You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@felix.apache.org by Guillaume Nodet <gn...@gmail.com> on 2009/09/07 11:26:56 UTC
Re: KEYS and check_staged_release (Re: [VOTE] Felix framework 2.0.0
and related subprojects releases)
Ok, I've just committed the change, but I'm happy to roll it back if people
prefer.
On Mon, Sep 7, 2009 at 11:24, Felix Meschberger <fm...@gmail.com> wrote:
> Hi,
>
> Guillaume Nodet schrieb:
> > Right that was it, I would suggest adding the following to the script:
> >
> > wget http://www.apache.org/dist/felix/KEYS
> > gpg --import KEYS
>
> While I agree, that this is certainly easy from a use point of view, I
> generally also don't like automated KEY import - in fact I generally
> don't import KEYS from dist but from a key server.
>
> Regards
> Felix
>
> >
> > Anyway, +1 from me
> >
> > On Mon, Sep 7, 2009 at 11:14, Guillaume Nodet <gn...@gmail.com> wrote:
> >
> >> The gpg signatures looks bad from the output of check_staged_release.
> >> Did you release using maven 2.1 ? Or is it just that the script does
> not
> >> import the keys ?
> >>
> >>
> >> On Mon, Sep 7, 2009 at 01:53, Karl Pauls <ka...@gmail.com> wrote:
> >>
> >>> I would like to call a vote on the following subproject releases:
> >>>
> >>> org.osgi.core 1.4.0 *
> >>> org.osgi.compendium 1.4.0 *
> >>> shell 1.4.0
> >>> shell.tui 1.4.0
> >>> bundlerepository 1.4.1
> >>> framework 2.0.0
> >>> main 2.0.0
> >>>
> >>> Staging repository:
> >>> https://repository.apache.org/content/repositories/felix-staging-044//
> >>>
> >>> You can use this UNIX script to download the release and verify the
> >>> signatures:
> >>> http://svn.apache.org/repos/asf/felix/trunk/check_staged_release.sh
> >>>
> >>> Usage:
> >>> sh check_staged_release.sh 44 /tmp/felix-staging
> >>>
> >>> Additionally, a convenience binary release is provided at:
> >>>
> >>> http://people.apache.org/~pauls/2.0.0/<http://people.apache.org/%7Epauls/2.0.0/>
> <http://people.apache.org/%7Epauls/2.0.0/>
> >>>
> >>> Please vote to approve this release:
> >>>
> >>> [ ] +1 Approve the release
> >>> [ ] -1 Veto the release (please provide specific comments)
> >>>
> >>> * The core and compendium subprojects are being released because
> >>> framework depends on them, but they will not be published.
> >>>
> >>
> >>
> >> --
> >> Cheers,
> >> Guillaume Nodet
> >> ------------------------
> >> Blog: http://gnodet.blogspot.com/
> >> ------------------------
> >> Open Source SOA
> >> http://fusesource.com
> >>
> >>
> >>
> >
> >
>
--
Cheers,
Guillaume Nodet
------------------------
Blog: http://gnodet.blogspot.com/
------------------------
Open Source SOA
http://fusesource.com
Re: KEYS and check_staged_release (Re: [VOTE] Felix framework 2.0.0
and related subprojects releases)
Posted by Guillaume Nodet <gn...@gmail.com>.
Yeah, that sounds reasonable. I've left the import but it's now commented.
On Tue, Sep 8, 2009 at 07:48, Carsten Ziegeler <cz...@apache.org> wrote:
> Guillaume Nodet wrote:
> > Ok, I've just committed the change, but I'm happy to roll it back if
> people
> > prefer.
> >
> I would prefer to not have the import in the script. I rather would like
> to have
> full control of what I'm importing - and in this case, you usually need
> to import the relevant keys only once.
>
> Carsten
> --
> Carsten Ziegeler
> cziegeler@apache.org
>
--
Cheers,
Guillaume Nodet
------------------------
Blog: http://gnodet.blogspot.com/
------------------------
Open Source SOA
http://fusesource.com
Re: KEYS and check_staged_release (Re: [VOTE] Felix framework 2.0.0
and related subprojects releases)
Posted by Carsten Ziegeler <cz...@apache.org>.
Guillaume Nodet wrote:
> Ok, I've just committed the change, but I'm happy to roll it back if people
> prefer.
>
I would prefer to not have the import in the script. I rather would like
to have
full control of what I'm importing - and in this case, you usually need
to import the relevant keys only once.
Carsten
--
Carsten Ziegeler
cziegeler@apache.org