You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@syncope.apache.org by Francesco Chicchiriccò <il...@apache.org> on 2012/04/23 18:24:57 UTC
[VOTE] Release Syncope version 1.0.0-RC1-incubating
Hi,
I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
Apache Syncope is an Open Source system for managing digital identities
in enterprise environments, implemented in JEE technology.
We solved 50 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044
<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
There are currently no issues left in JIRA for 1.0.0-incubating.
Staging Repository:
https://repository.apache.org/content/repositories/orgapachesyncope-083/
SCM Tag:
https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
ADDITIONAL_INFORMATION
[ ] +1
[ ] +0
[ ] -1
The vote is open for 72 hours.
Regards.
--
Francesco Chicchiriccò
Apache Cocoon PMC and Apache Syncope PPMC Member
http://people.apache.org/~ilgrosso/
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Marco Di Sabatino Di Diodoro <ma...@tirasa.net>.
+1
Marco
On Apr 24, 2012, at 10:58 AM, Nicola Scendoni wrote:
> +1
>
> Nicola
> -----Original Message-----
> From: Colm O hEigeartaigh <co...@apache.org>
> Date: Tue, 24 Apr 2012 09:54:08
> To: <sy...@incubator.apache.org>
> Reply-To: syncope-dev@incubator.apache.org
> Subject: Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
>
> +1.
>
> Colm.
>
> On Mon, Apr 23, 2012 at 10:13 PM, Fabio Martelli
> <fa...@gmail.com> wrote:
>> +1
>> Il giorno 23/apr/2012 18:31, "Massimiliano Perrone" <
>> massimiliano.perrone@tirasa.net> ha scritto:
>>
>>> Il 23/04/2012 18:25, Francesco Chicchiriccò ha scritto:
>>>
>>>> On 23/04/2012 18:24, Francesco Chicchiriccò wrote:
>>>>
>>>>> Hi,
>>>>> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>>>>>
>>>>> Apache Syncope is an Open Source system for managing digital identities
>>>>> in enterprise environments, implemented in JEE technology.
>>>>>
>>>>> We solved 50 issues:
>>>>> https://issues.apache.org/**jira/secure/ReleaseNote.jspa?**
>>>>> projectId=12313120&version=**12320044<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>>>> <https://issues.apache.org/**jira/secure/ReleaseNote.jspa?**
>>>>> projectId=12313120&version=**12320044<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>>>>>
>>>>>
>>>>> There are currently no issues left in JIRA for 1.0.0-incubating.
>>>>>
>>>>> Staging Repository:
>>>>> https://repository.apache.org/**content/repositories/**
>>>>> orgapachesyncope-083/<https://repository.apache.org/content/repositories/orgapachesyncope-083/>
>>>>>
>>>>> SCM Tag:
>>>>> https://svn.apache.org/repos/**asf/incubator/syncope/tags/**
>>>>> syncope-1.0.0-RC1-incubating/<https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/>
>>>>>
>>>>> ADDITIONAL_INFORMATION
>>>>>
>>>>> [ ] +1
>>>>> [ ] +0
>>>>> [ ] -1
>>>>>
>>>>> The vote is open for 72 hours.
>>>>>
>>>> +1
>>>>
>>>> +1
>>>
>>> --
>>> Massimiliano Perrone
>>> Tel +39 393 9121310
>>>
>>> Tirasa S.r.l.
>>> Viale D'Annunzio 267 - 65127 Pescara
>>> Tel +39 0859116307 / FAX +39 0859111173
>>> http://www.tirasa.net
>>>
>>> Apache Syncope PPMC Member
>>> http://people.apache.org/~**massi/ <http://people.apache.org/~massi/>
>>>
>>> "L'apprendere molte cose non insegna l'intelligenza"
>>> (Eraclito)
>>>
>>>
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
--
Dott. Marco Di Sabatino Di Diodoro
Tel. +39 3939065570
Tirasa S.r.l.
Viale D'Annunzio 267 - 65127 Pescara
Tel +39 0859116307 / FAX +39 0859111173
http://www.tirasa.net
Apache Syncope PPMC Member
http://people.apache.org/~mdisabatino
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Nicola Scendoni <sc...@gmail.com>.
+1
Nicola
-----Original Message-----
From: Colm O hEigeartaigh <co...@apache.org>
Date: Tue, 24 Apr 2012 09:54:08
To: <sy...@incubator.apache.org>
Reply-To: syncope-dev@incubator.apache.org
Subject: Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
+1.
Colm.
On Mon, Apr 23, 2012 at 10:13 PM, Fabio Martelli
<fa...@gmail.com> wrote:
> +1
> Il giorno 23/apr/2012 18:31, "Massimiliano Perrone" <
> massimiliano.perrone@tirasa.net> ha scritto:
>
>> Il 23/04/2012 18:25, Francesco Chicchiriccò ha scritto:
>>
>>> On 23/04/2012 18:24, Francesco Chicchiriccò wrote:
>>>
>>>> Hi,
>>>> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>>>>
>>>> Apache Syncope is an Open Source system for managing digital identities
>>>> in enterprise environments, implemented in JEE technology.
>>>>
>>>> We solved 50 issues:
>>>> https://issues.apache.org/**jira/secure/ReleaseNote.jspa?**
>>>> projectId=12313120&version=**12320044<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>>> <https://issues.apache.org/**jira/secure/ReleaseNote.jspa?**
>>>> projectId=12313120&version=**12320044<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>>> >
>>>>
>>>> There are currently no issues left in JIRA for 1.0.0-incubating.
>>>>
>>>> Staging Repository:
>>>> https://repository.apache.org/**content/repositories/**
>>>> orgapachesyncope-083/<https://repository.apache.org/content/repositories/orgapachesyncope-083/>
>>>>
>>>> SCM Tag:
>>>> https://svn.apache.org/repos/**asf/incubator/syncope/tags/**
>>>> syncope-1.0.0-RC1-incubating/<https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/>
>>>>
>>>> ADDITIONAL_INFORMATION
>>>>
>>>> [ ] +1
>>>> [ ] +0
>>>> [ ] -1
>>>>
>>>> The vote is open for 72 hours.
>>>>
>>> +1
>>>
>>> +1
>>
>> --
>> Massimiliano Perrone
>> Tel +39 393 9121310
>>
>> Tirasa S.r.l.
