You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@druid.apache.org by Kashif Faraz <kf...@apache.org> on 2022/11/26 09:21:53 UTC
[VOTE] Release Apache Druid 24.0.2 [RC1]
Hi
I have created a build for Apache Druid 24.0.2, release candidate 1.
Thanks to everyone who has helped contribute to the release! You can read
the proposed release notes here:
https://github.com/apache/druid/issues/13435
The release candidate has been tagged in GitHub as druid-24.0.2-rc1
(13c9fdcbafcf61211a9381892615c4b4db6a3535),
available here:
https://github.com/apache/druid/releases/tag/druid-24.0.2-rc1
The artifacts to be voted on are located here:
https://dist.apache.org/repos/dist/dev/druid/24.0.2-rc1/
A staged Maven repository is available for review at:
https://repository.apache.org/content/repositories/orgapachedruid-1037/
A Docker image containing the binary of the release candidate can be
retrieved via:
docker pull apache/druid:24.0.2-rc1
Artifact checksums:
src:
1ca1ea4b9a4418813fc22cdba2626725f802ff886e118b9986b89e8a6df9fe304a0fb0eca1370a1c937ac5b136448c8157d58b1f79712347ca5cb67f7f034cfc
bin:
ca22923d0c1b60803289ada2be6c7e74b41641e95e3ad36fb625edd71c62d29f5203221062e5bf7af8199075bbc46606ec3ae8b559b455e1ecfc990f0e669f55
docker:
e96ae3293242e90e0a78be128c0d12325b8a6fc5c68ce2f2bc53de3aac568bbf
Release artifacts are signed with the following key:
https://people.apache.org/keys/committer/kfaraz.asc
This key and the key of other committers can also be found in the project's
KEYS file here:
https://dist.apache.org/repos/dist/release/druid/KEYS
(If you are a committer, please feel free to add your own key to that file
by following the instructions in the file's header.)
Verify checksums:
diff <(shasum -a512 apache-druid-24.0.2-src.tar.gz | \
cut -d ' ' -f1) \
<(cat apache-druid-24.0.2-src.tar.gz.sha512 ; echo)
diff <(shasum -a512 apache-druid-24.0.2-bin.tar.gz | \
cut -d ' ' -f1) \
<(cat apache-druid-24.0.2-bin.tar.gz.sha512 ; echo)
Verify signatures:
gpg --verify apache-druid-24.0.2-src.tar.gz.asc \
apache-druid-24.0.2-src.tar.gz
gpg --verify apache-druid-24.0.2-bin.tar.gz.asc \
apache-druid-24.0.2-bin.tar.gz
Please review the proposed artifacts and vote. Note that Apache has
specific requirements that must be met before +1 binding votes can be cast
by PMC members. Please refer to the policy at
http://www.apache.org/legal/release-policy.html#policy for more details.
As part of the validation process, the release artifacts can be generated
from source by running:
mvn clean install -Papache-release,dist -Dgpg.skip
The RAT license check can be run from source by:
mvn apache-rat:check -Prat
This vote will be open for at least 72 hours. The vote will pass if a
majority of at least three +1 PMC votes are cast.
[ ] +1 Release this package as Apache Druid 24.0.2
[ ] 0 I don't feel strongly about it, but I'm okay with the release
[ ] -1 Do not release this package because...
Thanks
Kashif
Re: [VOTE] Release Apache Druid 24.0.2 [RC1]
Posted by Clint Wylie <cw...@apache.org>.
