+1, with notes attached.

Thanks for this release build, Mick - good work.

Summary of notes:
- Artifact set checks out OK with regards to key sigs and checksums.
- CASSANDRA-14962 is an issue when not using the current deb build method (using new docker method results in different source artifact creation & use). The docker rpm build suffers the same source problem and the src.rpm is significantly larger, since I think it copies all the downloaded maven artifacts in. It's fine for now, though :)
- UNRELEASED deb build

If anyone is interested in some basic quick download allthethings and check 'em, commands and console txt might be interesting. Next step would be to do each package-type install and startup functional testing, but I don't have that time right now :)

Warm regards,
Michael

On 1/30/20 1:46 PM, Mick Semb Wever wrote:
Proposing the test build of Cassandra 4.0-alpha3 for release.

sha1: 5f7c88601c65cdf14ee68387ed68203f2603fc29
Git: 
https://gitbox.apache.org/repos/asf?p=cassandra.git;a=shortlog;h=refs/tags/4.0-alpha3-tentative
Maven Artifacts: 
https://repository.apache.org/content/repositories/orgapachecassandra-1189/org/apache/cassandra/apache-cassandra/4.0-alpha3/

The Source and Build Artifacts, and the Debian and RPM packages are available 
here: https://dist.apache.org/repos/dist/dev/cassandra/4.0-alpha3/

The vote will be open for 72 hours (longer if needed). Everyone who has tested 
the build is invited to vote. Votes by PMC members are considered binding. A 
vote passes if there are at least three binding +1s.

** Please note this is my first time as release manager, and the release 
process has been improved to deal with sha256|512 checksums as well as to use 
the ASF dev dist staging location. So please be extra critical. **


[1]: CHANGES.txt: 
https://gitbox.apache.org/repos/asf?p=cassandra.git;a=blob_plain;f=CHANGES.txt;hb=refs/tags/4.0-alpha3-tentative
[2]: NEWS.txt: 
https://gitbox.apache.org/repos/asf?p=cassandra.git;a=blob_plain;f=NEWS.txt;hb=refs/tags/4.0-alpha3-tentative

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@cassandra.apache.org
For additional commands, e-mail: dev-h...@cassandra.apache.org

- grab all the artifacts
- check asc sigs
- check sha sums
- check rpm sigs
- check deb sha sums
- check deb source
- check deb sigs
- check deb `dch -r`

# that's all I have time for today - no installation/startup testing performed.

----

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ wget -q --mirror -nH --cut-dirs=5 
https://dist.apache.org/repos/dist/dev/cassandra/4.0-alpha3/
mshuler@hana:~/tmp/cassandra-4.0-alpha3$ ls -l
total 267388
-rw-r--r-- 1 mshuler mshuler 48091751 Jan 30 12:25 
apache-cassandra-4.0-alpha3-bin.tar.gz
-rw-r--r-- 1 mshuler mshuler      833 Jan 30 12:25 
apache-cassandra-4.0-alpha3-bin.tar.gz.asc
-rw-r--r-- 1 mshuler mshuler       65 Jan 30 12:25 
apache-cassandra-4.0-alpha3-bin.tar.gz.sha256
-rw-r--r-- 1 mshuler mshuler      129 Jan 30 12:25 
apache-cassandra-4.0-alpha3-bin.tar.gz.sha512
-rw-r--r-- 1 mshuler mshuler 44527007 Jan 30 12:25 
apache-cassandra-4.0-alpha3-src.tar.gz
-rw-r--r-- 1 mshuler mshuler      833 Jan 30 12:25 
apache-cassandra-4.0-alpha3-src.tar.gz.asc
-rw-r--r-- 1 mshuler mshuler       65 Jan 30 12:25 
apache-cassandra-4.0-alpha3-src.tar.gz.sha256
-rw-r--r-- 1 mshuler mshuler      129 Jan 30 12:25 
apache-cassandra-4.0-alpha3-src.tar.gz.sha512
-rw-r--r-- 1 mshuler mshuler 40678884 Jan 30 12:35 
cassandra-4.0~alpha3-1.noarch.rpm
-rw-r--r-- 1 mshuler mshuler 55459595 Jan 30 12:35 
cassandra-4.0~alpha3-1.src.rpm
-rw-r--r-- 1 mshuler mshuler     6396 Jan 30 12:35 
cassandra-tools-4.0~alpha3-1.noarch.rpm
-rw-r--r-- 1 mshuler mshuler     4504 Jan 30 12:28 
cassandra-tools_4.0~alpha3_all.deb
-rw-r--r-- 1 mshuler mshuler     1803 Jan 30 12:28 cassandra_4.0~alpha3.dsc
-rw-r--r-- 1 mshuler mshuler 44347622 Jan 30 12:28 cassandra_4.0~alpha3.tar.gz
-rw-r--r-- 1 mshuler mshuler 40612992 Jan 30 12:28 cassandra_4.0~alpha3_all.deb
-rw-r--r-- 1 mshuler mshuler    12709 Jan 30 12:28 
cassandra_4.0~alpha3_amd64.buildinfo
-rw-r--r-- 1 mshuler mshuler     2752 Jan 30 12:28 
cassandra_4.0~alpha3_amd64.changes
-rw-r--r-- 1 mshuler mshuler     1917 Jan 30 12:35 index.html
-rw-r--r-- 1 mshuler mshuler      165 Jun 18  2019 robots.txt

