svn commit: r1653103 - /incubator/nifi/site/trunk/content/development/release-guide.md

[jo...@apache.org]

Author: joewitt
Date: Mon Jan 19 20:18:26 2015
New Revision: 1653103

URL: http://svn.apache.org/r1653103
Log:
provided some more information on how to verify the release...needs review for accuracy

Modified:
    incubator/nifi/site/trunk/content/development/release-guide.md

Modified: incubator/nifi/site/trunk/content/development/release-guide.md
URL: http://svn.apache.org/viewvc/incubator/nifi/site/trunk/content/development/release-guide.md?rev=1653103&r1=1653102&r2=1653103&view=diff
==============================================================================
--- incubator/nifi/site/trunk/content/development/release-guide.md (original)
+++ incubator/nifi/site/trunk/content/development/release-guide.md Mon Jan 19 20:18:26 2015
@@ -42,19 +42,33 @@ capacity of a [Release Manager][release-
     - [Apache Release Signing][apache-release-signing]
     - [Apache Guide to publish Maven Artifacts][apache-guide-publish-maven]
 
-## The objective
+## The objective - What to validate and how to Validate a release
 
 Our aim is to produce and official Apache release.  
 The following is a list of the sorts of things that will be validated:
 
   - Do the resulting artifacts have 'incubating' in the name?
-  - Is the LICENSE and NOTICE file present in the source root and complete?
-  - Is the DISCLAIMER present with the LICENSE and NOTICE?
+  - Is the DISCLAIMER, LICENSE and NOTICE file present in the source root and complete?
+    - Specifically look in the *-sources.zip artifact and ensure these items are present at the root of the archive.
+    - Here is an example path to a sources artifact:  https://repository.apache.org/service/local/repositories/orgapachenifi-1011/content/org/apache/nifi/nar-maven-plugin/0.0.1-incubating/nar-maven-plugin-0.0.1-incubating-source-release.zip
   - Is there a README available that explains how to build the application and to execute it?
+    - Look in the *-sources.zip artifact root for the readme.
   - Are the signatures and hashes correct for the source release?
+    - Validate the hashes of the sources artifact do in fact match:
+      - https://repository.apache.org/service/local/repositories/orgapachenifi-1011/content/org/apache/nifi/nar-maven-plugin/0.0.1-incubating/nar-maven-plugin-0.0.1-incubating-source-release.zip.md5
+      - https://repository.apache.org/service/local/repositories/orgapachenifi-1011/content/org/apache/nifi/nar-maven-plugin/0.0.1-incubating/nar-maven-plugin-0.0.1-incubating-source-release.zip.sha1
+    - Validate the signatures of the sources artifact and of each of the hashes.  Here are example paths:
+      - https://repository.apache.org/service/local/repositories/orgapachenifi-1011/content/org/apache/nifi/nar-maven-plugin/0.0.1-incubating/nar-maven-plugin-0.0.1-incubating-source-release.zip.asc
+      - https://repository.apache.org/service/local/repositories/orgapachenifi-1011/content/org/apache/nifi/nar-maven-plugin/0.0.1-incubating/nar-maven-plugin-0.0.1-incubating-source-release.zip.asc.md5
+      - https://repository.apache.org/service/local/repositories/orgapachenifi-1011/content/org/apache/nifi/nar-maven-plugin/0.0.1-incubating/nar-maven-plugin-0.0.1-incubating-source-release.zip.asc.sha1
+      - Need a quick reminder on how to [verify a signature](http://www.apache.org/dev/release-signing.html#verifying-signature)?
   - Do all sources have necessary headers?
+    - Unzip the sources file into a directory and execute `mvn install -Pcheck-licenses`
   - Are there no unexpected binary files in the release?
+    - The only thing we'd expect would be potentially test resources files.
   - Can one compile and run the application with tests from the source bundle?
+    - Unzip the sources file into a directory and execute `mvn clean install`
+    - Does the app (if appropriate) execute and function as expected?
   
 ## The flow of a release (an outline)
   - The community is contributing to a series of JIRA tickets assigned to the next release