>> Viale D'Annunzio 267 - 65127 Pescara
>> Tel +39 0859116307 / FAX +39 0859111173
>> http://www.tirasa.net
>>
>> Apache Syncope PPMC Member
>> http://people.apache.org/~**massi/ <http://people.apache.org/~massi/>
>>
>> "L'apprendere molte cose non insegna l'intelligenza"
>> (Eraclito)
>>
>>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Colm O hEigeartaigh <co...@apache.org>.
+1.
Colm.
On Mon, Apr 23, 2012 at 10:13 PM, Fabio Martelli
<fa...@gmail.com> wrote:
> +1
> Il giorno 23/apr/2012 18:31, "Massimiliano Perrone" <
> massimiliano.perrone@tirasa.net> ha scritto:
>
>> Il 23/04/2012 18:25, Francesco Chicchiriccò ha scritto:
>>
>>> On 23/04/2012 18:24, Francesco Chicchiriccò wrote:
>>>
>>>> Hi,
>>>> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>>>>
>>>> Apache Syncope is an Open Source system for managing digital identities
>>>> in enterprise environments, implemented in JEE technology.
>>>>
>>>> We solved 50 issues:
>>>> https://issues.apache.org/**jira/secure/ReleaseNote.jspa?**
>>>> projectId=12313120&version=**12320044<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>>> <https://issues.apache.org/**jira/secure/ReleaseNote.jspa?**
>>>> projectId=12313120&version=**12320044<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>>> >
>>>>
>>>> There are currently no issues left in JIRA for 1.0.0-incubating.
>>>>
>>>> Staging Repository:
>>>> https://repository.apache.org/**content/repositories/**
>>>> orgapachesyncope-083/<https://repository.apache.org/content/repositories/orgapachesyncope-083/>
>>>>
>>>> SCM Tag:
>>>> https://svn.apache.org/repos/**asf/incubator/syncope/tags/**
>>>> syncope-1.0.0-RC1-incubating/<https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/>
>>>>
>>>> ADDITIONAL_INFORMATION
>>>>
>>>> [ ] +1
>>>> [ ] +0
>>>> [ ] -1
>>>>
>>>> The vote is open for 72 hours.
>>>>
>>> +1
>>>
>>> +1
>>
>> --
>> Massimiliano Perrone
>> Tel +39 393 9121310
>>
>> Tirasa S.r.l.
>> Viale D'Annunzio 267 - 65127 Pescara
>> Tel +39 0859116307 / FAX +39 0859111173
>> http://www.tirasa.net
>>
>> Apache Syncope PPMC Member
>> http://people.apache.org/~**massi/ <http://people.apache.org/~massi/>
>>
>> "L'apprendere molte cose non insegna l'intelligenza"
>> (Eraclito)
>>
>>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Fabio Martelli <fa...@gmail.com>.
+1
Il giorno 23/apr/2012 18:31, "Massimiliano Perrone" <
massimiliano.perrone@tirasa.net> ha scritto:
> Il 23/04/2012 18:25, Francesco Chicchiriccò ha scritto:
>
>> On 23/04/2012 18:24, Francesco Chicchiriccò wrote:
>>
>>> Hi,
>>> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>>>
>>> Apache Syncope is an Open Source system for managing digital identities
>>> in enterprise environments, implemented in JEE technology.
>>>
>>> We solved 50 issues:
>>> https://issues.apache.org/**jira/secure/ReleaseNote.jspa?**
>>> projectId=12313120&version=**12320044<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>> <https://issues.apache.org/**jira/secure/ReleaseNote.jspa?**
>>> projectId=12313120&version=**12320044<https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>> >
>>>
>>> There are currently no issues left in JIRA for 1.0.0-incubating.
>>>
>>> Staging Repository:
>>> https://repository.apache.org/**content/repositories/**
>>> orgapachesyncope-083/<https://repository.apache.org/content/repositories/orgapachesyncope-083/>
>>>
>>> SCM Tag:
>>> https://svn.apache.org/repos/**asf/incubator/syncope/tags/**
>>> syncope-1.0.0-RC1-incubating/<https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/>
>>>
>>> ADDITIONAL_INFORMATION
>>>
>>> [ ] +1
>>> [ ] +0
>>> [ ] -1
>>>
>>> The vote is open for 72 hours.
>>>
>> +1
>>
>> +1
>
> --
> Massimiliano Perrone
> Tel +39 393 9121310
>
> Tirasa S.r.l.
> Viale D'Annunzio 267 - 65127 Pescara
> Tel +39 0859116307 / FAX +39 0859111173
> http://www.tirasa.net
>
> Apache Syncope PPMC Member
> http://people.apache.org/~**massi/ <http://people.apache.org/~massi/>
>
> "L'apprendere molte cose non insegna l'intelligenza"
> (Eraclito)
>
>
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Massimiliano Perrone <ma...@tirasa.net>.
Il 23/04/2012 18:25, Francesco Chicchiriccò ha scritto:
> On 23/04/2012 18:24, Francesco Chicchiriccò wrote:
>> Hi,
>> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>>
>> Apache Syncope is an Open Source system for managing digital identities
>> in enterprise environments, implemented in JEE technology.
>>
>> We solved 50 issues:
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044
>> <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>
>> There are currently no issues left in JIRA for 1.0.0-incubating.
>>
>> Staging Repository:
>> https://repository.apache.org/content/repositories/orgapachesyncope-083/
>>
>> SCM Tag:
>> https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
>>
>> ADDITIONAL_INFORMATION
>>
>> [ ] +1
>> [ ] +0
>> [ ] -1
>>
>> The vote is open for 72 hours.
> +1
>
+1
--
Massimiliano Perrone
Tel +39 393 9121310
Tirasa S.r.l.
Viale D'Annunzio 267 - 65127 Pescara
Tel +39 0859116307 / FAX +39 0859111173
http://www.tirasa.net
Apache Syncope PPMC Member
http://people.apache.org/~massi/
"L'apprendere molte cose non insegna l'intelligenza"
(Eraclito)
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Francesco Chicchiriccò <il...@apache.org>.
On 23/04/2012 18:24, Francesco Chicchiriccò wrote:
> Hi,
> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>
> Apache Syncope is an Open Source system for managing digital identities
> in enterprise environments, implemented in JEE technology.
>
> We solved 50 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044
> <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>
> There are currently no issues left in JIRA for 1.0.0-incubating.
>
> Staging Repository:
> https://repository.apache.org/content/repositories/orgapachesyncope-083/
>
> SCM Tag:
> https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
>
> ADDITIONAL_INFORMATION
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> The vote is open for 72 hours.
