Re: [VOTE] Release Tobago 3.0.0
+1 2016-12-13 9:49 GMT-05:00 Mike Kienenberger: > - signatures and checksums match > - source builds > - apache rat passes > > +1 > > > > Below are the linux commands I used to verify the release of the > tobago-3.0.0 files: > > = > > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/ > 3.0.0/tobago-3.0.0-source-release.zip > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/ > 3.0.0/tobago-3.0.0-source-release.zip.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/ > 3.0.0/tobago-3.0.0-source-release.zip.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/ > 3.0.0/tobago-3.0.0-source-release.zip.sha1 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.sha1 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.zip > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.sha1 > > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.sha1 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.sha1 > > # check checksums > find . -name '*.md5' -exec cat {} \; -printf ' %f\n' | sed > 's|\.md5$||' | md5sum -c > find . -name '*.sha1' -exec cat {} \; -printf ' %f\n' | sed > 's|\.sha1$||' | sha1sum -c > > # check signatures > wget http://www.apache.org/dist/myfaces/KEYS > gpg --import KEYS > find . -name '*.asc' -exec gpg --verify {} \; > > # build source > mkdir src > cd src > unzip ../tobago-3.0.0-source-release.zip > cd tobago-3.0.0 > mvn install -Pall-modules > > mvn apache-rat:check -Pall-modules > ## Note: DEPENDENCIES needs to be ignored > ## https://issues.apache.org/jira/browse/TOBAGO-1450 > > # To check for all errors, if more than one project is affected > # mvn apache-rat:check -Drat.numUnapprovedLicenses= > # To see details of rat failure, including location of rat report > # mvn -e -X apache-rat:check > > > # verify tobago-assembly-*-dist.tar.gz and tobago-assembly-*-dist.zip > binaries are identical > # verify tobago-example-assembly-*-example.tar.gz and > tobago-example-assembly-*-example.zip binaries are identical > > cd .. > > tar xvf ../tobago-assembly-3.0.0-dist.tar.gz > mv myfaces-tobago-3.0.0/ myfaces-tobago-3.0.0.tar.gz.unpacked >
Re: [VOTE] Release Tobago 3.0.0
- signatures and checksums match - source builds - apache rat passes +1 Below are the linux commands I used to verify the release of the tobago-3.0.0 files: = wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/3.0.0/tobago-3.0.0-source-release.zip wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/3.0.0/tobago-3.0.0-source-release.zip.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/3.0.0/tobago-3.0.0-source-release.zip.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/3.0.0/tobago-3.0.0-source-release.zip.sha1 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.sha1 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.zip wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.sha1 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.sha1 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago-example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.sha1 # check checksums find . -name '*.md5' -exec cat {} \; -printf ' %f\n' | sed 's|\.md5$||' | md5sum -c find . -name '*.sha1' -exec cat {} \; -printf ' %f\n' | sed 's|\.sha1$||' | sha1sum -c # check signatures wget http://www.apache.org/dist/myfaces/KEYS gpg --import KEYS find . -name '*.asc' -exec gpg --verify {} \; # build source mkdir src cd src unzip ../tobago-3.0.0-source-release.zip cd tobago-3.0.0 mvn install -Pall-modules mvn apache-rat:check -Pall-modules ## Note: DEPENDENCIES needs to be ignored ## https://issues.apache.org/jira/browse/TOBAGO-1450 # To check for all errors, if more than one project is affected # mvn apache-rat:check -Drat.numUnapprovedLicenses= # To see details of rat failure, including location of rat report # mvn -e -X apache-rat:check # verify tobago-assembly-*-dist.tar.gz and tobago-assembly-*-dist.zip binaries are identical # verify tobago-example-assembly-*-example.tar.gz and tobago-example-assembly-*-example.zip binaries are identical cd .. tar xvf ../tobago-assembly-3.0.0-dist.tar.gz mv myfaces-tobago-3.0.0/ myfaces-tobago-3.0.0.tar.gz.unpacked unzip ../tobago-assembly-3.0.0-dist.zip mv myfaces-tobago-3.0.0/ myfaces-tobago-3.0.0.zip.unpacked tar xvf ../tobago-example-assembly-3.0.0-example.tar.gz mv myfaces-tobago-3.0.0/ myfaces-tobago-example-3.0.0.tar.gz.unpacked unzip ../tobago-example-assembly-3.0.0-example.zip mv myfaces-tobago-3.0.0/