Hi all,

well we setup things in PLC4X the same way most projects have them … so for 
PLC4X we stage releases here:
https://dist.apache.org/repos/dist/dev/plc4x/

and as soon as they are released, they are SVN-Moved here:
https://dist.apache.org/repos/dist/release/plc4x

This then automatically makes all the mirror syncing of Apache make the 
artifacts available here:
https://downloads.apache.org/plc4x/
All this SVN staging stuff is manual stuff … for PLC4X too, the release:perform 
uploads the source bundles to Nexus, but we don’t vote on that.
We vote on the stuff that’s in SVN.

Chris


Von: Andrew Musselman <[email protected]>
Datum: Dienstag, 30. Juni 2020 um 16:57
An: Mahout Dev List <[email protected]>, Christofer Dutz 
<[email protected]>
Betreff: Re: RC1 for 14.1

(1) We've always done it through Nexus, not married to the approach
(2) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2109
(3) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2110
(4) Also https://issues.apache.org/jira/browse/MAHOUT-2110
(5) @Christofer Dutz<mailto:[email protected]> where are KEYS normally 
kept?

On Tue, Jun 30, 2020 at 5:47 AM Trevor Grant 
<[email protected]<mailto:[email protected]>> wrote:
1. Interesting on the Nexux- who knows who set that up- what are the
pro/cons of nexus v SVN?
2. make sure this gets added to docs
3. let's make a jira for this.
4. just drop them then.
5. https://github.com/apache/mahout/blob/trunk/distribution/KEYS



On Tue, Jun 30, 2020 at 2:42 AM Christofer Dutz 
<[email protected]<mailto:[email protected]>>
wrote:

> Hi folks,
>
> some things I noticed:
>
> 1) You're using the Nexus Staging Repo ... I know most Apache projects use
> the apache SVN for officially staging the release
> 2) The source-repo is missing the RELEASE_NOTES which usually goes
> alongside the source bundle.
> 3) (this might be the most serious issue) you are using SHA1 hashes and
> Apache wants us to use SHA512 hashes (The build does provide these, but
> doesn't automatically deploy them) (
> https://infra.apache.org/release-distribution.html)
> 4) MD5 are also considered deprecated
> 5) Where's your KEYS file? I need that to validate the signatures.
>
> Chris
>
>
>
> Am 30.06.20, 07:11 schrieb "Andrew Musselman" 
> <[email protected]<mailto:[email protected]>>:
>
>     Thanks to some great work by Chris Dutz, RC1 for 14.1 release is out!
>     Please go try it out, check signatures and checksums, etc.
>
>     Binaries:
>
> https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/apache-mahout-distribution/14.1/
>
>     Source:
>
> https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/mahout/14.1/
>
>     Best
>     Andrew
>
>

Reply via email to