FYI I wrote this bash script to help with checking signatures. It could be used for other binaries as well. https://github.com/milleruntime/scripts/blob/master/verify-sig
On Sun, Aug 4, 2019 at 5:31 PM Christopher <[email protected]> wrote: > More tasks complete: > > closed the 2.0.0 project board in GitHub > created a new 2.0.1 project board > updated accumulo-examples and accumulo-testing to use 2.0.0 > uploaded the 2.0.0 javadocs to the website > > Created a PR for website updates: > https://github.com/apache/accumulo-website/pull/189 > > On Thu, Aug 1, 2019 at 8:40 PM Christopher <[email protected]> wrote: > > > It's getting late for me. I've completed some release tasks. I can finish > > the rest tomorrow: > > > > I completed: > > merged in approved rc2-next branch to 2.0 and merged forward > > created signed git tag for rel/2.0.0 > > cleaned up rc branches in git > > uploaded release artifacts to SVN/mirrors > > updated reporter.apache.org with release info > > released the Maven staging repository for rc2 > > deleted old staging repositories > > > > Most of what's left is website updates, which can be done tomorrow after > > the mirrors sync up. > > > > On Thu, Aug 1, 2019 at 8:12 PM Christopher <[email protected]> wrote: > > > >> This vote passes with 4 binding +1s (mmiller, kturner, jmark99, > >> ctubbsii), 2 non-binding +1s (Holly Keebler, Jeffrey Manno), and no > >> other votes. > >> > >> Accumulo 2.0.0 is officially approved for release by the PMC! There's > >> still more to do, of course, and I will begin stepping through those > >> release tasks shortly. In the meantime, please feel free look over the > >> release notes to ensure they cover everything they should. > >> > >> This release has been at least 3 years in the making... so this is > >> pretty exciting! I want to especially thank those contributors who > >> aren't PMC members who contributed to, tested, and voted on this > >> release candidate. Your contributions are appreciated! > >> > >> Thanks all, > >> > >> Christopher > >> 😸 > >> > >> On Thu, Aug 1, 2019 at 7:58 PM Christopher <[email protected]> wrote: > >> > > >> > +1 from me > >> > > >> > * I started up an instance in fluo-uno > >> > * I verified sigs and checksums > >> > * Javadoc and Source jars are present > >> > * Verified lib directory contains same jars in staging repo > >> > * Verified git commit matches MANIFEST.MF contents and its checkout > >> > matches source tarball contents > >> > * Verified all ITs pass on Java 11 > >> > * I performed bulk import testing and some small CI builds on fluo-uno > >> > to my satisfaction between rc1 and rc2, just to ensure basic > >> > functionality (and, in the case of the bulk tests, to triage some of > >> > the issues that were fixed between rc1 and rc2) > >> > > >> > These are things I'd prefer be different, but I don't think should > >> > hold the release: > >> > I think we can remove accumulo-test-*.jar from future builds (See > >> > https://github.com/apache/accumulo/issues/1305) > >> > I think we should simplify the way we build and package the source > >> > tarball (See https://github.com/apache/accumulo/issues/1306) > >> > > >> > On Thu, Aug 1, 2019 at 3:20 PM Christopher <[email protected]> > wrote: > >> > > > >> > > I'm going to assume this was supposed to be "+1", as in "I am in > favor > >> > > of", rather than "+!", as in one of > >> > > https://www.urbandictionary.com/define.php?term=%3A%21 :) > >> > > > >> > > On Thu, Aug 1, 2019 at 3:09 PM Owens, Mark <[email protected]> > >> wrote: > >> > > > > >> > > > +! > >> > > > > >> > > > Verified hashes > >> > > > Successfully ran unit tests > >> > > > Successfully