You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@yetus.apache.org by aa...@apache.org on 2018/03/13 01:40:39 UTC
yetus git commit: YETUS-618. Update release process to replace md5
with sha512
Repository: yetus
Updated Branches:
refs/heads/master 95885fa36 -> 535b38faf
YETUS-618. Update release process to replace md5 with sha512
closes apache/yetus#17
Signed-off-by: Allen Wittenauer <aw...@apache.org>
Project: http://git-wip-us.apache.org/repos/asf/yetus/repo
Commit: http://git-wip-us.apache.org/repos/asf/yetus/commit/535b38fa
Tree: http://git-wip-us.apache.org/repos/asf/yetus/tree/535b38fa
Diff: http://git-wip-us.apache.org/repos/asf/yetus/diff/535b38fa
Branch: refs/heads/master
Commit: 535b38fafae7c727d221437628ef3e97a21e67a0
Parents: 95885fa
Author: Akira Ajisaka <aa...@apache.org>
Authored: Fri Mar 9 15:38:30 2018 -0800
Committer: Akira Ajisaka <aa...@apache.org>
Committed: Tue Mar 13 10:39:54 2018 +0900
----------------------------------------------------------------------
asf-site-src/source/contribute/releases.md | 34 ++++++++++++-------------
1 file changed, 17 insertions(+), 17 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/yetus/blob/535b38fa/asf-site-src/source/contribute/releases.md
----------------------------------------------------------------------
diff --git a/asf-site-src/source/contribute/releases.md b/asf-site-src/source/contribute/releases.md
index 516f7b7..2200373 100644
--- a/asf-site-src/source/contribute/releases.md
+++ b/asf-site-src/source/contribute/releases.md
@@ -45,7 +45,7 @@ To create our convenience binary artifact, you'll need to build both our project
- Yetus Precommit will require Python 2.6+ for generating documentation on its API via Yetus Shelldocs.
- The project documentation will require Ruby 2.x+ for rendering.
- We'll build release notes with Yetus Release Doc Maker, which will require Python 2.6+.
-- Assembling release artifacts will make use of bash, tar, gzip, and md5sum.
+- Assembling release artifacts will make use of bash, tar, gzip, and shasum.
## Setup
@@ -174,7 +174,7 @@ Depending on how candidate evaluation goes, you may end up performing these step
echo ${artifact}
gpg --use-agent --armor --output "${artifact}".asc --detach-sig "${artifact}"
gpg --print-mds "${artifact}" >"${artifact}".mds
- md5 "${artifact}" >"${artifact}".md5
+ shasum -a 512 "${artifact}" >"${artifact}".sha512
done
1. Push the release candidate to staging distribution. This will make the artifacts visible for the vote.
@@ -190,11 +190,11 @@ Afterwards, the artifacts should be visible via the web under the same URL used
https://dist.apache.org/repos/dist/dev/yetus/0.2.0-RC1/
- As of this vote the relevant md5 hashes are:
- MD5 (CHANGELOG.md) = b7f7894d686a59aad1a4afe2ae8fbb94
- MD5 (RELEASENOTES.md) = e321ef2909e3e51ce40bbf701159b01e
- MD5 (yetus-0.2.0-bin.tar.gz) = e23fe4d34611a4c027df3f515cb46d7e
- MD5 (yetus-0.2.0-src.tar.gz) = e57b96533092356f3d5b9b4f47654fe9
+ As of this vote the relevant sha512 hashes are:
+ SHA512 (CHANGELOG.md) = b7f7894d686a59aad1a4afe2ae8fbb94
+ SHA512 (RELEASENOTES.md) = e321ef2909e3e51ce40bbf701159b01e
+ SHA512 (yetus-0.2.0-bin.tar.gz) = e23fe4d34611a4c027df3f515cb46d7e
+ SHA512 (yetus-0.2.0-src.tar.gz) = e57b96533092356f3d5b9b4f47654fe9
Source repository commit: 1e8f4588906a51317207092bd97b35687f2e3fa3
@@ -234,20 +234,20 @@ For example, if we use the url from our exemplar VOTE email, the process would l
$ find dist.apache.org/ -type f
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/CHANGELOG.md
