You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@bloodhound.apache.org by Hans Polak <hp...@polak.es> on 2015/08/05 10:07:11 UTC
Fwd: Re: KEYS
-------- Forwarded Message --------
Subject: Re: KEYS
Date: Tue, 4 Aug 2015 11:47:17 -0700
From: Ryan J Ollos <rj...@apache.org>
To: Hans Polak <hp...@polak.es>
CC: Gary Martin <Ga...@wandisco.com>
On Tue, Aug 4, 2015 at 4:20 AM, Hans Polak <hpolak@polak.es
<ma...@polak.es>> wrote:
Hi!
I've downloaded the Bloodhound 0.8 tar file and, for the very first
time, I've tried to verify a file. I'd like to briefly tell you the
problems I've encountered.
On the http://bloodhound.apache.org/ page, there's a link to the tar
file
http://www.apache.org/dyn/closer.cgi/bloodhound/apache-bloodhound-0.8.tar.gz
1. This page contains information about the download and about the
verification.... but it doesn't contain links to the asc files, nor
the keys file.
2. I found the asc file here: http://www.eu.apache.org/dist/bloodhound/
3. I found the keys file here:
https://dist.apache.org/repos/dist/dev/bloodhound/KEYS
I'd like to suggest that the verification section include links to
these files.
Yours sincerely,
Hans Polak
Hi Hans,
Thank you for the email. I'm not very involved in the Bloodhound project
these days. Could you please forward your email to the users@ mailing list?
https://issues.apache.org/bloodhound/wiki/BloodhoundContactInfo
Thanks,
- Ryan
Re: Fwd: Re: KEYS
Posted by Gary <ga...@physics.org>.
Hi everyone,
Sorry to take so long over this but if a jobs is worth doing, it may as
well be done well.
It seems that we may be missing a trick with providing our own project
specific download page that makes use of a script to set the download
location to one of the mirrors and also allow selection of alternative
mirrors.
This would allow us to put links for the other necessary artefacts on
such a page and make it easier for users to verify the release. I have
therefore been working on a download page that I expect to commit a bit
later this evening. I am not sure I have the best setup to verify that
the mirror selection scripts and download link substitution will work
until they are served live though. I'll avoid updating links on the main
page until we are happy that it is likely to work.
Cheers,
Gary
On 05/08/15 13:14, Gary wrote:
> Excellent, I guess you have done some of that work for me then!
>
> It may still be considered an oversight on our part though. I need to
> check further but a lot of projects I have checked have a
> downloads.cgi or similar page. At worst we should be able to copy that
> approach as these seem duty bound to show the KEYS file and list asc
> files for each release.
>
> I'll see what I can do about that a bit later today.
>
> Cheers,
> Gary
>
>
> On 05/08/15 12:35, Hans Polak wrote:
>> When I was investigating this, I noticed this was a generic template.
>> So, yes, I think this would benefit other ASF projects as well.
>>
>> Cheers,
>> Hans
>>
>> On 08/05/2015 01:26 PM, Gary wrote:
>>> On 05/08/15 09:07, Hans Polak wrote:
>>>>
>>>>
>>>> -------- Forwarded Message --------
>>>> Subject: Re: KEYS
>>>> Date: Tue, 4 Aug 2015 11:47:17 -0700
>>>> From: Ryan J Ollos <rj...@apache.org>
>>>> To: Hans Polak <hp...@polak.es>
>>>> CC: Gary Martin <Ga...@wandisco.com>
>>>>
>>>>
>>>>
>>>> On Tue, Aug 4, 2015 at 4:20 AM, Hans Polak <hpolak@polak.es
>>>> <ma...@polak.es>> wrote:
>>>>
>>>>
>>>> Hi!
>>>>
>>>> I've downloaded the Bloodhound 0.8 tar file and, for the very first
>>>> time, I've tried to verify a file. I'd like to briefly tell you the
>>>> problems I've encountered.
>>>>
>>>> On the http://bloodhound.apache.org/ page, there's a link to the
>>>> tar
>>>> file
>>>> http://www.apache.org/dyn/closer.cgi/bloodhound/apache-bloodhound-0.8.tar.gz
>>>>
>>>>
>>>> 1. This page contains information about the download and about the
>>>> verification.... but it doesn't contain links to the asc files, nor
>>>> the keys file.
>>>> 2. I found the asc file here:
>>>> http://www.eu.apache.org/dist/bloodhound/
>>>> 3. I found the keys file here:
>>>> https://dist.apache.org/repos/dist/dev/bloodhound/KEYS
>>>>
>>>> I'd like to suggest that the verification section include links to
>>>> these files.