+1
--
Francesco Chicchiriccò
Apache Cocoon PMC and Apache Syncope PPMC Member
http://people.apache.org/~ilgrosso/
What's required to vote +1 a release at The ASF
Posted by Emmanuel Lécharny <el...@gmail.com>.
Hi guys,
I see many people voting +1 on the release vote opened lately. I'd like
to stress out that voting +1 is not like you just think that, Yeah, It's
Cool(tm) to have a new release, but it requires that you have checked a
few things.
Please just spend 5 minutes reading
http://www.apache.org/dev/release.html#approving-a-release, and you'll
see that your vote comes with some responsability.
Namely, " Before voting +1 PMC members are required to download the
signed source code package, compile it as provided, and test the
resulting executable on their own platform, along with also verifying
that the package contains the required contents
<http://www.apache.org/dev/release.html#what-must-every-release-contain>."
I know that most of the people voting are not part of a non existing
Syncope PMC, but as soon as the project will be promoted to TLP, then a
Syncope PMC will be created, gathering most of the people currently part
of the project. *YOU* are in charge, this is *YOUR* project, so don't
expect that the release Manager will do all the job and you can blindly
trust him. What I mean is that anyone can make a mistake, and if no one
checks anything, it's likely that this mistake will be unnoticed.
Many thanks !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Dino Anzellotti <di...@gmail.com>.
+1
Il giorno 23/apr/2012, alle ore 18.24, Francesco Chicchiriccò ha scritto:
> Hi,
> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>
> Apache Syncope is an Open Source system for managing digital identities
> in enterprise environments, implemented in JEE technology.
>
> We solved 50 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044
> <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>
> There are currently no issues left in JIRA for 1.0.0-incubating.
>
> Staging Repository:
> https://repository.apache.org/content/repositories/orgapachesyncope-083/
>
> SCM Tag:
> https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
>
> ADDITIONAL_INFORMATION
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> The vote is open for 72 hours.
>
> Regards.
>
> --
> Francesco Chicchiriccò
>
> Apache Cocoon PMC and Apache Syncope PPMC Member
> http://people.apache.org/~ilgrosso/
>
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 4/25/12 5:22 PM, Francesco Chicchiriccò a écrit :
>>> Even if fixing current release lacks would be easy, I'd suggest you
>>> anyway to roll an RC2 to have a better release process.
>> Here, I would disagree : if you don't provide a RC1 to download,
>> people will wonder where the hell is RC1...
>> IMHO, when the release is not voted, or withdrawn, then we should keep
>> the same number for the next attempt.
> If you don't have objections, I will:
>
> 1. wait for 72 hours to pass (tomorrow, 18;24 CET), then send a summary
> e-mail with all votes and the reason why this RC1 release attempt did
> not succeed
> 2. remove SVN tag, delete staging repository
> 3. draft a release page on our website (inspired from links provided by
> Emmanuel)
> 4. close SYNCOPE-66 (still to verify if source archives gets MD5 / SHA1
> / ASC)
> 5. start again the release process for RC1
>
> WDYT?
Then don't wait 72 hours if you are going to doom RC1 :) Just do it
right away !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Francesco Chicchiriccò <il...@apache.org>.
On 25/04/2012 14:10, Emmanuel Lécharny wrote:
> Le 4/25/12 1:17 PM, Simone Tripodi a écrit :
>> Hi all,
>>
>> I am a little confused on how you intend to manage the RC: let's say
>> development is X.Y, I would have *tagged* the X.Y-RCn for the n-th
>> candidate to vote the X.Y *release*, while I surprisingly see
>> X.Y-RCn as release... do you intend follow a cycle of X.Y-RCs, and
>> then a final X.Y-GA?
> RC is a release (candidate :). I think it's named 'release' to follow
> the ASF naming of what is a 'release' : a voted source tarball.
> To me, 1.0.0-RC1 is a much a release a 1.0.0.
Hum, effectively I never thought that, since RC stands for "release
candidate", the act of releasing a release candidate can be quite
cumbersome... :-)
Anyway, we discussed this [1] [2], and I understood that an acceptable
scheme is
X.Y.Z-M1-incubating - ... X.Y.Z-Mn-incubating
followed by
X.Y.Z-RC1-incubating - ... - X.Y.Z-RCm-incubating
followed by
X.Y.Z-incubating
where the first two phases (milestones and release candidates) are
potentially optional.
>>
>> Anyway, my current position is +0 (it could become +1 while addressed
>> the following concerns) and here are my statements:
>>
>> * build is not portable, or at least some guidelines would help to
>> address potential issues - once checked out the tag and launched the
>> install goal
>>
>> +----+
>> svn co
>> https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
>> \
>> cd syncope-1.0.0-RC1-incubating/ \
>> mvn install
>> +----+
>>
>> I got the following error:
>> [...]
> Hmmm... I did that, but got a success... I also doomed my maven repo
> before doing a mvn clean install.
> [...]
This happened to me as well sometimes: this ldapbp library occasionally
disappears from central Maven repo: right now is available [3]. Anyway
this dependency is pushed by the current ConnId LDAP connector bundle
but is not actually needed as dependency since it is part of the bundle
itself: I will make a new release there, possibly replacing [1] with
more modern - but substantially same - [4].
>> * distribution package should contain RELEASE-NOTES (copied fom
>> Jira is enough)
> That's not required, but it's useful.
Agree: about writing down a correct and complete release process,
Emmanuel provided some very interesting links from BVal and DeltaSpike;
I think it's good - and I can take care of this - for us as well to
provide something similar, starting from the provided links.
>> Even if fixing current release lacks would be easy, I'd suggest you
>> anyway to roll an RC2 to have a better release process.
> Here, I would disagree : if you don't provide a RC1 to download,
> people will wonder where the hell is RC1...
> IMHO, when the release is not voted, or withdrawn, then we should keep
> the same number for the next attempt.
If you don't have objections, I will:
1. wait for 72 hours to pass (tomorrow, 18;24 CET), then send a summary
e-mail with all votes and the reason why this RC1 release attempt did
not succeed
2. remove SVN tag, delete staging repository
3. draft a release page on our website (inspired from links provided by
Emmanuel)
4. close SYNCOPE-66 (still to verify if source archives gets MD5 / SHA1
/ ASC)
5. start again the release process for RC1
WDYT?
Regards.