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/CHANGELOG.md.asc
- dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/CHANGELOG.md.md5
+ dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/CHANGELOG.md.sha512
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/CHANGELOG.md.mds
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/index.html
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/RELEASENOTES.md
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/RELEASENOTES.md.asc
- dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/RELEASENOTES.md.md5
+ dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/RELEASENOTES.md.sha512
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/RELEASENOTES.md.mds
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-bin.tar.gz
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-bin.tar.gz.asc
- dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-bin.tar.gz.md5
+ dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-bin.tar.gz.sha512
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-bin.tar.gz.mds
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-src.tar.gz
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-src.tar.gz.asc
- dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-src.tar.gz.md5
+ dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-src.tar.gz.sha512
dist.apache.org//repos/dist/dev/yetus/0.2.0-RC1/yetus-0.2.0-src.tar.gz.mds
dist.apache.org//robots.txt
@@ -275,8 +275,8 @@ As noted in the informational page [What We Sign](http://www.apache.org/info/ver
$ gpg --print-mds yetus-0.2.0-src.tar.gz >yetus-0.2.0-src.tar.gz.my_mds
$ diff yetus-0.2.0-src.tar.gz.mds yetus-0.2.0-src.tar.gz.my_mds
- $ md5 yetus-0.2.0-src.tar.gz >yetus-0.2.0-src.tar.gz.my_md5
- $ diff yetus-0.2.0-src.tar.gz.md5 yetus-0.2.0-src.tar.gz.my_md5
+ $ shasum -a 512 yetus-0.2.0-src.tar.gz >yetus-0.2.0-src.tar.gz.my_sha512
+ $ diff yetus-0.2.0-src.tar.gz.sha512 yetus-0.2.0-src.tar.gz.my_sha512
1. You MUST make sure artifacts abide by the ASF Licensing Policy. You should read through [the ASF Licensing Policy](https://www.apache.org/legal/resolved), especially if your vote will be binding. As a quick guide:
* our software must be under the Apache Software License version 2.0 and this must be noted with a proper LICENSE and NOTICE file in each artifact that can hold them.
* our source code must meet the ASF policy on proper license notifications. Read the ASF Legal Committee's [Source Header Licensing Guide](http://apache.org/legal/src-headers.html)
@@ -462,20 +462,20 @@ It may take up to 24 hours for the artifacts to make their way to the various mi
$ svn co https://dist.apache.org/repos/dist/dev/yetus/ yetus-dist-dev
$ cd yetus-dist-dev
$ svn rm 0.2.0-RC*
- D 0.2.0-RC1/yetus-0.2.0-src.tar.gz.md5
+ D 0.2.0-RC1/yetus-0.2.0-src.tar.gz.sha512
D 0.2.0-RC1/yetus-0.2.0-bin.tar.gz.asc
D 0.2.0-RC1/RELEASENOTES.md
D 0.2.0-RC1/CHANGELOG.md.mds
- D 0.2.0-RC1/CHANGELOG.md.md5
+ D 0.2.0-RC1/CHANGELOG.md.sha512
D 0.2.0-RC1/yetus-0.2.0-src.tar.gz
D 0.2.0-RC1/RELEASENOTES.md.asc
D 0.2.0-RC1/yetus-0.2.0-bin.tar.gz.mds
- D 0.2.0-RC1/yetus-0.2.0-bin.tar.gz.md5
+ D 0.2.0-RC1/yetus-0.2.0-bin.tar.gz.sha512
D 0.2.0-RC1/yetus-0.2.0-src.tar.gz.asc
D 0.2.0-RC1/CHANGELOG.md
D 0.2.0-RC1/RELEASENOTES.md.mds
D 0.2.0-RC1/CHANGELOG.md.asc
- D 0.2.0-RC1/RELEASENOTES.md.md5
+ D 0.2.0-RC1/RELEASENOTES.md.sha512
D 0.2.0-RC1/yetus-0.2.0-bin.tar.gz
D 0.2.0-RC1/yetus-0.2.0-src.tar.gz.mds
D 0.2.0-RC1