> ING=/tmp/keyring.$$ > gpg2 --keyring $RING --no-default-keyring --import KEYS > gpg2 --keyring $RING --no-default-keyring --verify …
Thanks Sebb, I will try it later. Would you mind to help verify the Release Candidate? Best regards, Jun > On 16 Aug 2018, at 20:39, sebb <seb...@gmail.com> wrote: > > On 16 August 2018 at 12:56, Jun Liu <liu...@apache.org> wrote: >>> Better to get the key from the KEYS file. >> >> I think that would be: >> 1. download and import the KEYS from >> https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYS >> <https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYS> >> 2. gpg2 --verify dubbo-incubating-2.6.2-source-release.zip.asc >> dubbo-incubating-2.6.2-source-release.zip >> >> Is that right? > > Looks OK. > > I use a temporary file as the keyring to ensure that the key is > actually present in the file, e.g. > > RING=/tmp/keyring.$$ > gpg2 --keyring $RING --no-default-keyring --import KEYS > gpg2 --keyring $RING --no-default-keyring --verify ... > >> What is the exact command to specify the key to use when have multiple keys >> locally? > > I don't know if it's possible to specify the key to be used. > > But by starting with an empty keyring one can check that the right key > is in the KEYS file. > >> Best regards, >> Jun >> >>> On 15 Aug 2018, at 20:52, sebb <seb...@gmail.com> wrote: >>> >>> On 15 August 2018 at 03:56, Jun Liu <liu...@apache.org >>> <mailto:liu...@apache.org>> wrote: >>>> Here're some tips of how to verify the RC: >>>> >>>> 1. Check signatures and hashes are good >>>> sha512 dubbo-incubating-${release_version}-bin-release.zip.sha512 >>>> sha512 dubbo-incubating-${release_version}-source-release.zip.sha512 >>>> gpg2 --keyserver pgpkeys.mit.edu <http://pgpkeys.mit.edu/> >>>> --recv-key 208B0AB1D63011C7 >>> >>> Better to get the key from the KEYS file. >>> >>>> gpg2 --verify dubbo-incubating-2.6.2-source-release.zip.asc >>>> dubbo-incubating-2.6.2-source-release.zip >>>> >>>> 2. Unzip dubbo-incubating-${release_version}-source-release.zip to the >>>> default directory and check the following: >>>> • Directory with 'incubating' in name >>>> dubbo-incubating-${release_version}-bin-release >>>> • DISCLAIMER exists >>>> • LICENSE and NOTICE exists and contents are good >>>> • All files and no binary files exist >>>> • All files has standard ASF License header >>>> • Can compile from source >>>> • All unit tests can pass >>>> mvn clean test # This will run all unit tests >>>> mvn clean install -Drat.skip=false -Dcheckstyle.skip=false # >>>> Open rat and style plugin to check if every file meets requirements. >>>> • Release candidates match with corresponding tags, you can find tag >>>> link and hash in vote email. >>>> >>>> 3. Unzip dubbo-incubating-${release_version}-bin-release.zip and check: >>>> * 'incubating' in name >>>> * LICENSE and NOTICE exists and contents are good >>>> >>>> Best regards, >>>> Jun >>>> >>>>> On 12 Aug 2018, at 15:12, Jun Liu <liu...@apache.org> wrote: >>>>> >>>>> Hello All, >>>>> >>>>> This is a call for vote to release Apache Dubbo (Incubating) version >>>>> 2.6.3. >>>>> >>>>> The Apache Dubbo community has voted on and approved a proposal to >>>>> release Apache Dubbo (Incubating) version 2.6.3. >>>>> >>>>> We now kindly request the Incubator PMC members review and vote on this >>>>> incubator release. >>>>> >>>>> Apache Dubbo™ (incubating) is a high-performance, java based, open source >>>>> RPC framework. Dubbo offers three key functionalities, which include >>>>> interface based remote call, fault tolerance & load balancing, and >>>>> automatic service registration & discovery. >>>>> >>>>> Dubbo community vote thread: >>>>> https://lists.apache.org/thread.html/9e692f525dfbd004e98707ecac33ab10d07741500433a24370e64c67@%3Cdev.dubbo.apache.org%3E >>>>> >>>>> Dubbo community vote result thread: >>>>> https://lists.apache.org/thread.html/630d7ed97ca06a341a7c6626c34af52eab42515439f76e0810504533@%3Cdev.dubbo.apache.org%3E >>>>> >>>>> The release candidates: >>>>> https://dist.apache.org/repos/dist/dev/incubator/dubbo/2.6.3 >>>>> >>>>> Git tag for the release: >>>>> https://github.com/apache/incubator-dubbo/tree/dubbo-2.6.3 >>>>> >>>>> Hash for the release tag: >>>>> 22899a4b395411496ebf03c514e7674e8073e0c3 >>>>> >>>>> Release Notes: >>>>> https://github.com/apache/incubator-dubbo/blob/dubbo-2.6.3/CHANGES.md >>>>> >>>>> The artifacts have been signed with Key : 28681CB1, which can be found in >>>>> the keys file: >>>>> https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYS >>>>> >>>>> The vote will be open for at least 72 hours or until necessary number of >>>>> votes are reached. >>>>> >>>>> Please vote accordingly: >>>>> [ ] +1 approve >>>>> [ ] +0 no opinion >>>>> [ ] -1 disapprove with the reason >>>>> >>>>> Thanks. >>>>> Jun Liu, >>>>> The Apache Dubbo (Incubating) Team >>>>> >>>>> >>>>> --------------------------------------------------------------------- >>>>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >>>>> For additional commands, e-mail: general-h...@incubator.apache.org >>>>> >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >>>> <mailto:general-unsubscr...@incubator.apache.org> >>>> For additional commands, e-mail: general-h...@incubator.apache.org >>>> <mailto:general-h...@incubator.apache.org> >>>> >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >>> <mailto:general-unsubscr...@incubator.apache.org> >>> For additional commands, e-mail: general-h...@incubator.apache.org >>> <mailto:general-h...@incubator.apache.org> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org >
