You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by Cris Rockwell <cm...@umich.edu> on 2020/10/16 16:24:17 UTC
How to 'spin a release'
Regarding
Konrad Windszus commented on SLING-9648:
----------------------------------------
Someone would need to spin a release. [~cris_rockwell] Do you want to give it a try?
Sure! Haven't released to Maven Central before, so I would like to try. I found a release management doc <https://sling.apache.org/documentation/development/release-management.html> on the Sling website. But as of now, my keys is not included in the linked sling.asc file
So I'm reviewing these docs.
https://infra.apache.org/new-committers-guide.html
https://infra.apache.org/release-signing.html
If has anyone has suggestions or resources that will help me with setup, then hit rely or find me on ASF #Sling
Thanks
Cris
Re: How to 'spin a release'
Posted by Konrad Windszus <ko...@gmx.de>.
Indeed step 4 can only be done by a PMC. Also your other suggestions seem reasonable.
Can you come up with a PR to clarify the steps in https://github.com/apache/sling-site/blob/master/src/main/jbake/content/documentation/development/release-management.md <https://github.com/apache/sling-site/blob/master/src/main/jbake/content/documentation/development/release-management.md>?
Thanks,
Konrad
> On 19. Oct 2020, at 16:30, Cris Rockwell <cm...@umich.edu> wrote:
>
> Hi Konrad and Robert
>
> Thanks for the info. I added my fingerprint to my Apache ID Friday morning. Seems that it could take a few days to update, but my key is now in the list
> https://people.apache.org/keys/group/sling.asc
>
> But my key is not included here
> https://downloads.apache.org/sling/KEYS
>
>
> As far the docs go. I have a two suggestions
>
> Swap step 2 with step 3. Step 2.3 says “you are DONE” but there are more steps. I think it may be important to have the public key uploaded to a key server before updating the Apache ID with the key fingerprint.
>
> Regarding Step 4. I tried updating KEYS, but don’t have access to commit changes. Is it likely that somebody has access to edit KEYS, and also needs to add their own public key? From an on-boarding perspective, I think most new committers won’t be able to edit KEYS. If it's a step that should be performed by another committer, then the docs could reflect that by indicating the role of the person in charge of step #4
>
> Thanks
> Cris
>
>
>> On Oct 19, 2020, at 3:33 AM, Konrad Windszus <ko...@gmx.de> wrote:
>>
>> Hi Cris and Robert,
>>
>> after doing those steps you still need to manually add your key to the keys file as outlined in https://issues.apache.org/jira/browse/SLING-9173 <https://issues.apache.org/jira/browse/SLING-9173><https://issues.apache.org/jira/browse/SLING-9173 <https://issues.apache.org/jira/browse/SLING-9173>>.
>> It is not generated automatically!
>>
>> We still need to update https://sling.apache.org/documentation/development/release-management.html <https://sling.apache.org/documentation/development/release-management.html> <https://sling.apache.org/documentation/development/release-management.html <https://sling.apache.org/documentation/development/release-management.html>> to reflect that.
>>
>> Thanks,
>> Konrad
>>
>>> On 19. Oct 2020, at 09:30, Robert Munteanu <rombert@apache.org <ma...@apache.org>> wrote:
>>>
>>> Hi Cris,
>>>
>>> On Fri, 2020-10-16 at 12:24 -0400, Cris Rockwell wrote:
>>>> Regarding
>>>>
>>>>
>>>> Konrad Windszus commented on SLING-9648:
>>>> ----------------------------------------
>>>> Someone would need to spin a release. [~cris_rockwell] Do you want to
>>>> give it a try?
>>>>
>>>>
>>>> Sure! Haven't released to Maven Central before, so I would like to
>>>> try. I found a release management doc <
>>>> https://sling.apache.org/documentation/development/release-management.html
>>>>> on the Sling website. But as of now, my keys is not included in
>>>> the linked sling.asc file
>>>
>>> Try logging in to https://id.apache.org <https://id.apache.org/> <https://id.apache.org/ <https://id.apache.org/>> . You should see a form with a
>>> field named 'OpenPGP Public Key Primary Fingerprint: '. Fill it in with
>>> the corresponding information and submit. The sling.asc file should be
>>> regenerated, but I'm not sure if it's immediate or needs some time.
>>>
>>> Thanks,
>>> Robert
>
Re: How to 'spin a release'
Posted by Cris Rockwell <cm...@umich.edu>.
Hi Konrad and Robert
Thanks for the info. I added my fingerprint to my Apache ID Friday morning. Seems that it could take a few days to update, but my key is now in the list
https://people.apache.org/keys/group/sling.asc
But my key is not included here
https://downloads.apache.org/sling/KEYS
As far the docs go. I have a two suggestions
Swap step 2 with step 3. Step 2.3 says “you are DONE” but there are more steps. I think it may be important to have the public key uploaded to a key server before updating the Apache ID with the key fingerprint.