>>>>
>>>> Yours sincerely,
>>>> Hans Polak
>>>>
>>>>
>>>> Hi Hans,
>>>>
>>>> Thank you for the email. I'm not very involved in the Bloodhound
>>>> project these days. Could you please forward your email to the
>>>> users@ mailing list?
>>>> https://issues.apache.org/bloodhound/wiki/BloodhoundContactInfo
>>>>
>>>> Thanks,
>>>> - Ryan
>>>>
>>>>
>>>>
>>>>
>>>
>>> Hi Hans,
>>>
>>> Thank you for the suggestion. If I correctly interpret the page you
>>> mean, it is possible that we can't directly control the display of
>>> the download page. Of course, if that is the case, your suggestion
>>> might well benefit all ASF projects which could be a very nice result!
>>>
>>> We should try to confirm that we are not doing anything different to
>>> other ASF projects in this area. I think it is also worth our while
>>> considering work-arounds as we should encourage users to verify the
>>> download.
>>>
>>> Many thanks again.
>>>
>>> Cheers,
>>> Gary
>>
>
Re: Fwd: Re: KEYS
Posted by Gary <ga...@physics.org>.
Excellent, I guess you have done some of that work for me then!
It may still be considered an oversight on our part though. I need to
check further but a lot of projects I have checked have a downloads.cgi
or similar page. At worst we should be able to copy that approach as
these seem duty bound to show the KEYS file and list asc files for each
release.
I'll see what I can do about that a bit later today.
Cheers,
Gary
On 05/08/15 12:35, Hans Polak wrote:
> When I was investigating this, I noticed this was a generic template.
> So, yes, I think this would benefit other ASF projects as well.
>
> Cheers,
> Hans
>
> On 08/05/2015 01:26 PM, Gary wrote:
>> On 05/08/15 09:07, Hans Polak wrote:
>>>
>>>
>>> -------- Forwarded Message --------
>>> Subject: Re: KEYS
>>> Date: Tue, 4 Aug 2015 11:47:17 -0700
>>> From: Ryan J Ollos <rj...@apache.org>
>>> To: Hans Polak <hp...@polak.es>
>>> CC: Gary Martin <Ga...@wandisco.com>
>>>
>>>
>>>
>>> On Tue, Aug 4, 2015 at 4:20 AM, Hans Polak <hpolak@polak.es
>>> <ma...@polak.es>> wrote:
>>>
>>>
>>> Hi!
>>>
>>> I've downloaded the Bloodhound 0.8 tar file and, for the very first
>>> time, I've tried to verify a file. I'd like to briefly tell you the
>>> problems I've encountered.
>>>
>>> On the http://bloodhound.apache.org/ page, there's a link to the tar
>>> file
>>> http://www.apache.org/dyn/closer.cgi/bloodhound/apache-bloodhound-0.8.tar.gz
>>>
>>>
>>> 1. This page contains information about the download and about the
>>> verification.... but it doesn't contain links to the asc files, nor
>>> the keys file.
>>> 2. I found the asc file here:
>>> http://www.eu.apache.org/dist/bloodhound/
>>> 3. I found the keys file here:
>>> https://dist.apache.org/repos/dist/dev/bloodhound/KEYS
>>>
>>> I'd like to suggest that the verification section include links to
>>> these files.
>>>
>>> Yours sincerely,
>>> Hans Polak
>>>
>>>
>>> Hi Hans,
>>>
>>> Thank you for the email. I'm not very involved in the Bloodhound
>>> project these days. Could you please forward your email to the
>>> users@ mailing list?
>>> https://issues.apache.org/bloodhound/wiki/BloodhoundContactInfo
>>>
>>> Thanks,
>>> - Ryan
>>>
>>>
>>>
>>>
>>
>> Hi Hans,
>>
>> Thank you for the suggestion. If I correctly interpret the page you
>> mean, it is possible that we can't directly control the display of
>> the download page. Of course, if that is the case, your suggestion
>> might well benefit all ASF projects which could be a very nice result!
>>
>> We should try to confirm that we are not doing anything different to
>> other ASF projects in this area. I think it is also worth our while
>> considering work-arounds as we should encourage users to verify the
>> download.
>>
>> Many thanks again.
>>
>> Cheers,
>> Gary
>
Re: Fwd: Re: KEYS
Posted by Hans Polak <hp...@polak.es>.
When I was investigating this, I noticed this was a generic template.
So, yes, I think this would benefit other ASF projects as well.
