Yeah, I think after voting we add the artifacts to SVN by hand. Happy to
discuss, what are the advantages of the way you're doing it in PLC4X?

On Tue, Jun 30, 2020 at 8:08 AM Christofer Dutz <christofer.d...@c-ware.de>
wrote:

> Hi all,
>
>
>
> well we setup things in PLC4X the same way most projects have them … so
> for PLC4X we stage releases here:
>
> https://dist.apache.org/repos/dist/dev/plc4x/
>
>
>
> and as soon as they are released, they are SVN-Moved here:
>
> https://dist.apache.org/repos/dist/release/plc4x
>
>
>
> This then automatically makes all the mirror syncing of Apache make the
> artifacts available here:
>
> https://downloads.apache.org/plc4x/
>
> All this SVN staging stuff is manual stuff … for PLC4X too, the
> release:perform uploads the source bundles to Nexus, but we don’t vote on
> that.
>
> We vote on the stuff that’s in SVN.
>
>
>
> Chris
>
>
>
>
>
> *Von: *Andrew Musselman <andrew.mussel...@gmail.com>
> *Datum: *Dienstag, 30. Juni 2020 um 16:57
> *An: *Mahout Dev List <dev@mahout.apache.org>, Christofer Dutz <
> christofer.d...@c-ware.de>
> *Betreff: *Re: RC1 for 14.1
>
>
>
> (1) We've always done it through Nexus, not married to the approach
>
> (2) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2109
>
> (3) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2110
>
> (4) Also https://issues.apache.org/jira/browse/MAHOUT-2110
>
> (5) @Christofer Dutz <christofer.d...@c-ware.de> where are KEYS normally
> kept?
>
>
>
> On Tue, Jun 30, 2020 at 5:47 AM Trevor Grant <trevor.d.gr...@gmail.com>
> wrote:
>
> 1. Interesting on the Nexux- who knows who set that up- what are the
> pro/cons of nexus v SVN?
> 2. make sure this gets added to docs
> 3. let's make a jira for this.
> 4. just drop them then.
> 5. https://github.com/apache/mahout/blob/trunk/distribution/KEYS
>
>
>
> On Tue, Jun 30, 2020 at 2:42 AM Christofer Dutz <christofer.d...@c-ware.de
> >
> wrote:
>
> > Hi folks,
> >
> > some things I noticed:
> >
> > 1) You're using the Nexus Staging Repo ... I know most Apache projects
> use
> > the apache SVN for officially staging the release
> > 2) The source-repo is missing the RELEASE_NOTES which usually goes
> > alongside the source bundle.
> > 3) (this might be the most serious issue) you are using SHA1 hashes and
> > Apache wants us to use SHA512 hashes (The build does provide these, but
> > doesn't automatically deploy them) (
> > https://infra.apache.org/release-distribution.html)
> > 4) MD5 are also considered deprecated
> > 5) Where's your KEYS file? I need that to validate the signatures.
> >
> > Chris
> >
> >
> >
> > Am 30.06.20, 07:11 schrieb "Andrew Musselman" <a...@apache.org>:
> >
> >     Thanks to some great work by Chris Dutz, RC1 for 14.1 release is out!
> >     Please go try it out, check signatures and checksums, etc.
> >
> >     Binaries:
> >
> >
> https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/apache-mahout-distribution/14.1/
> >
> >     Source:
> >
> >
> https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/mahout/14.1/
> >
> >     Best
> >     Andrew
> >
> >
>
>

Reply via email to