Re: [ALL] links to KEYS file in VOTE threads and download pages

[tison <wa...@gmail.com>]

cc @hulk.website@gmail.com <hu...@gmail.com>

FYI, you can use https://downloads.apache.org/incubator/kvrocks/KEYS as the
link to KEYS.

That file will be synced from
https://dist.apache.org/repos/dist/release/incubator/kvrocks/KEYS, so we
don't place another file under /dev/ folder.

Best,
tison.


sebb <se...@gmail.com> 于2022年7月18日周一 07:34写道：

> Please note, this still applies, but several podlings don't seem to
> have got the message.
>
> Thanks!
>
> On Mon, 22 Nov 2021 at 11:03, sebb <se...@gmail.com> wrote:
> >
> > It is vital that the KEYS file is only referred to using a URL of the
> form
> >
> > https://downloads.apache.org/incubator/<podling>/KEYS [1]
> >
> > This applies to VOTE emails as well as download pages.
> >
> > Why is this?
> >
> > KEYS files must remain available long for as long as a release is
> > still available from the ASF archives.
> >
> > It is also important for the files used in a VOTE to correspond as far
> > as possible with the ones that will be used by downloaders.
> > (Obviously, that is not possible for the artifacts themselves as they
> > cannot be published until after the vote). Furthermore, it is
> > important that the KEYS file remain available after the vote has
> > completed, in case there is a need to check any aspects of the vote.
> >
> > ==
> >
> > If your podling uses a template to create the vote email, please check
> > that it uses the correct URL for the KEYS file, and fix it if not.
> > Also check any developer docs to ensure the correct URL is used.
> >
> > Note: for a podling's first release, it is possible that the relevant
> > directory under https://dist.apache.org/repos/dist/release/incubator/
> > has yet to be created. This will need to be created, and the KEYS file
> > populated, *before* the vote can begin. [It will be needed anyway once
> > the vote succeeds]
> >
> > Thanks,
> > Sebb
> > [1] Some older pages may use
> > https://www.apache.org/dist/incubator/<podling>/KEYS
> > This now redirects to https://downloads.apache.org/incubator/
> <podling>/KEYS
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> For additional commands, e-mail: general-help@incubator.apache.org
>
>

Re: [ALL] links to KEYS file in VOTE threads and download pages

[hulk <hu...@gmail.com>]

Okay, thanks tison.

On Mon, 18 Jul 2022 at 09:30, tison <wa...@gmail.com> wrote:

> cc @hulk.website@gmail.com <hu...@gmail.com>
>
> FYI, you can use https://downloads.apache.org/incubator/kvrocks/KEYS as
> the link to KEYS.
>
> That file will be synced from
> https://dist.apache.org/repos/dist/release/incubator/kvrocks/KEYS, so we
> don't place another file under /dev/ folder.
>
> Best,
> tison.
>
>
> sebb <se...@gmail.com> 于2022年7月18日周一 07:34写道：
>
>> Please note, this still applies, but several podlings don't seem to
>> have got the message.
>>
>> Thanks!
>>
>> On Mon, 22 Nov 2021 at 11:03, sebb <se...@gmail.com> wrote:
>> >
>> > It is vital that the KEYS file is only referred to using a URL of the
>> form
>> >
>> > https://downloads.apache.org/incubator/<podling>/KEYS [1]
>> >
>> > This applies to VOTE emails as well as download pages.
>> >
>> > Why is this?
>> >
>> > KEYS files must remain available long for as long as a release is
>> > still available from the ASF archives.
>> >
>> > It is also important for the files used in a VOTE to correspond as far
>> > as possible with the ones that will be used by downloaders.
>> > (Obviously, that is not possible for the artifacts themselves as they
>> > cannot be published until after the vote). Furthermore, it is
>> > important that the KEYS file remain available after the vote has
>> > completed, in case there is a need to check any aspects of the vote.
>> >
>> > ==
>> >
>> > If your podling uses a template to create the vote email, please check
>> > that it uses the correct URL for the KEYS file, and fix it if not.
>> > Also check any developer docs to ensure the correct URL is used.
>> >
>> > Note: for a podling's first release, it is possible that the relevant
>> > directory under https://dist.apache.org/repos/dist/release/incubator/
>> > has yet to be created. This will need to be created, and the KEYS file
>> > populated, *before* the vote can begin. [It will be needed anyway once
>> > the vote succeeds]
>> >
>> > Thanks,
>> > Sebb
>> > [1] Some older pages may use
>> > https://www.apache.org/dist/incubator/<podling>/KEYS
>> > This now redirects to https://downloads.apache.org/incubator/
>> <podling>/KEYS
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
>> For additional commands, e-mail: general-help@incubator.apache.org
>>
>>

-- 
Best Regards,
- *Hulk Lin*