Here is my +1 Regards
Bernd On Sat, Mar 21, 2015 at 3:19 PM, Mike Kienenberger <mkien...@gmail.com> wrote: > - signatures and checksums match > - source builds > - apache rat passes > > +1 > > > > > > > Below are the linux commands I used to verify the release of the > tobago-2.0.7 files: > > ============================================= > > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip.asc > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip.md5 > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip.sha1 > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.tar.gz > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.tar.gz.asc > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.tar.gz.md5 > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.tar.gz.sha1 > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.zip > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.zip.asc > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.zip.md5 > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.zip.sha1 > > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.tar.gz > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.tar.gz.asc > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.tar.gz.md5 > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.tar.gz.sha1 > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.zip > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.zip.asc > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.zip.md5 > wget > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.zip.sha1 > > # check checksums > find . -name '*.md5' -exec cat {} \; -printf ' %f\n' | sed > 's|\.md5$||' | md5sum -c > find . -name '*.sha1' -exec cat {} \; -printf ' %f\n' | sed > 's|\.sha1$||' | sha1sum -c > > # check signatures > wget http://www.apache.org/dist/myfaces/KEYS > gpg --import KEYS > find . -name '*.asc' -exec gpg --verify {} \; > > # build source > mkdir src > cd src > unzip ../tobago-2.0.7-source-release.zip > cd tobago-2.0.7 > mvn install -Pall-modules > > mvn apache-rat:check -Pall-modules > ## Note: DEPENDENCIES needs to be ignored > ## https://issues.apache.org/jira/browse/TOBAGO-1450 > #### > # To check for all errors, if more than one project is affected > # mvn apache-rat:check -Drat.numUnapprovedLicenses=9999 > # To see details of rat failure, including location of rat report > # mvn -e -X apache-rat:check > > > # verify tobago-assembly-*-dist.tar.gz and tobago-assembly-*-dist.zip > binaries are identical > # verify tobago-example-assembly-*-example.tar.gz and > tobago-example-assembly-*-example.zip binaries are identical > > tar xvf ../tobago-assembly-2.0.7-dist.tar.gz > mv myfaces-tobago-2.0.7/ myfaces-tobago-2.0.7.tar.gz.unpacked > unzip ../tobago-assembly-2.0.7-dist.zip > mv myfaces-tobago-2.0.7/ myfaces-tobago-2.0.7.zip.unpacked > > tar xvf ../tobago-example-assembly-2.0.7-example.tar.gz > mv myfaces-tobago-2.0.7/ myfaces-tobago-example-2.0.7.tar.gz.unpacked > unzip ../tobago-example-assembly-2.0.7-example.zip > mv myfaces-tobago-2.0.7/ myfaces-tobago-example-2.0.7.zip.unpacked > > # should be no output > diff -rq myfaces-tobago-2.0.7.*.unpacked > # should only be "are identical" output > diff -srq myfaces-tobago-2.0.7.*.unpacked | grep -v "are identical" > > # should be no output > diff -rq myfaces-tobago-example-2.0.7.*.unpacked > # should only be "are identical" output > diff -srq myfaces-tobago-example-2.0.7.*.unpacked | grep -v "are identical" > > > On Wed, Mar 18, 2015 at 4:48 AM, Udo Schnurpfeil <u...@schnurpfeil.de> wrote: >> Hello, >> >> I would like to release Tobago 2.0.7. >> >> For a detail list please consult the release notes: >> >> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310273&version=12329376 >> The version is available at the staging repository (Nexus). >> >> Staging repository: >> >> https://repository.apache.org/content/repositories/orgapachemyfaces-1046/ >> >> The vote is open for 72h. >> >> [ ] +1 >> [ ] +0 >> [ ] -1 >> >> Regards, >> >> Udo >>