[1]
http://syncope-dev.1063484.n5.nabble.com/Version-Numbering-Scheme-td5551287.html
[2]
http://syncope-dev.1063484.n5.nabble.com/DISCUSS-Releasing-1-0-0-RC1-incubating-td5632136.html
[3] http://repo1.maven.org/maven2/com/sun/ldapbp/1.0/
[4]
http://repo1.maven.org/maven2/org/glassfish/main/external/ldapbp-repackaged/
--
Francesco Chicchiriccò
Apache Cocoon PMC and Apache Syncope PPMC Member
http://people.apache.org/~ilgrosso/
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Simone Tripodi <si...@apache.org>.
> Here, I would disagree : if you don't provide a RC1 to download, people will
> wonder where the hell is RC1...
> IMHO, when the release is not voted, or withdrawn, then we should keep the
> same number for the next attempt.
ah well, apologize, at the time of writing I still had in mind the way
of interpreting RCs we have at Commons
<http://wiki.apache.org/commons/CreatingReleases> - that is NOT the
same reflected here.
That is why I asked at the begin of my previous message how we want to
manage RCs here at Syncope - I hope to have understood what RC is
after some years at ASF :D
best,
-Simo
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 4/25/12 1:17 PM, Simone Tripodi a écrit :
> Hi all,
>
> I am a little confused on how you intend to manage the RC: let's say
> development is X.Y, I would have *tagged* the X.Y-RCn for the n-th
> candidate to vote the X.Y *release*, while I surprisingly see X.Y-RCn
> as release... do you intend follow a cycle of X.Y-RCs, and then a
> final X.Y-GA?
RC is a release (candidate :). I think it's named 'release' to follow
the ASF naming of what is a 'release' : a voted source tarball.
To me, 1.0.0-RC1 is a much a release a 1.0.0.
>
> Anyway, my current position is +0 (it could become +1 while addressed
> the following concerns) and here are my statements:
>
> * build is not portable, or at least some guidelines would help to
> address potential issues - once checked out the tag and launched the
> install goal
>
> +----+
> svn co https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
> \
> cd syncope-1.0.0-RC1-incubating/ \
> mvn install
> +----+
>
> I got the following error:
>
> +----+
> [INFO] ------------------------------------------------------------------------
> [INFO] Reactor Summary:
> [INFO]
> [INFO] Apache Syncope .................................... SUCCESS [26.686s]
> [INFO] Apache Syncope Build Tools ........................ SUCCESS [20.585s]
> [INFO] Apache Syncope Client ............................. SUCCESS [11.328s]
> [INFO] Apache Syncope Core ............................... FAILURE [20.838s]
> [INFO] Apache Syncope Console ............................ SKIPPED
> [INFO] Apache Syncope Root ............................... SKIPPED
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD FAILURE
Hmmm... I did that, but got a success... I also doomed my maven repo
before doing a mvn clean install.
$ mvn clean install
...
[INFO]
------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Apache Syncope .................................... SUCCESS
[3:54.242s]
[INFO] Apache Syncope Build Tools ........................ SUCCESS
[1:18.744s]
[INFO] Apache Syncope Client ............................. SUCCESS [20.857s]
[INFO] Apache Syncope Core ............................... SUCCESS
[6:50.362s]
[INFO] Apache Syncope Console ............................ SUCCESS [23.694s]
[INFO] Apache Syncope Root ............................... SUCCESS [0.005s]
[INFO]
------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO]
------------------------------------------------------------------------
[INFO] Total time: 12:50.246s
[INFO] Finished at: Wed Apr 25 14:05:03 CEST 2012
[INFO] Final Memory: 48M/125M
[INFO]
------------------------------------------------------------------------
$ mvn --version
Apache Maven 3.0.4 (r1232337; 2012-01-17 09:44:56+0100)
Maven home: /opt/maven-3.0.4
Java version: 1.6.0_31, vendor: Apple Inc.
Java home: /System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home
Default locale: en_US, platform encoding: MacRoman
OS name: "mac os x", version: "10.7.3", arch: "x86_64", family: "mac"
> * distribution package should contain RELEASE-NOTES (copied fom Jira is enough)
That's not required, but it's useful.
>
> Even if fixing current release lacks would be easy, I'd suggest you
> anyway to roll an RC2 to have a better release process.
Here, I would disagree : if you don't provide a RC1 to download, people
will wonder where the hell is RC1...
IMHO, when the release is not voted, or withdrawn, then we should keep
the same number for the next attempt.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Simone Tripodi <si...@apache.org>.
Hi all,
I am a little confused on how you intend to manage the RC: let's say
development is X.Y, I would have *tagged* the X.Y-RCn for the n-th
candidate to vote the X.Y *release*, while I surprisingly see X.Y-RCn
as release... do you intend follow a cycle of X.Y-RCs, and then a
final X.Y-GA?
Anyway, my current position is +0 (it could become +1 while addressed
the following concerns) and here are my statements:
* build is not portable, or at least some guidelines would help to
address potential issues - once checked out the tag and launched the
install goal
+----+
svn co https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
\
cd syncope-1.0.0-RC1-incubating/ \
mvn install
+----+
I got the following error:
+----+
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Apache Syncope .................................... SUCCESS [26.686s]
[INFO] Apache Syncope Build Tools ........................ SUCCESS [20.585s]
[INFO] Apache Syncope Client ............................. SUCCESS [11.328s]
[INFO] Apache Syncope Core ............................... FAILURE [20.838s]
[INFO] Apache Syncope Console ............................ SKIPPED
[INFO] Apache Syncope Root ............................... SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 1:31.076s
[INFO] Finished at: Wed Apr 25 12:33:02 CEST 2012
[INFO] Final Memory: 32M/2039M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal on project syncope-core: Could not
resolve dependencies for project
org.apache.syncope:syncope-core:war:1.0.0-RC1-incubating: Could not
find artifact com.sun.jndi.ldap:ldapbp:jar:1.0 in activiti
(http://maven.alfresco.com/nexus/content/repositories/activiti) ->
[Help 1]
+----+
* distributions packages are missing, as Emmanuel already
exhaustively addressed;
* distribution package should contain RELEASE-NOTES (copied fom Jira is enough)
Even if fixing current release lacks would be easy, I'd suggest you
anyway to roll an RC2 to have a better release process.
best,
-Simo
http://people.apache.org/~simonetripodi/
http://simonetripodi.livejournal.com/
http://twitter.com/simonetripodi
http://www.99soft.org/
On Wed, Apr 25, 2012 at 9:29 AM, Denis <de...@intesys.it> wrote:
> +1
>
>
> On Mon, 23 Apr 2012 18:24:57 +0200, Francesco Chicchiriccò wrote:
>>
>> Hi,
>> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>>
>> Apache Syncope is an Open Source system for managing digital identities
>> in enterprise environments, implemented in JEE technology.
