ".asc" to download the signature/hash > > for a > > > > > given artifact.) > > > > > > > > > > All artifacts were built and staged with: > > > > > mvn release:prepare && mvn release:perform > > > > > > > > > > Signing keys are available at > > > https://www.apache.org/dist/accumulo/KEYS > > > > > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D) > > > > > > > > > > Release notes (in progress) can be found at: > > > > > https://accumulo.apache.org/release/accumulo-1.9.0/ > > > > > > > > > > Please vote one of: > > > > > [ ] +1 - I have verified and accept... > > > > > [ ] +0 - I have reservations, but not strong enough to vote > > against... > > > > > [ ] -1 - Because..., I do not accept... > > > > > ... these artifacts as the 1.9.0 release of Apache Accumulo. > > > > > > > > > > This vote will remain open until at least Sun Apr 15 22:30:00 UTC > > 2018 > > > > > (Sun Apr 15 18:30:00 EDT 2018 / Sun Apr 15 15:30:00 PDT 2018). > > > > > Voting continues until the release manager sends an email closing the > > > > vote. > > > > > > > > > > Thanks! > > > > > > > > > > P.S. Hint: download the whole staging repo with > > > > > wget -erobots=off -r -l inf -np -nH \ > > > > > > > > > > > > > > > > > https://repository.apache.org/content/repositories/ > > orgapacheaccumulo-1070/ > > > > > # note the trailing slash is needed > > > > > > > > > > > > > > >
