[
https://issues.apache.org/jira/browse/HBASE-15738?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15269551#comment-15269551
]
Andrew Purtell commented on HBASE-15738:
----------------------------------------
I would suggest coming up with something using gpg, since we have to date been
both generating combined sums files with it and signing artifacts.Needing to
use another tool would only be a minor annoyance through, in which case perhaps
md5sum since it will be more common.
> Ensure artifacts in project dist area include required md5 file
> ---------------------------------------------------------------
>
> Key: HBASE-15738
> URL: https://issues.apache.org/jira/browse/HBASE-15738
> Project: HBase
> Issue Type: Bug
> Components: build, community
> Reporter: Sean Busbey
> Assignee: Nick Dimiduk
> Priority: Blocker
> Fix For: 2.0.0, 1.3.0, 1.1.5, 1.2.2, 0.98.20
>
> Attachments: HBASE-15738.v00.patch, md5_and_sha.patch
>
>
> From the 0.98.19RC0 thread:
> [~busbey]
> {quote}
> [1]: ASF policy requires that each file hosted in the project dist
> space have a file with _just_ the MD5 sum in a file named after the
> original with ".md5" as a suffix. (Having an additional file with all
> the checksums is a good practice, IMO.) I brought this up in our last
> round of RCs as well. I don't want to hold up this vote, but I plan to
> start voting -1 on future RCs that don't include md5 files.
> relevant policy:
> http://www.apache.org/dev/release-distribution.html#sigs-and-sums
> {quote}
> [~apurtell]
> {quote}
> Our release documentation (https://hbase.apache.org/book.html#releasing)
> says we should generate sums like so:
> for i in *.tar.gz; do echo $i; gpg --print-mds $i > $i.mds ; done
> The make_rc.sh script also encodes the same. Let's fix.
> {quote}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