----

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ gpg --verify 
apache-cassandra-4.0-alpha3-bin.tar.gz.asc 
apache-cassandra-4.0-alpha3-bin.tar.gz
gpg: Signature made Thu 30 Jan 2020 11:38:45 AM CST
gpg:                using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB
gpg: requesting key E91335D77E3E87CB from hkps server 
hkps.pool.sks-keyservers.net
gpg: key E91335D77E3E87CB: public key "Michael Semb Wever 
<m...@thelastpickle.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: please do a --check-trustdb
gpg: Good signature from "Michael Semb Wever <m...@thelastpickle.com>" [unknown]
gpg:                 aka "Michael Semb Wever <m...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: A4C4 65FE A0C5 5256 1A39  2A61 E913 35D7 7E3E 87CB

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ gpg --verify 
apache-cassandra-4.0-alpha3-src.tar.gz.asc 
apache-cassandra-4.0-alpha3-src.tar.gz
gpg: Signature made Thu 30 Jan 2020 11:38:47 AM CST
gpg:                using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB
gpg: please do a --check-trustdb
gpg: Good signature from "Michael Semb Wever <m...@thelastpickle.com>" [unknown]
gpg:                 aka "Michael Semb Wever <m...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: A4C4 65FE A0C5 5256 1A39  2A61 E913 35D7 7E3E 87CB

# A4C465FEA0C552561A392A61E91335D77E3E87CB is, in fact, the new key added (full 
KEYS file could also be imported, first)

----

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ sha256sum -c *.sha256
sha256sum: apache-cassandra-4.0-alpha3-bin.tar.gz.sha256: no properly formatted 
SHA256 checksum lines found
sha256sum: apache-cassandra-4.0-alpha3-src.tar.gz.sha256: no properly formatted 
SHA256 checksum lines found

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ sha512sum -c *.sha512
sha512sum: apache-cassandra-4.0-alpha3-bin.tar.gz.sha512: no properly formatted 
SHA512 checksum lines found
sha512sum: apache-cassandra-4.0-alpha3-src.tar.gz.sha512: no properly formatted 
SHA512 checksum lines found

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ cat *.sha256
28757dde589f70410f9a6a95c39ee7e6cde63440e2b06b91ae6b200614fa364d
b9993de70c926f2e1febcab7b4a97829b490f1150a37df0316259b86b5eb4c2e