Cheers,
Hans
On 08/05/2015 01:26 PM, Gary wrote:
> On 05/08/15 09:07, Hans Polak wrote:
>>
>>
>> -------- Forwarded Message --------
>> Subject: Re: KEYS
>> Date: Tue, 4 Aug 2015 11:47:17 -0700
>> From: Ryan J Ollos <rj...@apache.org>
>> To: Hans Polak <hp...@polak.es>
>> CC: Gary Martin <Ga...@wandisco.com>
>>
>>
>>
>> On Tue, Aug 4, 2015 at 4:20 AM, Hans Polak <hpolak@polak.es
>> <ma...@polak.es>> wrote:
>>
>>
>> Hi!
>>
>> I've downloaded the Bloodhound 0.8 tar file and, for the very first
>> time, I've tried to verify a file. I'd like to briefly tell you the
>> problems I've encountered.
>>
>> On the http://bloodhound.apache.org/ page, there's a link to the tar
>> file
>> http://www.apache.org/dyn/closer.cgi/bloodhound/apache-bloodhound-0.8.tar.gz
>>
>>
>> 1. This page contains information about the download and about the
>> verification.... but it doesn't contain links to the asc files, nor
>> the keys file.
>> 2. I found the asc file here:
>> http://www.eu.apache.org/dist/bloodhound/
>> 3. I found the keys file here:
>> https://dist.apache.org/repos/dist/dev/bloodhound/KEYS
>>
>> I'd like to suggest that the verification section include links to
>> these files.
>>
>> Yours sincerely,
>> Hans Polak
>>
>>
>> Hi Hans,
>>
>> Thank you for the email. I'm not very involved in the Bloodhound
>> project these days. Could you please forward your email to the users@
>> mailing list?
>> https://issues.apache.org/bloodhound/wiki/BloodhoundContactInfo
>>
>> Thanks,
>> - Ryan
>>
>>
>>
>>
>
> Hi Hans,
>
> Thank you for the suggestion. If I correctly interpret the page you
> mean, it is possible that we can't directly control the display of the
> download page. Of course, if that is the case, your suggestion might
> well benefit all ASF projects which could be a very nice result!
>
> We should try to confirm that we are not doing anything different to
> other ASF projects in this area. I think it is also worth our while
> considering work-arounds as we should encourage users to verify the
> download.
>
> Many thanks again.
>
> Cheers,
> Gary
Re: Fwd: Re: KEYS
Posted by Gary <ga...@physics.org>.
On 05/08/15 09:07, Hans Polak wrote:
>
>
> -------- Forwarded Message --------
> Subject: Re: KEYS
> Date: Tue, 4 Aug 2015 11:47:17 -0700
> From: Ryan J Ollos <rj...@apache.org>
> To: Hans Polak <hp...@polak.es>
> CC: Gary Martin <Ga...@wandisco.com>
>
>
>
> On Tue, Aug 4, 2015 at 4:20 AM, Hans Polak <hpolak@polak.es
> <ma...@polak.es>> wrote:
>
>
> Hi!
>
> I've downloaded the Bloodhound 0.8 tar file and, for the very first
> time, I've tried to verify a file. I'd like to briefly tell you the
> problems I've encountered.
>
> On the http://bloodhound.apache.org/ page, there's a link to the tar
> file
> http://www.apache.org/dyn/closer.cgi/bloodhound/apache-bloodhound-0.8.tar.gz
>
> 1. This page contains information about the download and about the
> verification.... but it doesn't contain links to the asc files, nor
> the keys file.
> 2. I found the asc file here:
> http://www.eu.apache.org/dist/bloodhound/
> 3. I found the keys file here:
> https://dist.apache.org/repos/dist/dev/bloodhound/KEYS
>
> I'd like to suggest that the verification section include links to
> these files.
>
> Yours sincerely,
> Hans Polak
>
>
> Hi Hans,
>
> Thank you for the email. I'm not very involved in the Bloodhound
> project these days. Could you please forward your email to the users@
> mailing list?
> https://issues.apache.org/bloodhound/wiki/BloodhoundContactInfo
>
> Thanks,
> - Ryan
>
>
>
>
Hi Hans,
Thank you for the suggestion. If I correctly interpret the page you
mean, it is possible that we can't directly control the display of the
download page. Of course, if that is the case, your suggestion might
well benefit all ASF projects which could be a very nice result!
We should try to confirm that we are not doing anything different to
other ASF projects in this area. I think it is also worth our while
considering work-arounds as we should encourage users to verify the
download.
Many thanks again.
Cheers,
Gary