You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by Jan Høydahl <ja...@cominvent.com> on 2017/01/30 23:23:46 UTC
dist.apache.org - Lucene PGP KEYS files mm
Hi,
I noticed that in the release archives https://archive.apache.org/dist/lucene/ there are
several KEYS files (containing committer’s PGP public keys):
https://archive.apache.org/dist/lucene/KEYS 151109b Tue, 30 Aug 2016 25 keys
https://archive.apache.org/dist/lucene/java/KEYS 128519b Wed, 02 Oct 2013 23 keys
https://archive.apache.org/dist/lucene/solr/KEYS 139586b Tue, 30 Aug 2016 26 keys
https://archive.apache.org/dist/lucene/java/6.4.0/KEYS 224469b Tue, 17 Jan 2017 30 keys
https://archive.apache.org/dist/lucene/solr/6.4.0/KEYS 224469b Tue, 17 Jan 2017 30 keys
Seems kind of random when the various files get updated.
And why do we ever need more than the top /lucene/KEYS file? E.g. the Hadoop project maintains
only one top-level KEYS file http://www.apache.org/dist/hadoop/common/
Another difference in the download site is that http://www.apache.org/dist/lucene/java/
has a README.html displaying below, while http://www.apache.org/dist/lucene/solr/ has a
HEADER.html showing above the list of downloads.
Finally, when can we get rid of /tika, /nutch and /mahout folders (redirects)? They clutter up things :)
--
Jan Høydahl, search solution architect
Cominvent AS - www.cominvent.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org
RE: dist.apache.org - Lucene PGP KEYS files mm
Posted by Uwe Schindler <uw...@thetaphi.de>.
Hi,
> Some historic context: https://issues.apache.org/jira/browse/LUCENE-5143
Oh, I remember!
> Keep in mind that things like the solr ref guide and pylucene releases
> don't do "per-release" KEY files, so completley eliminating those URLs
> would require a change to those process.
>
> on the flip side: see Uwe's comment in that Jira questioning the rationale
> of snapshoting the KEY files per-release anyway, instead of just always
> using a continuously growing, automatically updated, KEYS file using LDAP
> as the source of truth.
I still think this is the best place, if:
- People also keep their historic GPG keys on the LDAP account
- There is a way to link the autogen'ed file from the website and its guaranteed to be there.
I think the Apache Infra Team should change id.apache.org that only adding of keys is possible with self-service. But removing old keys should be impossible for a non-admin or some extra crosschecks. If a key really needs to be deleted, it should happen with human interaction - ensuring it was not used anywhere (at least at Apache).
> I personally have no opinion, but agree the current situation is
> confusing.
:-(
Uwe
> : Date: Tue, 31 Jan 2017 00:23:46 +0100
> : From: Jan Høydahl <ja...@cominvent.com>
> : Reply-To: dev@lucene.apache.org
> : To: dev@lucene.apache.org
> : Subject: dist.apache.org - Lucene PGP KEYS files mm
> :
> : Hi,
> :
> : I noticed that in the release archives
> https://archive.apache.org/dist/lucene/ there are
> : several KEYS files (containing committer’s PGP public keys):
> :
> : https://archive.apache.org/dist/lucene/KEYS 151109b Tue, 30 Aug
> 2016 25 keys
> : https://archive.apache.org/dist/lucene/java/KEYS 128519b Wed, 02
> Oct 2013 23 keys
> : https://archive.apache.org/dist/lucene/solr/KEYS 139586b Tue, 30 Aug
> 2016 26 keys
> : https://archive.apache.org/dist/lucene/java/6.4.0/KEYS 224469b Tue, 17
> Jan 2017 30 keys
> : https://archive.apache.org/dist/lucene/solr/6.4.0/KEYS 224469b Tue, 17
> Jan 2017 30 keys
> :
> : Seems kind of random when the various files get updated.
> :
> : And why do we ever need more than the top /lucene/KEYS file? E.g. the
> Hadoop project maintains
> : only one top-level KEYS file http://www.apache.org/dist/hadoop/common/
> :
> : Another difference in the download site is that
> http://www.apache.org/dist/lucene/java/
> : has a README.html displaying below, while
> http://www.apache.org/dist/lucene/solr/ has a
> : HEADER.html showing above the list of downloads.
> :
> : Finally, when can we get rid of /tika, /nutch and /mahout folders
> (redirects)? They clutter up things :)
> :
> : --
> : Jan Høydahl, search solution architect
> : Cominvent AS - www.cominvent.com
> :
> :
> : ---------------------------------------------------------------------
> : To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
> : For additional commands, e-mail: dev-help@lucene.apache.org
> :
> :
>
> -Hoss
> http://www.lucidworks.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org
Re: dist.apache.org - Lucene PGP KEYS files mm
Posted by Chris Hostetter <ho...@fucit.org>.
Some historic context: https://issues.apache.org/jira/browse/LUCENE-5143
Keep in mind that things like the solr ref guide and pylucene releases
don't do "per-release" KEY files, so completley eliminating those URLs
would require a change to those process.
on the flip side: see Uwe's comment in that Jira questioning the rationale
of snapshoting the KEY files per-release anyway, instead of just always
using a continuously growing, automatically updated, KEYS file using LDAP
as the source of truth.
I personally have no opinion, but agree the current situation is
confusing.
: Date: Tue, 31 Jan 2017 00:23:46 +0100
: From: Jan H�ydahl <ja...@cominvent.com>
: Reply-To: dev@lucene.apache.org
: To: dev@lucene.apache.org
: Subject: dist.apache.org - Lucene PGP KEYS files mm
:
: Hi,
:
: I noticed that in the release archives https://archive.apache.org/dist/lucene/ there are
: several KEYS files (containing committer\u2019s PGP public keys):
:
: https://archive.apache.org/dist/lucene/KEYS 151109b Tue, 30 Aug 2016 25 keys
: https://archive.apache.org/dist/lucene/java/KEYS 128519b Wed, 02 Oct 2013 23 keys
: https://archive.apache.org/dist/lucene/solr/KEYS 139586b Tue, 30 Aug 2016 26 keys
: https://archive.apache.org/dist/lucene/java/6.4.0/KEYS 224469b Tue, 17 Jan 2017 30 keys
: https://archive.apache.org/dist/lucene/solr/6.4.0/KEYS 224469b Tue, 17 Jan 2017 30 keys
:
: Seems kind of random when the various files get updated.
:
: And why do we ever need more than the top /lucene/KEYS file? E.g. the Hadoop project maintains
: only one top-level KEYS file http://www.apache.org/dist/hadoop/common/
:
: Another difference in the download site is that http://www.apache.org/dist/lucene/java/
: has a README.html displaying below, while http://www.apache.org/dist/lucene/solr/ has a
: HEADER.html showing above the list of downloads.
:
: Finally, when can we get rid of /tika, /nutch and /mahout folders (redirects)? They clutter up things :)
:
: --
: Jan H�ydahl, search solution architect
: Cominvent AS - www.cominvent.com
:
:
: ---------------------------------------------------------------------
: To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
: For additional commands, e-mail: dev-help@lucene.apache.org
:
:
-Hoss
http://www.lucidworks.com/