>>
>> We solved 50 issues:
>>
>>
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044
>>
>>
>> <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>>
>> There are currently no issues left in JIRA for 1.0.0-incubating.
>>
>> Staging Repository:
>>
>> https://repository.apache.org/content/repositories/orgapachesyncope-083/
>>
>> SCM Tag:
>>
>>
>> https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
>>
>> ADDITIONAL_INFORMATION
>>
>> [ ] +1
>> [ ] +0
>> [ ] -1
>>
>> The vote is open for 72 hours.
>>
>> Regards.
>
>
>
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Denis <de...@intesys.it>.
+1
On Mon, 23 Apr 2012 18:24:57 +0200, Francesco Chicchiriccò wrote:
> Hi,
> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>
> Apache Syncope is an Open Source system for managing digital
> identities
> in enterprise environments, implemented in JEE technology.
>
> We solved 50 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044
>
> <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>
> There are currently no issues left in JIRA for 1.0.0-incubating.
>
> Staging Repository:
>
> https://repository.apache.org/content/repositories/orgapachesyncope-083/
>
> SCM Tag:
>
> https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
>
> ADDITIONAL_INFORMATION
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> The vote is open for 72 hours.
>
> Regards.
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Bob Lannoy <bo...@gmail.com>.
+1
2012/4/23 Francesco Chicchiriccò <il...@apache.org>:
> Hi,
> I'd like to release version 1.0.0-RC1-incubating of Apache Syncope.
>
> Apache Syncope is an Open Source system for managing digital identities
> in enterprise environments, implemented in JEE technology.
>
> We solved 50 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044
> <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12313120&version=12320044>
>
> There are currently no issues left in JIRA for 1.0.0-incubating.
>
> Staging Repository:
> https://repository.apache.org/content/repositories/orgapachesyncope-083/
>
> SCM Tag:
> https://svn.apache.org/repos/asf/incubator/syncope/tags/syncope-1.0.0-RC1-incubating/
>
> ADDITIONAL_INFORMATION
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> The vote is open for 72 hours.
>
> Regards.
>
> --
> Francesco Chicchiriccò
>
> Apache Cocoon PMC and Apache Syncope PPMC Member
> http://people.apache.org/~ilgrosso/
>
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Emmanuel Lécharny <el...@gmail.com>.
The BVal project has added this very cool page on their web site :
http://bval.apache.org/release-process.html
Interesting description of the release process.
Another link about what has to be done in order to vote +1 on a release :
http://markmail.org/thread/c7u7icwjaqgr26an#query:+page:1+mid:c7u7icwjaqgr26an+state:results
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 4/24/12 1:27 PM, Francesco Chicchiriccò a écrit :
> On 24/04/2012 12:55, Emmanuel Lécharny wrote:
>> Le 4/24/12 12:20 PM, Francesco Chicchiriccò a écrit :
>>> On 24/04/2012 12:04, Emmanuel Lécharny wrote:
>>>> Sorry guys, but atm, I will -1 this release. (keep in mind that a
>>>> -1 is *not* a veto when it comes to releases)
>>>>
>>>> I'd like to have a way to download a package containing all tghe
>>>> sources, being able to tar xzpf it, and build it to obtain the bin.
>>>> So far, either I svn co the sourcs fro SVN, or I have to grab the
>>>> signed jars in
>>>> https://repository.apache.org/content/repositories/orgapachesyncope-083/,
>>>> but then I'm facing many sub directories with signed source jars
>>>> which don't allow me to build the project.
>>>
>>> Hi Emmanuel,
>>> would it be enough to:
>>>
>>> 1. svn export of the release tag
>>> 2. tar zcvf
>>> 3. generate needed signatures (asc, md5, sha1, ...)
>>> 4. put these files somewhere (where?)
>>
>> What we usually do is that we have a distribution sub-module that
>> gather everything (sources, etc), and this is what we distribute on
>> the web site (see
>> http://directory.apache.org/apacheds/2.0/downloads.html for instance,
>> the binaries are provided for convenience, what is important is the
>> last package,
>> http://directory.apache.org/apacheds/2.0/download/download-sources.html)
>
> Unfortunately the provided link does not seem to be working (also
> mirror change does not): when going directly to
> http://www.apache.org/dist/directory/apacheds/stable/2.0/2.0.0-M6/, I
> cannot find any sources package.
> The only one I was able to find by browsing that repo is
> http://www.apache.org/dist/directory/apacheds/unstable/1.5/1.5.7/apacheds-sources-1.5.7.zip.
Holly sh*t ! We have voted bad releases since M2 :/ Rahhhh...
>
> Anyway, I've also taken a look at
> http://openjpa.apache.org/downloads.html (source).
or http://mina.apache.org/downloads.html
>
>> In the long run, that would help you by avoiding those manual steps.
>>
>> In any case, the packages have to be stored in
>> /www/www.apache.org/dist/incubator/syncope (see other incubator
>> projects). You will have to copy them by hand (atm).
>>
>> You can copy the sources tarballs on your public apache directory
>> (people.apache.org, public.html directory), and provide the link for
>> the vote.
>
> Fine: so first I will store these files in
> http://people.apache.org/~ilgrosso/ for the vote.
http://people.apache.org/~ilgrosso/public.html, otherwise we won't be
able to get them.
> Once (and if) the vote has passed, someone will move such files to
> /www/www.apache.org/dist/incubator/syncope.
Someone = the RM.
>
>>>> "Before voting +1 PMC members are required to download the signed
>>>> source code package, compile it as provided, and test the resulting
>>>> executable on their own platform, along with also verifying that
>>>> the package contains the required contents
>>>> <http://www.apache.org/dev/release.html#what-must-every-release-contain>."
>>>>
>>>> From
>>>> http://www.apache.org/dev/release.html#what-must-every-release-contain
>>>> :
>>>>
>>>> "Every ASF release *must* contain a source package, which must be
>>>> sufficient for a user to build and test the release provided they
>>>> have access to the appropriate platform and tools."
