Re: [VOTE] Release Tobago 3.0.0

2016-12-13 Thread Leonardo Uribe
+1

2016-12-13 9:49 GMT-05:00 Mike Kienenberger :

> - signatures and checksums match
> - source builds
> - apache rat passes
>
> +1
>
>
>
> Below are the linux commands I used to verify the release of the
> tobago-3.0.0 files:
>
> =
>
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/
> 3.0.0/tobago-3.0.0-source-release.zip
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/
> 3.0.0/tobago-3.0.0-source-release.zip.asc
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/
> 3.0.0/tobago-3.0.0-source-release.zip.md5
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/
> 3.0.0/tobago-3.0.0-source-release.zip.sha1
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.asc
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.md5
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.sha1
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> assembly/3.0.0/tobago-assembly-3.0.0-dist.zip
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.asc
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.md5
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.sha1
>
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.asc
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.md5
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.sha1
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.asc
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.md5
> wget https://repository.apache.org/content/repositories/
> orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-
> example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.sha1
>
> # check checksums
> find . -name '*.md5' -exec cat {} \; -printf '  %f\n' | sed
> 's|\.md5$||' | md5sum -c
> find . -name '*.sha1' -exec cat {} \; -printf '  %f\n' | sed
> 's|\.sha1$||' | sha1sum -c
>
> # check signatures
> wget http://www.apache.org/dist/myfaces/KEYS
> gpg --import KEYS
> find . -name '*.asc' -exec gpg --verify {} \;
>
> # build source
> mkdir src
> cd src
> unzip ../tobago-3.0.0-source-release.zip
> cd tobago-3.0.0
> mvn install -Pall-modules
>
> mvn apache-rat:check -Pall-modules
> ## Note: DEPENDENCIES needs to be ignored
> ## https://issues.apache.org/jira/browse/TOBAGO-1450
> 
> # To check for all errors, if more than one project is affected
> #   mvn apache-rat:check -Drat.numUnapprovedLicenses=
> # To see details of rat failure, including location of rat report
> #   mvn -e -X apache-rat:check
>
>
> # verify tobago-assembly-*-dist.tar.gz and tobago-assembly-*-dist.zip
> binaries are identical
> # verify tobago-example-assembly-*-example.tar.gz and
> tobago-example-assembly-*-example.zip binaries are identical
>
> cd ..
>
> tar xvf ../tobago-assembly-3.0.0-dist.tar.gz
> mv myfaces-tobago-3.0.0/ myfaces-tobago-3.0.0.tar.gz.unpacked
> 

Re: [VOTE] Release Tobago 3.0.0

2016-12-13 Thread Mike Kienenberger
- signatures and checksums match
- source builds
- apache rat passes

+1



Below are the linux commands I used to verify the release of the
tobago-3.0.0 files:

=

wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/3.0.0/tobago-3.0.0-source-release.zip
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/3.0.0/tobago-3.0.0-source-release.zip.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/3.0.0/tobago-3.0.0-source-release.zip.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/3.0.0/tobago-3.0.0-source-release.zip.sha1
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.sha1
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.zip
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.sha1

wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.sha1
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.asc
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.md5
wget 
https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.sha1

# check checksums
find . -name '*.md5' -exec cat {} \; -printf '  %f\n' | sed
's|\.md5$||' | md5sum -c
find . -name '*.sha1' -exec cat {} \; -printf '  %f\n' | sed
's|\.sha1$||' | sha1sum -c

# check signatures
wget http://www.apache.org/dist/myfaces/KEYS
gpg --import KEYS
find . -name '*.asc' -exec gpg --verify {} \;

# build source
mkdir src
cd src
unzip ../tobago-3.0.0-source-release.zip
cd tobago-3.0.0
mvn install -Pall-modules

mvn apache-rat:check -Pall-modules
## Note: DEPENDENCIES needs to be ignored
## https://issues.apache.org/jira/browse/TOBAGO-1450

# To check for all errors, if more than one project is affected
#   mvn apache-rat:check -Drat.numUnapprovedLicenses=
# To see details of rat failure, including location of rat report
#   mvn -e -X apache-rat:check


# verify tobago-assembly-*-dist.tar.gz and tobago-assembly-*-dist.zip
binaries are identical
# verify tobago-example-assembly-*-example.tar.gz and
tobago-example-assembly-*-example.zip binaries are identical

cd ..

tar xvf ../tobago-assembly-3.0.0-dist.tar.gz
mv myfaces-tobago-3.0.0/ myfaces-tobago-3.0.0.tar.gz.unpacked
unzip ../tobago-assembly-3.0.0-dist.zip
mv myfaces-tobago-3.0.0/ myfaces-tobago-3.0.0.zip.unpacked

tar xvf ../tobago-example-assembly-3.0.0-example.tar.gz
mv myfaces-tobago-3.0.0/ myfaces-tobago-example-3.0.0.tar.gz.unpacked
unzip ../tobago-example-assembly-3.0.0-example.zip
mv myfaces-tobago-3.0.0/