ran sunny tests > >> > > > Built from source and installed via Fluo. > >> > > > Exercised standard operations via shell. > >> > > > > >> > > > > >> > > > -----Original Message----- > >> > > > From: Christopher <[email protected]> > >> > > > Sent: Monday, July 29, 2019 4:10 PM > >> > > > To: accumulo-dev <[email protected]> > >> > > > Subject: [VOTE] Apache Accumulo 2.0.0-rc2 > >> > > > > >> > > > Accumulo Developers, > >> > > > > >> > > > Please consider the following candidate for Apache Accumulo 2.0.0. > >> > > > Changes since rc1: git log 4160067813..5a6481f7c1 > >> > > > > >> > > > Git Commit: > >> > > > 0b34e30c34b7c31ebb84ca6b3b686c1b3e7b19af > >> > > > Branch: > >> > > > 2.0.0-rc2 > >> > > > > >> > > > If this vote passes, a gpg-signed tag will be created using: > >> > > > git tag -f -m 'Apache Accumulo 2.0.0' -s rel/2.0.0 \ > >> > > > 0b34e30c34b7c31ebb84ca6b3b686c1b3e7b19af > >> > > > > >> > > > Staging repo: > >> > https://repository.apache.org/content/repositories/orgapacheaccumulo-1081 > >> > > > Source (official release artifact): > >> > > > > >> > https://repository.apache.org/content/repositories/orgapacheaccumulo-1081/org/apache/accumulo/accumulo/2.0.0/accumulo-2.0.0-src.tar.gz > >> > > > Binary: > >> > https://repository.apache.org/content/repositories/orgapacheaccumulo-1081/org/apache/accumulo/accumulo/2.0.0/accumulo-2.0.0-bin.tar.gz > >> > > > > >> > > > Append ".asc" to download the cryptographic signature for a given > >> artifact. > >> > > > (You can also append ".sha1" or ".md5" instead in order to verify > >> the checksums generated by Maven to verify the integrity of the Nexus > >> repository staging area.) > >> > > > > >> > > > Signing keys are available at > >> https://www.apache.org/dist/accumulo/KEYS > >> > > > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D) > >> > > > > >> > > > In addition to the tarballs and their signatures, the following > >> checksum files will be added to the dist/release SVN area after release: > >> > > > accumulo-2.0.0-src.tar.gz.sha512 will contain: > >> > > > SHA512 (accumulo-2.0.0-src.tar.gz) = > >> > > > > >> > fafaeda4abb440ecef73665c5ceff8af7abb7497affa4f5c45234462b18160f2e78f392e3775c419bfd579b75cd27e5de60838e58fe7f78e37265daad983f721 > >> > > > accumulo-2.0.0-bin.tar.gz.sha512 will contain: > >> > > > SHA512 (accumulo-2.0.0-bin.tar.gz) = > >> > > > > >> > 1e2b822e0fd6ba5293b09203eb0c5cc230e9f111361634b4d5665b0ddd2b28f42d76699cb08aaeff9b3242efd5fe369bfc871a7dc361e935980889bcb7b4568f > >> > > > > >> > > > Release notes (in progress) can be found at: > >> > > > https://accumulo.apache.org/release/accumulo-2.0.0/ > >> > > > > >> > > > Release testing instructions: > >> > > > https://accumulo.apache.org/contributor/verifying-release > >> > > > > >> > > > Please vote one of: > >> > > > [ ] +1 - I have verified and accept... > >> > > > [ ] +0 - I have reservations, but not strong enough to vote > >> against... > >> > > > [ ] -1 - Because..., I do not accept... > >> > > > ... these artifacts as the 2.0.0 release of Apache Accumulo. > >> > > > > >> > > > This vote will remain open until at least Thu 01 Aug 2019 08:30:00 > >> PM UTC. > >> > > > (Thu 01 Aug 2019 04:30:00 PM EDT / Thu 01 Aug 2019 01:30:00 PM > PDT) > >> Voting can continue after this deadline until the release manager sends > an > >> email ending the vote. > >> > > > > >> > > > Thanks! > >> > > > > >> > > > P.S. Hint: download the whole staging repo with > >> > > > wget -erobots=off -r -l inf -np -nH \ > >> > > > > >> > https://repository.apache.org/content/repositories/orgapacheaccumulo-1081/ > >> > > > # note the trailing slash is needed > >> > > >