>>>>
>>>> Also the NOTICE file (which IMO should be found in the root of
>>>> every package, but maybe having it in META-INF is enough) should
>>>> contain references to third party components, such as activiti.org,
>>>> SpringFramework, AspectJ (with the associated license, as it has 3
>>>> diffrerent licenses for this project, depending on the version -
>>>> MPL1.1 for 1.0, CPL1.0 for 1.1 to 1.5.1, EPL1.0 for 1.5.22),
>>>> XStream (as requested by their license, you must include it),
>>>> Quartz, Groovy, SLF4J, LogBack, connid (even if it's a Tirasa
>>>> product, unless you find out a way to make it ASL 2.0 instead of
>>>> CDDL...), junit, h2 (which requires a few files to be added),
>>>> Javassist with the selected license, as it's available under MPL,
>>>> LGPL or ASL (wtf javassist guys? Can't you pick ASL2.0 and get rid
>>>> of the others ? ;), plus a mention of the other ASF project you are
>>>> using, but this is not required.
>>>
>>> NOTICE file is included, alongside with LICENSE, in all artifacts
>>> (see SYNCOPE-3).
>> Yes, I saw. I was wondering if we should not provide them at the top
>> level, instead of having them in META_INF
>
> Apache parent POM 10 puts such files under META-INF, because of
>
> <plugin>
> <groupId>org.apache.maven.plugins</groupId>
> <artifactId>maven-remote-resources-plugin</artifactId>
> <executions>
> <execution>
> <goals>
> <goal>process</goal>
> </goals>
> <configuration>
> <resourceBundles>
> <resourceBundle>org.apache:apache-jar-resource-bundle:1.4</resourceBundle>
>
> </resourceBundles>
> </configuration>
> </execution>
> </executions>
> </plugin>
ok, not a big deal. As I said, it's probably just me. Maybe the
distrbution packages, containing the sources, should have the NOTICES
and LICENSE files at the top level.
>
>>> About non ASL-2.0 dependencies, we already went through the process
>>> of "reducing to ASL 2.0" as much as possible (the biggest move was
>>> from Hibernate to OpenJPA), so I don't think there is room for more
>>> replacement.
>> This is not an issue. Every ASL 2.0 compatible licenses are fine (ie,
>> MPL, CDDL, BSD, EPL,...) as soon as you mention their origin. If you
>> use a third party software which is released under a ASL 2.0 license,
>> then adding a mention in the NOTICE that you are using "Blah
>> Software, released under an ASL 2.0 License" just helps the potential
>> users, who won't have to dig the web for the third part license.
>>>
>>> Anyway, it seems that SYNCOPE-2 should be re-opened, since NOTICE
>>> file was not filled - as you report above: I'll do this right away.
>> Sorry that I waited for the release to be done to check the result.
>> As I said, I was off for the week-end, otherwise I would have gave a
>> hand...
>>>
>>>> Yes, yes, I know, I'm a PITA...
>>>
>>> Eh eh eh, I felt like it was too much easy to jump to the first
>>> incubating release... ;-)
>> Actually, you did a good job. I'm pretty sure that beside the few
>> remaining points, the release is correct.
>>
>> In any case, be sure to read carefully
>> http://www.apache.org/dev/release.html. If you have any question,
>> feel free to ask.
>
> A last question: what about the current vote / svn tag / staging
> repository? What's the best practice in such cases?
> I mean, should we simply remove svn tag, drop staging repository, fix
> these release issues and then start from scratch with a new RC1 or
> should we instead go with RC2?
It's up to you. But keeping a RC1 make people think that a release has
been issued and voted. I'd rather kill -9 RC1 and start again.
In any case, even if you think you are wasting your time, you are
investing in the long term.
And never forget that whatever you do, at some point, you'll miss
something if the process is not fully automated. Like missing to copy
the sources package on dist, like what we did on Directory :)
Many thanks for your patience !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Francesco Chicchiriccò <il...@apache.org>.
On 24/04/2012 12:55, Emmanuel Lécharny wrote:
> Le 4/24/12 12:20 PM, Francesco Chicchiriccò a écrit :
>> On 24/04/2012 12:04, Emmanuel Lécharny wrote:
>>> Sorry guys, but atm, I will -1 this release. (keep in mind that a -1
>>> is *not* a veto when it comes to releases)
>>>
>>> I'd like to have a way to download a package containing all tghe
>>> sources, being able to tar xzpf it, and build it to obtain the bin.
>>> So far, either I svn co the sourcs fro SVN, or I have to grab the
>>> signed jars in
>>> https://repository.apache.org/content/repositories/orgapachesyncope-083/,
>>> but then I'm facing many sub directories with signed source jars
>>> which don't allow me to build the project.
>>
>> Hi Emmanuel,
>> would it be enough to:
>>
>> 1. svn export of the release tag
>> 2. tar zcvf
>> 3. generate needed signatures (asc, md5, sha1, ...)
>> 4. put these files somewhere (where?)
>
> What we usually do is that we have a distribution sub-module that
> gather everything (sources, etc), and this is what we distribute on
> the web site (see
> http://directory.apache.org/apacheds/2.0/downloads.html for instance,
> the binaries are provided for convenience, what is important is the
> last package,
> http://directory.apache.org/apacheds/2.0/download/download-sources.html)
Unfortunately the provided link does not seem to be working (also mirror
change does not): when going directly to
http://www.apache.org/dist/directory/apacheds/stable/2.0/2.0.0-M6/, I
cannot find any sources package.
The only one I was able to find by browsing that repo is
http://www.apache.org/dist/directory/apacheds/unstable/1.5/1.5.7/apacheds-sources-1.5.7.zip.
Anyway, I've also taken a look at
http://openjpa.apache.org/downloads.html (source).
> In the long run, that would help you by avoiding those manual steps.
>
> In any case, the packages have to be stored in
> /www/www.apache.org/dist/incubator/syncope (see other incubator
> projects). You will have to copy them by hand (atm).
>
> You can copy the sources tarballs on your public apache directory
> (people.apache.org, public.html directory), and provide the link for
> the vote.
Fine: so first I will store these files in
http://people.apache.org/~ilgrosso/ for the vote.
Once (and if) the vote has passed, someone will move such files to
/www/www.apache.org/dist/incubator/syncope.
