So I asked - the answer I heard back was - invalidate the vote; caution folks to verify that commit id advertised is what is being voted on. svn rm the artifacts from dist.a.o; email root@ to remove the artifacts from archive.a.o, and start working on a new version.
--David On Mon, Nov 3, 2014 at 9:51 AM, David Nalley <da...@gnsa.us> wrote: > So, in short, we didn't verify that $b = $a in the vote. > Unfortunate. Let me ask around. > > --David > > On Mon, Nov 3, 2014 at 7:03 AM, Daan Hoogland <daan.hoogl...@gmail.com> wrote: >> $a ~= d8359211f11b2462c35389b6c80d51df5159ae69 - >> b9620c2cbe7f711082015b2d6fd31efed3ea25d4 >> $b == 8db506b536f3139250d33df571c98c1c3fa83650 >> $c == 8db506b536f3139250d33df571c98c1c3fa83650 >> >> So the tag and the voted id match but the artifacts don't. >> >> On Sun, Nov 2, 2014 at 6:20 PM, David Nalley <da...@gnsa.us> wrote: >>> OK - let me see if I understand what you are saying: >>> >>> $a - is the commit-id of the uploaded artifacts >>> $b - is the commit-id that was in the vote email >>> $c - is the commit-id of the tag in git >>> >>> Which of those three don't match. (When I read your description - a >>> and b match, but c does not) >>> >>> If that's the case, delete the tag, and recreate the tag so that it >>> matches what was in a and b. If that isn't the exact case, we need to >>> figure out where the failure is, and decide how to handle it. >>> >>> --David >>> >>> On Sat, Nov 1, 2014 at 6:24 PM, Daan Hoogland <daan.hoogl...@gmail.com> >>> wrote: >>>> I am talking about a mismatch between the commit-id that the tag >>>> 4.4..1 points to and the artifact that was uploaded. I think they are >>>> functionally the same but the internal version is different. The >>>> artifact is 4.4.1-SNAPSHOT hence probably the root of the release >>>> branch and the commit is the tip where the version strings were >>>> changed to 4.4.1. >>>> >>>> not sure if this relates to your links. I made a bug in the >>>> build_asf.sh and uploaded soething other then the release commit id >>>> >>>> On Sat, Nov 1, 2014 at 10:22 PM, David Nalley <da...@gnsa.us> wrote: >>>>> -private >>>>> >>>>> We are talking about whats in: >>>>> https://dist.apache.org/repos/dist/release/cloudstack/releases/4.4.1/ >>>>> ? >>>>> If so, I am not sure how we arrive at the fact that the release >>>>> artifacts aren't what we voted on. I looked at the commit log for the >>>>> part of the tree and found [1]. I also checked it out, and svn log-ed >>>>> it and get the output in [2]. >>>>> >>>>> So let me step back and ask - how did you determine that what's in >>>>> dist.a.o doesn't match what we voted on? OR -are we talking about >>>>> something else? >>>>> >>>>> --David >>>>> >>>>> [1] http://markmail.org/message/vjoxa6lg7o6dxmsl >>>>> [2] https://paste.apache.org/agtf >>>>> >>>>> >>>>> On Sat, Nov 1, 2014 at 3:12 PM, Daan Hoogland <daan.hoogl...@gmail.com> >>>>> wrote: >>>>>> People, >>>>>> >>>>>> It seems the uploaded artifacts on the release repo of apache does not >>>>>> contain the commit-id of the voted release. I don't know if this can >>>>>> be remedied. I think we should pull it, right? can we replace it by >>>>>> artifacts that do contain the right version? Or should we have a new >>>>>> version? >>>>>> >>>>>> thanks, >>>>>> -- >>>>>> Daan >>>> >>>> >>>> >>>> -- >>>> Daan >> >> >> >> -- >> Daan