Guilaume, what maven do you use to produce+deploy the artifacts ? Just currious because gpg problems have been known with versions like 2.1.x. using a mallicious gpg plugin. Just currious.
On Mon, Nov 23, 2009 at 2:03 PM, Marcel Offermans < marcel.offerm...@luminis.nl> wrote: > On Nov 23, 2009, at 13:50 , Guillaume Nodet wrote: > > > I think we're missing q fez binding votes for this release of gogo ... > > > On Tue, Nov 17, 2009 at 14:16, Guillaume Nodet <gno...@gmail.com> wrote: > >> > > >> Usage: > >> sh check_staged_release.sh 005 /tmp/felix-staging > > I downloaded and ran this script. Is it supposed to work on a Mac, because > I'm getting some errors related to gpg. This is the relevant part of the > output: > > Downloaded: 711,599 bytes in 160 files > > ################################################################################ > CHECK SIGNATURES AND DIGESTS > > ################################################################################ > ./005/.index/nexus-maven-repository-index.gz > gpg: ---- > md5: GOOD > sha1: GOOD > ./005/.index/nexus-maven-repository-index.properties > gpg: ---- > md5: GOOD > sha1: GOOD > ./005/.index/nexus-maven-repository-index.zip > gpg: ---- > md5: GOOD > sha1: GOOD > ./005/.meta/p2-metadata.properties > gpg: ---- > md5: ---- > sha1: ---- > ./005/.meta/repository-metadata.xml > gpg: ---- > md5: ---- > sha1: ---- > ./005/org/apache/felix/gogo/gogo/0.2.2/gogo-0.2.2-project.tar.gz > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > ./005/org/apache/felix/gogo/gogo/0.2.2/gogo-0.2.2-project.zip > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > ./005/org/apache/felix/gogo/gogo/0.2.2/gogo-0.2.2.pom > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > ./005/org/apache/felix/gogo/gogo/maven-metadata.xml > gpg: ---- > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.commands/0.2.2/org.apache.felix.gogo.commands-0.2.2-sources.jar > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.commands/0.2.2/org.apache.felix.gogo.commands-0.2.2.jar > gpg: BAD!!!!!!!! > md5: ---- > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.commands/0.2.2/org.apache.felix.gogo.commands-0.2.2.pom > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.commands/maven-metadata.xml > gpg: ---- > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.console/0.2.2/org.apache.felix.gogo.console-0.2.2-sources.jar > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.console/0.2.2/org.apache.felix.gogo.console-0.2.2.jar > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.console/0.2.2/org.apache.felix.gogo.console-0.2.2.pom > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.console/maven-metadata.xml > gpg: ---- > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.launcher/0.2.2/org.apache.felix.gogo.launcher-0.2.2-sources.jar > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.launcher/0.2.2/org.apache.felix.gogo.launcher-0.2.2.jar > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.launcher/0.2.2/org.apache.felix.gogo.launcher-0.2.2.pom > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.launcher/maven-metadata.xml > gpg: ---- > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.runtime/0.2.2/org.apache.felix.gogo.runtime-0.2.2-sources.jar > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.runtime/0.2.2/org.apache.felix.gogo.runtime-0.2.2.jar > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.runtime/0.2.2/org.apache.felix.gogo.runtime-0.2.2.pom > gpg: BAD!!!!!!!! > md5: GOOD > sha1: GOOD > > ./005/org/apache/felix/gogo/org.apache.felix.gogo.runtime/maven-metadata.xml > gpg: ---- > md5: GOOD > sha1: GOOD > > ################################################################################ > > -- Toni Menzel Independent Software Developer Professional Profile: http://okidokiteam.com t...@okidokiteam.com http://www.ops4j.org - New Energy for OSS Communities - Open Participation Software.