>>> "Before voting +1 PMC members are required to download the signed
>>> source code package, compile it as provided, and test the resulting
>>> executable on their own platform, along with also verifying that the
>>> package contains the required contents
>>> <http://www.apache.org/dev/release.html#what-must-every-release-contain>."
>>>
>>> From
>>> http://www.apache.org/dev/release.html#what-must-every-release-contain
>>> :
>>>
>>> "Every ASF release *must* contain a source package, which must be
>>> sufficient for a user to build and test the release provided they
>>> have access to the appropriate platform and tools."
>>>
>>> Also the NOTICE file (which IMO should be found in the root of every
>>> package, but maybe having it in META-INF is enough) should contain
>>> references to third party components, such as activiti.org,
>>> SpringFramework, AspectJ (with the associated license, as it has 3
>>> diffrerent licenses for this project, depending on the version -
>>> MPL1.1 for 1.0, CPL1.0 for 1.1 to 1.5.1, EPL1.0 for 1.5.22), XStream
>>> (as requested by their license, you must include it), Quartz,
>>> Groovy, SLF4J, LogBack, connid (even if it's a Tirasa product,
>>> unless you find out a way to make it ASL 2.0 instead of CDDL...),
>>> junit, h2 (which requires a few files to be added), Javassist with
>>> the selected license, as it's available under MPL, LGPL or ASL (wtf
>>> javassist guys? Can't you pick ASL2.0 and get rid of the others ?
>>> ;), plus a mention of the other ASF project you are using, but this
>>> is not required.
>>
>> NOTICE file is included, alongside with LICENSE, in all artifacts
>> (see SYNCOPE-3).
> Yes, I saw. I was wondering if we should not provide them at the top
> level, instead of having them in META_INF
Apache parent POM 10 puts such files under META-INF, because of
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-remote-resources-plugin</artifactId>
<executions>
<execution>
<goals>
<goal>process</goal>
</goals>
<configuration>
<resourceBundles>
<resourceBundle>org.apache:apache-jar-resource-bundle:1.4</resourceBundle>
</resourceBundles>
</configuration>
</execution>
</executions>
</plugin>
>> About non ASL-2.0 dependencies, we already went through the process
>> of "reducing to ASL 2.0" as much as possible (the biggest move was
>> from Hibernate to OpenJPA), so I don't think there is room for more
>> replacement.
> This is not an issue. Every ASL 2.0 compatible licenses are fine (ie,
> MPL, CDDL, BSD, EPL,...) as soon as you mention their origin. If you
> use a third party software which is released under a ASL 2.0 license,
> then adding a mention in the NOTICE that you are using "Blah Software,
> released under an ASL 2.0 License" just helps the potential users, who
> won't have to dig the web for the third part license.
>>
>> Anyway, it seems that SYNCOPE-2 should be re-opened, since NOTICE
>> file was not filled - as you report above: I'll do this right away.
> Sorry that I waited for the release to be done to check the result. As
> I said, I was off for the week-end, otherwise I would have gave a hand...
>>
>>> Yes, yes, I know, I'm a PITA...
>>
>> Eh eh eh, I felt like it was too much easy to jump to the first
>> incubating release... ;-)
> Actually, you did a good job. I'm pretty sure that beside the few
> remaining points, the release is correct.
>
> In any case, be sure to read carefully
> http://www.apache.org/dev/release.html. If you have any question, feel
> free to ask.
A last question: what about the current vote / svn tag / staging
repository? What's the best practice in such cases?
I mean, should we simply remove svn tag, drop staging repository, fix
these release issues and then start from scratch with a new RC1 or
should we instead go with RC2?
Thanks.
Regards.
--
Francesco Chicchiriccò
Apache Cocoon PMC and Apache Syncope PPMC Member
http://people.apache.org/~ilgrosso/
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 4/24/12 12:20 PM, Francesco Chicchiriccò a écrit :
> On 24/04/2012 12:04, Emmanuel Lécharny wrote:
>> Sorry guys, but atm, I will -1 this release. (keep in mind that a -1
>> is *not* a veto when it comes to releases)
>>
>> I'd like to have a way to download a package containing all tghe
>> sources, being able to tar xzpf it, and build it to obtain the bin.
>> So far, either I svn co the sourcs fro SVN, or I have to grab the
>> signed jars in
>> https://repository.apache.org/content/repositories/orgapachesyncope-083/,
>> but then I'm facing many sub directories with signed source jars
>> which don't allow me to build the project.
>
> Hi Emmanuel,
> would it be enough to:
>
> 1. svn export of the release tag
> 2. tar zcvf
> 3. generate needed signatures (asc, md5, sha1, ...)
> 4. put these files somewhere (where?)
What we usually do is that we have a distribution sub-module that gather
everything (sources, etc), and this is what we distribute on the web
site (see http://directory.apache.org/apacheds/2.0/downloads.html for
instance, the binaries are provided for convenience, what is important
is the last package,
http://directory.apache.org/apacheds/2.0/download/download-sources.html)
In the long run, that would help you by avoiding those manual steps.
In any case, the packages have to be stored in
/www/www.apache.org/dist/incubator/syncope (see other incubator
projects). You will have to copy them by hand (atm).
You can copy the sources tarballs on your public apache directory
(people.apache.org, public.html directory), and provide the link for the
vote.
>
>> "Before voting +1 PMC members are required to download the signed
>> source code package, compile it as provided, and test the resulting
>> executable on their own platform, along with also verifying that the
>> package contains the required contents
>> <http://www.apache.org/dev/release.html#what-must-every-release-contain>."
>>
>> From
>> http://www.apache.org/dev/release.html#what-must-every-release-contain :
>>
>> "Every ASF release *must* contain a source package, which must be
>> sufficient for a user to build and test the release provided they
>> have access to the appropriate platform and tools."
>>
>> Also the NOTICE file (which IMO should be found in the root of every
>> package, but maybe having it in META-INF is enough) should contain
>> references to third party components, such as activiti.org,
>> SpringFramework, AspectJ (with the associated license, as it has 3
>> diffrerent licenses for this project, depending on the version -
>> MPL1.1 for 1.0, CPL1.0 for 1.1 to 1.5.1, EPL1.0 for 1.5.22), XStream
>> (as requested by their license, you must include it), Quartz, Groovy,
>> SLF4J, LogBack, connid (even if it's a Tirasa product, unless you
>> find out a way to make it ASL 2.0 instead of CDDL...), junit, h2
>> (which requires a few files to be added), Javassist with the selected
>> license, as it's available under MPL, LGPL or ASL (wtf javassist
>> guys? Can't you pick ASL2.0 and get rid of the others ? ;), plus a
>> mention of the other ASF project you are using, but this is not
>> required.
