+1

Am 22.03.15 um 10:48 schrieb Bernd Bohmann:
Here is my +1

Regards

Bernd

On Sat, Mar 21, 2015 at 3:19 PM, Mike Kienenberger <mkien...@gmail.com> wrote:
- signatures and checksums match
- source builds
- apache rat passes

+1






Below are the linux commands I used to verify the release of the
tobago-2.0.7 files:

=============================================

wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip.sha1
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.tar.gz
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.tar.gz.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.tar.gz.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.tar.gz.sha1
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.zip
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.zip.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.zip.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-assembly/2.0.7/tobago-assembly-2.0.7-dist.zip.sha1

wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.tar.gz
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.tar.gz.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.tar.gz.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.tar.gz.sha1
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.zip
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.zip.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.zip.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago-example-assembly/2.0.7/tobago-example-assembly-2.0.7-example.zip.sha1

# check checksums
find . -name '*.md5' -exec cat {} \; -printf '  %f\n' | sed
's|\.md5$||' | md5sum -c
find . -name '*.sha1' -exec cat {} \; -printf '  %f\n' | sed
's|\.sha1$||' | sha1sum -c

# check signatures
wget http://www.apache.org/dist/myfaces/KEYS
gpg --import KEYS
find . -name '*.asc' -exec gpg --verify {} \;

# build source
mkdir src
cd src
unzip ../tobago-2.0.7-source-release.zip
cd tobago-2.0.7
mvn install -Pall-modules

mvn apache-rat:check -Pall-modules
## Note: DEPENDENCIES needs to be ignored
## https://issues.apache.org/jira/browse/TOBAGO-1450
####
# To check for all errors, if more than one project is affected
#   mvn apache-rat:check -Drat.numUnapprovedLicenses=9999
# To see details of rat failure, including location of rat report
#   mvn -e -X apache-rat:check


# verify tobago-assembly-*-dist.tar.gz and tobago-assembly-*-dist.zip
binaries are identical
# verify tobago-example-assembly-*-example.tar.gz and
tobago-example-assembly-*-example.zip binaries are identical

tar xvf ../tobago-assembly-2.0.7-dist.tar.gz
mv myfaces-tobago-2.0.7/ myfaces-tobago-2.0.7.tar.gz.unpacked
unzip ../tobago-assembly-2.0.7-dist.zip
mv myfaces-tobago-2.0.7/ myfaces-tobago-2.0.7.zip.unpacked

tar xvf ../tobago-example-assembly-2.0.7-example.tar.gz
mv myfaces-tobago-2.0.7/ myfaces-tobago-example-2.0.7.tar.gz.unpacked
unzip ../tobago-example-assembly-2.0.7-example.zip
mv myfaces-tobago-2.0.7/ myfaces-tobago-example-2.0.7.zip.unpacked

# should be no output
diff -rq myfaces-tobago-2.0.7.*.unpacked
# should only be "are identical" output
diff -srq myfaces-tobago-2.0.7.*.unpacked | grep -v "are identical"

# should be no output
diff -rq myfaces-tobago-example-2.0.7.*.unpacked
# should only be "are identical" output
diff -srq myfaces-tobago-example-2.0.7.*.unpacked | grep -v "are identical"


On Wed, Mar 18, 2015 at 4:48 AM, Udo Schnurpfeil <u...@schnurpfeil.de> wrote:
Hello,

I would like to release Tobago 2.0.7.

For a detail list please consult the release notes:

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310273&version=12329376
The version is available at the staging repository (Nexus).

Staging repository:

https://repository.apache.org/content/repositories/orgapachemyfaces-1046/

The vote is open for 72h.

[ ] +1
[ ] +0
[ ] -1

Regards,

Udo




Reply via email to