+ 1 Binding * verified sigs and hashes * built from source tar and ran tests, also tested a local instance and some custom iterators
Almost forgot to respond this morning. Thanks Keith for the reminder! On Wed, Jul 31, 2024 at 1:52 PM Keith Turner <ke...@deenlo.com> wrote: > +1 binding > > * Ran mvn verify -Psunny on source tar contents > * Verified source tar contents matched 2.13-rc1 tag > * Verified hash and signatures for tar files > * Attempted to build Fluo against the staging repo and ran into this > issue[1] with the accumulo2-maven-plugin and 2.1.3 RC1. Was able to run the > Fluo unit test against the RC1 staging repo but not integration test > because of the accumulo maven plugin issue. > * Noticed there are outstanding updates to the release notes that are in > git but not pushed to the website. Maybe jenkins is not updating the > asf-site branch. > > [1]: https://github.com/apache/accumulo-maven-plugin/issues/12 > > On Mon, Jul 29, 2024 at 2:10 AM Christopher <ctubb...@apache.org> wrote: > > > Accumulo Developers, > > > > Please consider the following candidate for Apache Accumulo 2.1.3. > > > > Git Commit: > > 8f52dd10f7cbfef192c9cc431543619b7072139a > > Branch: > > 2.1.3-rc1 > > > > If this vote passes, a gpg-signed tag will be created using: > > git tag -f -s -m 'Apache Accumulo 2.1.3' rel/2.1.3 \ > > 8f52dd10f7cbfef192c9cc431543619b7072139a > > > > Staging repo: > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1113 > > Source (official release artifact): > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/org/apache/accumulo/accumulo/2.1.3/accumulo-2.1.3-src.tar.gz > > Binary: > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/org/apache/accumulo/accumulo/2.1.3/accumulo-2.1.3-bin.tar.gz > > > > Append ".asc" to download the cryptographic signature for a given > artifact. > > (You can also append ".sha1" or ".md5" instead in order to verify the > > checksums > > generated by Maven to verify the integrity of the Nexus repository > > staging area.) > > > > Signing keys are available at https://www.apache.org/dist/accumulo/KEYS > > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D) > > > > In addition to the tarballs and their signatures, the following checksum > > files will be added to the dist/release SVN area after release: > > accumulo-2.1.3-src.tar.gz.sha512 will contain: > > SHA512 (accumulo-2.1.3-src.tar.gz) = > > > > > d29d61200204501e2593ee6435200847e153e8444cf3d44431575ab257098750b11ad0d99fd3a24f3597a5962d20581697fa32ffc8a84336516e00b8c4400d92 > > accumulo-2.1.3-bin.tar.gz.sha512 will contain: > > SHA512 (accumulo-2.1.3-bin.tar.gz) = > > > > > 1a27a144dc31f55ccc8e081b6c1bc6cc0362a8391838c53c166cb45291ff8f35867fd8e4729aa7b2c540f8b721f8c6953281bf589fc7fe320e4dc4d20b87abc4 > > > > Release notes (in progress) can be found at: > > https://accumulo.apache.org/release/accumulo-2.1.3 > > > > Release testing instructions: > > https://accumulo.apache.org/contributor/verifying-release > > > > Please vote one of: > > [ ] +1 - I have verified and accept... > > [ ] +0 - I have reservations, but not strong enough to vote against... > > [ ] -1 - Because..., I do not accept... > > ... these artifacts as the 2.1.3 release of Apache Accumulo. > > > > This vote will remain open until at least Thu Aug 1 06:30:00 AM UTC > 2024. > > (Thu Aug 1 02:30:00 AM EDT 2024 / Wed Jul 31 11:30:00 PM PDT 2024) > > Voting can continue after this deadline until the release manager > > sends an email ending the vote. > > > > Thanks! > > > > P.S. Hint: download the whole staging repo with > > wget -erobots=off -r -l inf -np -nH \ > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/ > > # note the trailing slash is needed > > >