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ cat *.sha512
ca179e30797f256b69e5bd3d1c015e09988eb3f5caeec36fb16576dc457319a0820af5b21d13a96ecdfb41fd08c5a1e7ca701523b61e60682bb5566e05f00574
01245f960bfef0f8057dbd637261d083bda17495515a0e5083ba39c4edc057746d464bf202b0b7190a380eab2a7ead1374b21975bff42fde5668e45fddc06116

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ sha256sum 
apache-cassandra-4.0-alpha3-*.tar.gz
28757dde589f70410f9a6a95c39ee7e6cde63440e2b06b91ae6b200614fa364d  
apache-cassandra-4.0-alpha3-bin.tar.gz
b9993de70c926f2e1febcab7b4a97829b490f1150a37df0316259b86b5eb4c2e  
apache-cassandra-4.0-alpha3-src.tar.gz

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ sha512sum 
apache-cassandra-4.0-alpha3-*.tar.gz
ca179e30797f256b69e5bd3d1c015e09988eb3f5caeec36fb16576dc457319a0820af5b21d13a96ecdfb41fd08c5a1e7ca701523b61e60682bb5566e05f00574
  apache-cassandra-4.0-alpha3-bin.tar.gz
01245f960bfef0f8057dbd637261d083bda17495515a0e5083ba39c4edc057746d464bf202b0b7190a380eab2a7ead1374b21975bff42fde5668e45fddc06116
  apache-cassandra-4.0-alpha3-src.tar.gz

# sums check out ok, but sum files are malformed to allow `sha{256,512}sum 
--check` utility

----

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ rpm -Kv *.rpm
cassandra-4.0~alpha3-1.noarch.rpm:
    Header V4 RSA/SHA256 Signature, key ID 7e3e87cb: NOKEY
    Header SHA1 digest: OK
    V4 RSA/SHA256 Signature, key ID 7e3e87cb: NOKEY
    MD5 digest: OK
cassandra-4.0~alpha3-1.src.rpm:
    Header V4 RSA/SHA256 Signature, key ID 7e3e87cb: NOKEY
    Header SHA1 digest: OK
    V4 RSA/SHA256 Signature, key ID 7e3e87cb: NOKEY
    MD5 digest: OK
cassandra-tools-4.0~alpha3-1.noarch.rpm:
    Header V4 RSA/SHA256 Signature, key ID 7e3e87cb: NOKEY
    Header SHA1 digest: OK
    V4 RSA/SHA256 Signature, key ID 7e3e87cb: NOKEY
    MD5 digest: OK

# lgtm (I have not `rpmkeys --import`ed any keys on my Debian machine..)

----

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ grep tar.gz *.{dsc,changes}
cassandra_4.0~alpha3.dsc: 08da67b02408658d4926924d8324cc239d51119f 44347622 
cassandra_4.0~alpha3.tar.gz
cassandra_4.0~alpha3.dsc: 
9bf6324864c40af32f4553f206c11d9b78f4a2e0fb9f39b73607e722270ee251 44347622 
cassandra_4.0~alpha3.tar.gz
cassandra_4.0~alpha3.dsc: 37d60808c2eba4061f0488f8dca1489b 44347622 
cassandra_4.0~alpha3.tar.gz
cassandra_4.0~alpha3_amd64.changes: 08da67b02408658d4926924d8324cc239d51119f 
44347622 cassandra_4.0~alpha3.tar.gz
cassandra_4.0~alpha3_amd64.changes: 
9bf6324864c40af32f4553f206c11d9b78f4a2e0fb9f39b73607e722270ee251 44347622 
cassandra_4.0~alpha3.tar.gz
cassandra_4.0~alpha3_amd64.changes: 37d60808c2eba4061f0488f8dca1489b 44347622 
misc extra cassandra_4.0~alpha3.tar.gz

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ ls -l 
apache-cassandra-4.0-alpha3-src.tar.gz cassandra_4.0~alpha3.tar.gz
-rw-r--r-- 1 mshuler mshuler 44527007 Jan 30 12:25 
apache-cassandra-4.0-alpha3-src.tar.gz
-rw-r--r-- 1 mshuler mshuler 44347622 Jan 30 12:28 cassandra_4.0~alpha3.tar.gz

