amoeba commented on issue #47081:
URL: https://github.com/apache/arrow/issues/47081#issuecomment-3064062388

   Thanks @kou. I may understand provision 3 in 
https://infra.apache.org/release-signing.html#automated-release-signing:
   
   > The release procedure contains a validation step where all artifacts are 
reproduced on [trusted 
hardware](https://www.apache.org/legal/release-policy.html#owned-controlled-hardware)
 before publication to pages intended for end users
   
   This sounds like at least one person would have to run the reproducibility 
check on their own machine to meet that provision. We don't necessarily have to 
make everyone who votes run the check though, so this could be a release 
manager task and/or an optional `TEST_REPRODUCIBLE` (default OFF) variable in 
the verify script.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscr...@arrow.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to