- checked signatures
- checked hashes
- build from source
- ran examples

The tag for the geode repo differs from the source and binary release archives:

~/working/apache-geode-1.6.0$ bin/gfsh version --full
Build-Date: 2018-04-23 14:04:21 -0400
Build-Id: mikestolz 0
Build-Java-Version: 1.8.0_151
Build-Platform: Mac OS X 10.13.4 x86_64
Product-Name: Apache Geode
Product-Version: 1.6.0
Source-Date: 2018-04-19 18:12:58 -0400
Source-Repository: release/1.6.0
Source-Revision: 5ce726bd7b4f8d2648fd011a807a1bcc624ddfa5
Native version: native code unavailable
Running on: /10.118.20.97, 8 cpu(s), x86_64 Mac OS X 10.13.4 

~/code/incubator-geode (release/1.6.0)$ git tag -v rel/v1.6.0.RC1
object b4ba77f5131018d36b79608ef007dd3cbd761cd9
type commit
tag rel/v1.6.0.RC1
tagger Mike Stolz <mikest...@new-host-5.home> 1524691173 -0400

Release candidate 1 for 1.6.0
gpg: Signature made Wed Apr 25 14:19:33 2018 PDT
gpg:                using RSA key 44820F9CABF4396F
gpg: Good signature from "Mike Stolz <mikest...@apache.org>" [undefined]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 8763 31B4 5A97 E382 D1BD  FB44 4482 0F9C ABF4 396F


Given that the delta is a change to the KEYS file, I think the simplest thing 
is to reset the tag to 5ce726bd7b4f8d2648fd011a807a1bcc624ddfa5 and update the 
VOTE thread.

-1, willing to change that if we can fix the tag.

@Mike, you might want to sign your key and upload it again to avoid the warning.

Anthony


> On Apr 26, 2018, at 11:05 AM, Mike Stolz <mikest...@apache.org> wrote:
> 
> This is the first release candidate for Apache Geode, version 1.6.0.
> Thanks to all the community members for their contributions to this
> release!
> 
> *** Please download, test and vote by Monday, April 30, 1500 hrs US
> Pacific. ***
> 
> It fixes 157 issues. Release notes can be found at:
> https://cwiki.apache.org/confluence/display/GEODE/
> Release+Notes#ReleaseNotes-1.6.0.
> 
> Note that we are voting upon the source tags: rel/v1.6.0.RC1
> https://github.com/apache/geode/tree/rel/v1.6.0.RC1
> https://github.com/apache/geode-examples/tree/rel/v1.6.0.RC1
> 
> Commit ID:
> b4ba77f5131018d36b79608ef007dd3cbd761cd9 (geode)
> 45d174a1280e539108341b286ff79938f9729bc7 (geode-examples)
> 
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/geode/1.6.0.RC1
> 
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachegeode-1041
> 
> 
> 
> Geode's KEYS file containing PGP keys we use to sign the release:
> https://github.com/apache/geode/blob/develop/KEYS
> 
> Release Signed with Fingerprint:
> 
> pub   rsa4096 2018-04-12 [SC] [expires: 2022-04-12]
> 
>     876331B45A97E382D1BDFB4444820F9CABF4396F

Reply via email to