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ sha256sum 
apache-cassandra-4.0-alpha3-src.tar.gz cassandra_4.0~alpha3.tar.gz
b9993de70c926f2e1febcab7b4a97829b490f1150a37df0316259b86b5eb4c2e  
apache-cassandra-4.0-alpha3-src.tar.gz
9bf6324864c40af32f4553f206c11d9b78f4a2e0fb9f39b73607e722270ee251  
cassandra_4.0~alpha3.tar.gz

# we're using different source artifacts to build debs from, here, and this is 
not a *.orig.tar.gz

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ tar -tzvf 
apache-cassandra-4.0-alpha3-src.tar.gz | head -1
drwxr-xr-x 0/0               0 2020-01-30 11:34 
apache-cassandra-4.0-alpha3-src/.circleci/

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ tar -tzvf cassandra_4.0~alpha3.tar.gz 
| head -1
drwxrwxr-x 0/0               0 2019-10-29 16:16 apache-cassandra-4.0-alpha3-src/

# odd permissions and different timestamps..

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ tar -xzf 
apache-cassandra-4.0-alpha3-src.tar.gz
mshuler@hana:~/tmp/cassandra-4.0-alpha3$ mv apache-cassandra-4.0-alpha3-src/ 
apache-cassandra-4.0-alpha3-src_srctgz

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ tar -xzf cassandra_4.0~alpha3.tar.gz
mshuler@hana:~/tmp/cassandra-4.0-alpha3$ mv apache-cassandra-4.0-alpha3-src/ 
apache-cassandra-4.0-alpha3-src_deborigtgz

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ diff -r 
apache-cassandra-4.0-alpha3-src_srctgz/ 
apache-cassandra-4.0-alpha3-src_deborigtgz/
Only in 
apache-cassandra-4.0-alpha3-src_srctgz/src/resources/org/apache/cassandra: 
config

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ ls -la 
apache-cassandra-4.0-alpha3-src_srctgz/src/resources/org/apache/cassandra/config
total 12
drwxr-xr-x 2 mshuler mshuler 4096 Feb  1 11:15 .
drwxr-xr-x 5 mshuler mshuler 4096 Jan 30 11:35 ..
-rw-r--r-- 1 mshuler mshuler   62 Jan 30 11:35 version.properties

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ cat 
apache-cassandra-4.0-alpha3-src_srctgz/src/resources/org/apache/cassandra/config/version.properties
#Fri, 31 Jan 2020 04:35:08 +1100

CassandraVersion=4.0-alpha3

# ok, then.

----

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ dscverify *.dsc *.changes
cassandra_4.0~alpha3.dsc:
dscverify: cassandra_4.0~alpha3.dsc failed signature check:
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
gpg: Signature made Thu 30 Jan 2020 12:27:19 PM CST
gpg:                using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB
gpg: Can't check signature: No public key
cassandra_4.0~alpha3_amd64.changes:
dscverify: cassandra_4.0~alpha3_amd64.changes failed signature check:
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
gpg: Signature made Thu 30 Jan 2020 12:27:19 PM CST
gpg:                using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB
gpg: Can't check signature: No public key
Validation FAILED!!

# lgtm (I have not `apt-key add`ed key..)

----

mshuler@hana:~/tmp/cassandra-4.0-alpha3$ egrep 'Date:|Changed-By:' *.changes ; 
grep -A3 Changes: *.changes
Date: Tue, 29 Oct 2019 16:16:36 -0500
Changed-By: Michael Shuler <mshu...@apache.org>
Changes:
 cassandra (4.0~alpha3) UNRELEASED; urgency=medium
 .
   * New release

# UNRELEASED version, wrong build date and human (needs a run of `dch -r` and 
commit to be tagged, so these details align properly)

----

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@cassandra.apache.org
For additional commands, e-mail: dev-h...@cassandra.apache.org

Reply via email to