Regarding Step 4. I tried updating KEYS, but don’t have access to commit changes. Is it likely that somebody has access to edit KEYS, and also needs to add their own public key? From an on-boarding perspective, I think most new committers won’t be able to edit KEYS. If it's a step that should be performed by another committer, then the docs could reflect that by indicating the role of the person in charge of step #4
Thanks
Cris
> On Oct 19, 2020, at 3:33 AM, Konrad Windszus <ko...@gmx.de> wrote:
>
> Hi Cris and Robert,
>
> after doing those steps you still need to manually add your key to the keys file as outlined in https://issues.apache.org/jira/browse/SLING-9173 <https://issues.apache.org/jira/browse/SLING-9173><https://issues.apache.org/jira/browse/SLING-9173 <https://issues.apache.org/jira/browse/SLING-9173>>.
> It is not generated automatically!
>
> We still need to update https://sling.apache.org/documentation/development/release-management.html <https://sling.apache.org/documentation/development/release-management.html> <https://sling.apache.org/documentation/development/release-management.html <https://sling.apache.org/documentation/development/release-management.html>> to reflect that.
>
> Thanks,
> Konrad
>
>> On 19. Oct 2020, at 09:30, Robert Munteanu <rombert@apache.org <ma...@apache.org>> wrote:
>>
>> Hi Cris,
>>
>> On Fri, 2020-10-16 at 12:24 -0400, Cris Rockwell wrote:
>>> Regarding
>>>
>>>
>>> Konrad Windszus commented on SLING-9648:
>>> ----------------------------------------
>>> Someone would need to spin a release. [~cris_rockwell] Do you want to
>>> give it a try?
>>>
>>>
>>> Sure! Haven't released to Maven Central before, so I would like to
>>> try. I found a release management doc <
>>> https://sling.apache.org/documentation/development/release-management.html
>>>> on the Sling website. But as of now, my keys is not included in
>>> the linked sling.asc file
>>
>> Try logging in to https://id.apache.org <https://id.apache.org/> <https://id.apache.org/ <https://id.apache.org/>> . You should see a form with a
>> field named 'OpenPGP Public Key Primary Fingerprint: '. Fill it in with
>> the corresponding information and submit. The sling.asc file should be
>> regenerated, but I'm not sure if it's immediate or needs some time.
>>
>> Thanks,
>> Robert
Re: How to 'spin a release'
Posted by Konrad Windszus <ko...@gmx.de>.
Hi Cris and Robert,
after doing those steps you still need to manually add your key to the keys file as outlined in https://issues.apache.org/jira/browse/SLING-9173 <https://issues.apache.org/jira/browse/SLING-9173>.
It is not generated automatically!
We still need to update https://sling.apache.org/documentation/development/release-management.html <https://sling.apache.org/documentation/development/release-management.html> to reflect that.
Thanks,
Konrad
> On 19. Oct 2020, at 09:30, Robert Munteanu <ro...@apache.org> wrote:
>
> Hi Cris,
>
> On Fri, 2020-10-16 at 12:24 -0400, Cris Rockwell wrote:
>> Regarding
>>
>>
>> Konrad Windszus commented on SLING-9648:
>> ----------------------------------------
>> Someone would need to spin a release. [~cris_rockwell] Do you want to
>> give it a try?
>>
>>
>> Sure! Haven't released to Maven Central before, so I would like to
>> try. I found a release management doc <
>> https://sling.apache.org/documentation/development/release-management.html
>>> on the Sling website. But as of now, my keys is not included in
>> the linked sling.asc file
>
> Try logging in to https://id.apache.org <https://id.apache.org/> . You should see a form with a
> field named 'OpenPGP Public Key Primary Fingerprint: '. Fill it in with
> the corresponding information and submit. The sling.asc file should be
> regenerated, but I'm not sure if it's immediate or needs some time.
>
> Thanks,
> Robert
Re: How to 'spin a release'
Posted by Robert Munteanu <ro...@apache.org>.
Hi Cris,
On Fri, 2020-10-16 at 12:24 -0400, Cris Rockwell wrote:
> Regarding
>
>
> Konrad Windszus commented on SLING-9648:
> ----------------------------------------
> Someone would need to spin a release. [~cris_rockwell] Do you want to
> give it a try?
>
>
> Sure! Haven't released to Maven Central before, so I would like to
> try. I found a release management doc <
> https://sling.apache.org/documentation/development/release-management.html
> > on the Sling website. But as of now, my keys is not included in
> the linked sling.asc file
Try logging in to https://id.apache.org . You should see a form with a
field named 'OpenPGP Public Key Primary Fingerprint: '. Fill it in with
the corresponding information and submit. The sling.asc file should be
regenerated, but I'm not sure if it's immediate or needs some time.
Thanks,
Robert