>
> NOTICE file is included, alongside with LICENSE, in all artifacts (see
> SYNCOPE-3).
Yes, I saw. I was wondering if we should not provide them at the top
level, instead of having them in META_INF
>
> About non ASL-2.0 dependencies, we already went through the process of
> "reducing to ASL 2.0" as much as possible (the biggest move was from
> Hibernate to OpenJPA), so I don't think there is room for more
> replacement.
This is not an issue. Every ASL 2.0 compatible licenses are fine (ie,
MPL, CDDL, BSD, EPL,...) as soon as you mention their origin. If you use
a third party software which is released under a ASL 2.0 license, then
adding a mention in the NOTICE that you are using "Blah Software,
released under an ASL 2.0 License" just helps the potential users, who
won't have to dig the web for the third part license.
>
> Anyway, it seems that SYNCOPE-2 should be re-opened, since NOTICE file
> was not filled - as you report above: I'll do this right away.
Sorry that I waited for the release to be done to check the result. As I
said, I was off for the week-end, otherwise I would have gave a hand...
>
>> Yes, yes, I know, I'm a PITA...
>
> Eh eh eh, I felt like it was too much easy to jump to the first
> incubating release... ;-)
Actually, you did a good job. I'm pretty sure that beside the few
remaining points, the release is correct.
In any case, be sure to read carefully
http://www.apache.org/dev/release.html. If you have any question, feel
free to ask.
Hope it helps !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Francesco Chicchiriccò <il...@apache.org>.
On 24/04/2012 12:04, Emmanuel Lécharny wrote:
> Sorry guys, but atm, I will -1 this release. (keep in mind that a -1
> is *not* a veto when it comes to releases)
>
> I'd like to have a way to download a package containing all tghe
> sources, being able to tar xzpf it, and build it to obtain the bin. So
> far, either I svn co the sourcs fro SVN, or I have to grab the signed
> jars in
> https://repository.apache.org/content/repositories/orgapachesyncope-083/,
> but then I'm facing many sub directories with signed source jars which
> don't allow me to build the project.
Hi Emmanuel,
would it be enough to:
1. svn export of the release tag
2. tar zcvf
3. generate needed signatures (asc, md5, sha1, ...)
4. put these files somewhere (where?)
> "Before voting +1 PMC members are required to download the signed
> source code package, compile it as provided, and test the resulting
> executable on their own platform, along with also verifying that the
> package contains the required contents
> <http://www.apache.org/dev/release.html#what-must-every-release-contain>."
>
> From
> http://www.apache.org/dev/release.html#what-must-every-release-contain :
>
> "Every ASF release *must* contain a source package, which must be
> sufficient for a user to build and test the release provided they have
> access to the appropriate platform and tools."
>
> Also the NOTICE file (which IMO should be found in the root of every
> package, but maybe having it in META-INF is enough) should contain
> references to third party components, such as activiti.org,
> SpringFramework, AspectJ (with the associated license, as it has 3
> diffrerent licenses for this project, depending on the version -
> MPL1.1 for 1.0, CPL1.0 for 1.1 to 1.5.1, EPL1.0 for 1.5.22), XStream
> (as requested by their license, you must include it), Quartz, Groovy,
> SLF4J, LogBack, connid (even if it's a Tirasa product, unless you find
> out a way to make it ASL 2.0 instead of CDDL...), junit, h2 (which
> requires a few files to be added), Javassist with the selected
> license, as it's available under MPL, LGPL or ASL (wtf javassist guys?
> Can't you pick ASL2.0 and get rid of the others ? ;), plus a mention
> of the other ASF project you are using, but this is not required.
NOTICE file is included, alongside with LICENSE, in all artifacts (see
SYNCOPE-3).
About non ASL-2.0 dependencies, we already went through the process of
"reducing to ASL 2.0" as much as possible (the biggest move was from
Hibernate to OpenJPA), so I don't think there is room for more replacement.
Anyway, it seems that SYNCOPE-2 should be re-opened, since NOTICE file
was not filled - as you report above: I'll do this right away.
> Yes, yes, I know, I'm a PITA...
Eh eh eh, I felt like it was too much easy to jump to the first
incubating release... ;-)
Regards.
--
Francesco Chicchiriccò
Apache Cocoon PMC and Apache Syncope PPMC Member
http://people.apache.org/~ilgrosso/
Re: [VOTE] Release Syncope version 1.0.0-RC1-incubating
Posted by Emmanuel Lécharny <el...@gmail.com>.
Sorry guys, but atm, I will -1 this release. (keep in mind that a -1 is
*not* a veto when it comes to releases)
I'd like to have a way to download a package containing all tghe
sources, being able to tar xzpf it, and build it to obtain the bin. So
far, either I svn co the sourcs fro SVN, or I have to grab the signed
jars in
https://repository.apache.org/content/repositories/orgapachesyncope-083/, but
then I'm facing many sub directories with signed source jars which don't
allow me to build the project.
"Before voting +1 PMC members are required to download the signed source
code package, compile it as provided, and test the resulting executable
on their own platform, along with also verifying that the package
contains the required contents
<http://www.apache.org/dev/release.html#what-must-every-release-contain>."
>From
http://www.apache.org/dev/release.html#what-must-every-release-contain :
"Every ASF release *must* contain a source package, which must be
sufficient for a user to build and test the release provided they have
access to the appropriate platform and tools."
Also the NOTICE file (which IMO should be found in the root of every
package, but maybe having it in META-INF is enough) should contain
references to third party components, such as activiti.org,
SpringFramework, AspectJ (with the associated license, as it has 3
diffrerent licenses for this project, depending on the version - MPL1.1
for 1.0, CPL1.0 for 1.1 to 1.5.1, EPL1.0 for 1.5.22), XStream (as
requested by their license, you must include it), Quartz, Groovy, SLF4J,
LogBack, connid (even if it's a Tirasa product, unless you find out a
way to make it ASL 2.0 instead of CDDL...), junit, h2 (which requires a
few files to be added), Javassist with the selected license, as it's
available under MPL, LGPL or ASL (wtf javassist guys? Can't you pick
ASL2.0 and get rid of the others ? ;), plus a mention of the other ASF
project you are using, but this is not required.
Yes, yes, I know, I'm a PITA...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com