Re: how to use hashes on c.a.o?

2013-10-24 Thread Darren Shepherd
> Is there a reason not to verify authenticity and validity of the > tarball with the gpg sig? Nope, just laziness. Darren

Re: how to use hashes on c.a.o?

2013-10-24 Thread Chip Childers
Yeah, we can make this change IMO. Darren, note that my sungard.com address no longer finds me. Please use my a.o or gmail.c address. ;) > On Oct 24, 2013, at 5:43 PM, Darren Shepherd > wrote: > > Chip, > > Do you care if we switch to GNU coreutils format for the hashes? The > hash value i

Re: how to use hashes on c.a.o?

2013-10-24 Thread David Nalley
On Thu, Oct 24, 2013 at 6:12 PM, Darren Shepherd wrote: > I ran into the issue while trying to write scripts to get CloudStack > in docker. Here's my hack-tastic work around > > HASH=$(echo $(wget -O - -q > http://www.apache.org/dist/cloudstack/releases/4.2.0/apache-cloudstack-4.2.0-src.tar.bz2.s

Re: how to use hashes on c.a.o?

2013-10-24 Thread David Nalley
On Thu, Oct 24, 2013 at 5:43 PM, Darren Shepherd wrote: > Chip, > > Do you care if we switch to GNU coreutils format for the hashes? The > hash value is the same it will just be in the format like > > file.tbz2 *12b12341b1234b1234b1b2341b234b > > And then you just run "sha512sum -c " > > Darren >

Re: how to use hashes on c.a.o?

2013-10-24 Thread Darren Shepherd
I ran into the issue while trying to write scripts to get CloudStack in docker. Here's my hack-tastic work around HASH=$(echo $(wget -O - -q http://www.apache.org/dist/cloudstack/releases/4.2.0/apache-cloudstack-4.2.0-src.tar.bz2.sha |\ cut -f2 -d: ) | sed 's/ //g' | tr '[:upper:

Re: how to use hashes on c.a.o?

2013-10-24 Thread Darren Shepherd
Chip, Do you care if we switch to GNU coreutils format for the hashes? The hash value is the same it will just be in the format like file.tbz2 *12b12341b1234b1234b1b2341b234b And then you just run "sha512sum -c " Darren On Thu, Oct 24, 2013 at 2:34 PM, John Kinsella wrote: > Instructions for

Re: how to use hashes on c.a.o?

2013-10-24 Thread John Kinsella
Instructions for testing the hash are in the release test page [1]. It is also documented in the install guide. It is the way it is I believe because Chip took the release build script from CouchDB, as mentioned in the release build page. 1: https://cwiki.apache.org/confluence/display/CLOUDSTAC

Re: how to use hashes on c.a.o?

2013-10-24 Thread Darren Shepherd
But how does one validate it? I just wrote a dumb script to concatenation, remove whitespace, lowercase and then pass to "sha512sum -c." I've never seen anyone provide SHAs in that format. I wouldn't expect many people to know how to use them. Why can't we use the good old GNU coreutils style?

Re: how to use hashes on c.a.o?

2013-10-23 Thread John Kinsella
This is the output of gpg -v --print-md SHA512, generated as part of the release procedure [1] by tools/build/build_asf.sh 1: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+Procedure On Oct 17, 2013, at 7:56 PM, Darren Shepherd wrote: > The hashes that are on c.a.o for the re

how to use hashes on c.a.o?

2013-10-17 Thread Darren Shepherd
The hashes that are on c.a.o for the releases have a format like http://www.apache.org/dist/cloudstack/releases/4.2.0/apache-cloudstack-4.2.0-src.tar.bz2.sha apache-cloudstack-4.2.0-src.tar.bz2: CC487DF3 7E7B6800 F9DC05A3 5B72DEFD 684E0094 F1666F57 5D694916 CF