You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@onami.apache.org by er...@apache.org on 2013/01/24 17:36:56 UTC

svn commit: r1438067 - /incubator/onami/site/committers/release-howto.html

Author: eric
Date: Thu Jan 24 16:36:56 2013
New Revision: 1438067

URL: http://svn.apache.org/viewvc?rev=1438067&view=rev
Log:
Publish more info in the doc on how to check a release

Modified:
    incubator/onami/site/committers/release-howto.html

Modified: incubator/onami/site/committers/release-howto.html
URL: http://svn.apache.org/viewvc/incubator/onami/site/committers/release-howto.html?rev=1438067&r1=1438066&r2=1438067&view=diff
==============================================================================
--- incubator/onami/site/committers/release-howto.html (original)
+++ incubator/onami/site/committers/release-howto.html Thu Jan 24 16:36:56 2013
@@ -1,6 +1,6 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at Jan 16, 2013
+ | Generated by Apache Maven Doxia at Jan 24, 2013
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
@@ -8,7 +8,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="author" content="Apache Onami Documentation Team" />
-    <meta name="Date-Revision-yyyymmdd" content="20130116" />
+    <meta name="Date-Revision-yyyymmdd" content="20130124" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Apache Onami - 
     Release HowTo</title>
@@ -240,7 +240,7 @@
         <ul class="breadcrumb">
                 
                     
-                  <li id="publishDate">Last Published: 16 January 2013</li>
+                  <li id="publishDate">Last Published: 24 January 2013</li>
                       
                 
                     
@@ -271,7 +271,9 @@
 
   
     <div class="section"><h2>HowTo Release Apache Onami<a name="HowTo_Release_Apache_Onami"></a></h2>
-      <p>This short guide is for volunteers that intend to cover the role of Release Manager</p>
+      <p>This short guide is for volunteers that intend to cover the role of Release Manager. It also 
+      contains a sections for voters with <a href="#Recommended_steps_before_casting_a_vote">recommended 
+      steps before casting a vote</a>.</p>
     </div>
 
     <div class="section"><h2>Prerequisites<a name="Prerequisites"></a></h2>
@@ -588,6 +590,81 @@ Have Fun,
         <li>Spin another release attempt!</li>
       </ol>
     </div>
+
+    <div class="section"><h2>Recommended steps before casting a vote<a name="Recommended_steps_before_casting_a_vote"></a></h2>
+    
+      <p>Making releases is a serious job at the ASF. And a time-eater.</p>
+      <p>The following gives you some ideas to check a release and cast your vote (as written by Christian Grobmeier on the Onami dev mailing list).</p>
+      <ol style="list-style-type: decimal">
+      
+        <li>Check out the source tag and test/package it.</li>
+        <li>Then take a look at the site to check the branding requirements (read more on <a class="externalLink" href="http://www.apache.org/foundation/marks/pmcs">http://www.apache.org/foundation/marks/pmcs</a>).</li>
+        <li>The RAT plugin outputs license header issues (read more on <a class="externalLink" href="http://creadur.apache.org/rat/apache-rat-plugin/index.html">http://creadur.apache.org/rat/apache-rat-plugin/index.html</a>).</li>
+        <li>This command helps to download artifacts from nexus to check them: <tt>wget -e robots=off --cut-dirs=3 -r -p -np --no-check-certificate https://repository.apache.org/content/repositories/orgapacheonami-149/org/apache/onami/org.apache.onami.test/</tt></li>
+        <li>Then we need to take care our code signing keys are in the KEYS file. MD5 checking i do with a scripts such as  <tt>[1]</tt> or  <tt>[2]</tt></li>
+        <li>Also try to open artifacts (avoid zip problems and such).</li>
+      </ol>
+
+<p>[1] <a class="externalLink" href="https://gist.github.com/3504123">https://gist.github.com/3504123</a> from our mate Ivan (over from logging land)</p>
+
+<div class="source"><pre class="prettyprint">from os.path import join, splitext, basename
+import os
+import sys
+import hashlib
+
+def file_get_contents(path):
+    with open(path, 'rb') as file:
+        return file.read()
+
+for root, dirs, files in os.walk('.'):
+    for file in files:
+        file = join(root, file)
+        name, ext = splitext(file)
+        
+        if ext == '.md5':
+            file_contents = file_get_contents(name)
+            md5_given = file_get_contents(file)
+            md5_actual = hashlib.md5(file_contents).hexdigest()
+            
+            if (md5_given == md5_actual):
+                print &quot;%s md5 OK&quot; % basename(name)
+            else:
+                print &quot;\nERROR: md5 mismatch\nfile      : %s\ncalculated: %s\ngiven     : %s\n&quot; % (name, md5_actual, md5_given)
+
+        if ext == '.sha1':
+            file_contents = file_get_contents(name)
+            sha1_given = file_get_contents(file)
+            sha1_actual = hashlib.sha1(file_contents).hexdigest()
+            
+            if (sha1_given == sha1_actual):
+                print &quot;%s sha1 OK&quot; % basename(name)
+            else:
+                print &quot;\nERROR: sha1 mismatch\nfile      : %s\ncalculated: %s\ngiven     : %s\n&quot; % (name, sha1_actual, sha1_given)</pre></div>
+
+<p>[2] <a class="externalLink" href="http://www.grobmeier.de/checking-md5-and-signatures-with-a-shell-script-29062011.html">http://www.grobmeier.de/checking-md5-and-signatures-with-a-shell-script-29062011.html</a></p>
+
+<div class="source"><pre class="prettyprint">#!/bin/bash
+ 
+file1=`md5 -q $1`
+file2=`cut -d* -f1 $1.md5`
+ 
+echo &quot;Checking file: $1&quot;
+echo &quot;Using MD5 file: $1.md5&quot;
+echo $file1
+echo $file2
+ 
+if [ $file1 != $file2 ]
+then
+    echo &quot;md5 sums mismatch&quot;
+else
+    echo &quot;checksums OK&quot;
+fi
+ 
+echo &quot;GPG verification output&quot;
+gpg --verify $1.asc $1</pre></div>
+
+    </div>
+    
   
 
 
@@ -624,4 +701,4 @@ Have Fun,
         </div>
     </footer>
   </body>
-</html>
\ No newline at end of file
+</html>