Hi Eric,

Thanks for the comments and pointers!

I tried to improve the situation w.r.t. the resulting maven repository:
https://github.com/apache/netbeans-jackpot30/pull/11

I tried to stage the outcome after this patch, and it seems(?) to pass.

Jan

On Thu, Aug 1, 2019 at 12:05 PM Eric Barboni <[email protected]> wrote:

> Hi Jan,
>  Sorry, I try to write as fast as possible. Having concern for maven
> convenience.
>
>  All artefacts within the build has to be signed or repo will not be sync.
> [1] may help at the
>
>  You should take the repository you propose to
> "apache-netbeans-jackpot-mavenrepo-11.1-bin.zip" unzip it locally
>
>   Do the signing of everything
> find . -name '*.nbm' -exec gpg --armor --output {}.asc --detach-sig {} \;
> find . -name '*.xml' -exec gpg --armor --output {}.asc --detach-sig {} \;
> find . -name '*.pom' -exec gpg --armor --output {}.asc --detach-sig {} \;
> find . -name '*.sha1' -exec gpg --armor --output {}.asc --detach-sig {} \;
> find . -name '*.md5' -exec gpg --armor --output {}.asc --detach-sig {} \;
> find . -name '*.jar' -exec gpg --armor --output {}.asc --detach-sig {} \;
>
> verify
> find . -name '*.asc' -exec gpg --verify {} \;
>
>
> Configure settings.xml with your commiter access
> https://www.apache.org/dev/publishing-maven-artifacts.html#dev-env
>   <servers>
>     <!-- To publish a snapshot of some part of Maven -->
>     <server>
>       <id>apache.snapshots.https</id>
>       <username> <!-- YOUR APACHE LDAP USERNAME --> </username>
>       <password> <!-- YOUR APACHE LDAP PASSWORD (encrypted) --> </password>
>     </server>
>     <!-- To stage a release of some part of Maven -->
>     <server>
>       <id>apache.releases.https</id>
>       <username> <!-- YOUR APACHE LDAP USERNAME --> </username>
>       <password> <!-- YOUR APACHE LDAP PASSWORD (encrypted) --> </password>
>     </server>
>    ...
>   </servers>
>
>
> 20604114d0070e is our netbeans stageprofileid, in order to verify you are
> all set you can try :
> mvn org.sonatype.plugins:nexus-staging-maven-plugin:1.6.7:rc-list-profiles
> –DserverId=apache.snapshots.https –DnexusUrl=https://repository.apache.org
> | grep 'netbeans'
>
> You can then stage:
> mvn
> org.sonatype.plugins:nexus-staging-maven-plugin:1.6.7:deploy-staged-repository
> –DserverId=apache.snapshots.https –DnexusUrl=https://repository.apache.org
> –DstagingProfileId=20604114d0070e
> –DrepositoryDirectory=pathofsignedartefacts
> and it will give you an url for people to test if everything is good.
>
> I'm looking at tool-11.1.pom and this is not containingg licence this may
> break staging
>
> Best Regards
> Eric
>
> [1](
> https://cwiki.apache.org/confluence/display/NETBEANS/Publishing+Apache+NetBeans+maven+artefacts
> )
>
>
>
> -----Message d'origine-----
> De : Jan Lahoda <[email protected]>
> Envoyé : jeudi 1 août 2019 07:30
> À : [email protected]
> Objet : [VOTE] Release Apache Netbeans Standalone Java Hints Tool 11.1
> [vote candidate 1]
>
> Dear all,
>
> I'd like to release the standalone Java Hints tool ("jackpot") based on
> Apache NetBeans 11.1. I tried to resolve most of the questions/issues found
> during the last vote a few months back. Unfortunatelly, I don't know how to
> improve the NOTICE for the convenience binary, which includes NOTICE from
> Apache Lucene and is a quite long (we have the same problem in "normal"
> NetBeans).
>
> The release is here:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans-jackpot/netbeans-jackpot-11.1-vc1/apache-netbeans-jackpot-11.1-vc1.zip
>
> Signature file:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans-jackpot/netbeans-jackpot-11.1-vc1/apache-netbeans-jackpot-11.1-vc1.zip.asc
>
> SHA512:
>
> c39998a357d01f79ef8ebc71b54d787c34b62e7d6faff14ace2b0c8d2502df2860fd201098f6ca99c0e64620ecb2c8d004b715ab15c6065e4d81a1f65a469d0a
>  apache-netbeans-jackpot-11.1-vc1.zip
>
> KEYS file:
>
> https://dist.apache.org/repos/dist/release/netbeans/KEYS
>
> Apache NetBeans Jackpot 3.0 Git Repo tag:
>
> https://github.com/apache/netbeans-jackpot30/releases/tag/netbeans-jackpot-11.1-vc1
>
> Convenience binaries:
> -built standalone tool:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans-jackpot/netbeans-jackpot-11.1-vc1/apache-netbeans-jackpot-11.1-bin-vc1.zip
>
> Its signature file:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans-jackpot/netbeans-jackpot-11.1-vc1/apache-netbeans-jackpot-11.1-bin-vc1.zip.asc
>
> and its SHA512:
>
> 4b633d0ad4e41dfcd7573c80a76873e0ee7e3d51e780c3169f6e0fb24cdfa2f6e3a2eb9aed123fa16d9595dbe9c27ff66c18c478bf7f4e7f122ea212e7eb47ae
>  apache-netbeans-jackpot-11.1-bin-vc1.zip
>
> -there is also a plugin for Maven, a snapshot of the Maven repository,
> containing what would be uploaded there is here:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans-jackpot/netbeans-jackpot-11.1-vc1/apache-netbeans-jackpot-mavenrepo-11.1-bin-vc1.zip
>
> Its signature file:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans-jackpot/netbeans-jackpot-11.1-vc1/apache-netbeans-jackpot-mavenrepo-11.1-bin-vc1.zip.asc
>
> and its SHA512:
>
> 9ed1d453ec202aa61416be91c6155b685382f86a46e707b0a0c5eb8ecb7d8cd3af8b6f32470ec86a83a40c67f7ff45c66a9841d5e798723e7363573a993cffe9
>  apache-netbeans-jackpot-mavenrepo-11.1-bin-vc1.zip
>
> This vote is going to be open at least 72 hours, vote with +1, 0, and -1
> as usual.
>
> Thanks for any feedback!
>
> Jan
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Reply via email to