+1 (binding)
src package:
- verified signature/checksum
- LICENSE/NOTICE present
- RAT check passed
- built binary distribution, ran into an issue with CVE-2022-1471
failing on druid-kubernetes-extensions, I don't think this needs to be
a blocker
- tested msq ingestion in binary distribution, successfully ran some queries
bin package:
- verified signature/checksum
- LICENSE/NOTICE present
- test native ingest example data and successfully ran some queries
docker:
- verified checksum
- distribution/docker-compose.yml looks like only the coordinator
version was updated to 24.0.2, the others are 24.0.1,
https://github.com/apache/druid/blob/24.0.2/distribution/docker/docker-compose.yml#L68
I don't think this needs to be a blocker
- tested native ingestion (msq extension still not enabled by
default), ran queries
On Tue, Nov 29, 2022 at 2:56 AM Abhishek Agarwal
<ab...@imply.io.invalid> wrote:
>
> +1 (binding)
>
> src package:
> - verified signature/checksum
> - LICENSE/NOTICE present
> - built binary distribution, Loaded example wikipedia dataset and ran some
> queries
>
> binary package:
> - verified signature/checksum
> - LICENSE/NOTICE present
> - Loaded example wikipedia dataset and ran some queries
>
> docker:
> - verified checksum
> - started cluster with docker-compose, Loaded example wikipedia dataset and
> ran some queries
>
> On Tue, Nov 29, 2022 at 2:00 PM Laksh Singla <la...@imply.io.invalid>
> wrote:
>
> > +1 (non-binding)
> > Verified that https://github.com/apache/druid/pull/13138 is included and
> > working in the build.
> >
> > Regards
> > Laksh
> >
> > The https://github.com/apache/druid/pull/13138 is
> >
> > On Sat, Nov 26, 2022 at 2:52 PM Kashif Faraz <kf...@apache.org> wrote:
> >
> > > Hi
> > >
> > > I have created a build for Apache Druid 24.0.2, release candidate 1.
> > >
> > > Thanks to everyone who has helped contribute to the release! You can read
> > > the proposed release notes here:
> > > https://github.com/apache/druid/issues/13435
> > >
> > > The release candidate has been tagged in GitHub as druid-24.0.2-rc1
> > > (13c9fdcbafcf61211a9381892615c4b4db6a3535),
> > > available here:
> > > https://github.com/apache/druid/releases/tag/druid-24.0.2-rc1
> > >
> > > The artifacts to be voted on are located here:
> > > https://dist.apache.org/repos/dist/dev/druid/24.0.2-rc1/
> > >
> > > A staged Maven repository is available for review at:
> > > https://repository.apache.org/content/repositories/orgapachedruid-1037/
> > >
> > > A Docker image containing the binary of the release candidate can be
> > > retrieved via:
> > > docker pull apache/druid:24.0.2-rc1
> > >
> > > Artifact checksums:
> > > src:
> > >
> > >
> > 1ca1ea4b9a4418813fc22cdba2626725f802ff886e118b9986b89e8a6df9fe304a0fb0eca1370a1c937ac5b136448c8157d58b1f79712347ca5cb67f7f034cfc
> > > bin:
> > >
> > >
> > ca22923d0c1b60803289ada2be6c7e74b41641e95e3ad36fb625edd71c62d29f5203221062e5bf7af8199075bbc46606ec3ae8b559b455e1ecfc990f0e669f55
> > > docker:
> > > e96ae3293242e90e0a78be128c0d12325b8a6fc5c68ce2f2bc53de3aac568bbf
> > >
> > > Release artifacts are signed with the following key:
> > > https://people.apache.org/keys/committer/kfaraz.asc
> > >
> > > This key and the key of other committers can also be found in the
> > project's
> > > KEYS file here:
> > > https://dist.apache.org/repos/dist/release/druid/KEYS
> > >
> > > (If you are a committer, please feel free to add your own key to that
> > file
> > > by following the instructions in the file's header.)
> > >
> > > Verify checksums:
> > > diff <(shasum -a512 apache-druid-24.0.2-src.tar.gz | \
> > > cut -d ' ' -f1) \
> > > <(cat apache-druid-24.0.2-src.tar.gz.sha512 ; echo)
> > >
> > > diff <(shasum -a512 apache-druid-24.0.2-bin.tar.gz | \
> > > cut -d ' ' -f1) \
> > > <(cat apache-druid-24.0.2-bin.tar.gz.sha512 ; echo)
> > >
> > > Verify signatures:
> > > gpg --verify apache-druid-24.0.2-src.tar.gz.asc \
> > > apache-druid-24.0.2-src.tar.gz
> > >
> > > gpg --verify apache-druid-24.0.2-bin.tar.gz.asc \
> > > apache-druid-24.0.2-bin.tar.gz
> > >
> > > Please review the proposed artifacts and vote. Note that Apache has
> > > specific requirements that must be met before +1 binding votes can be
> > cast
> > > by PMC members. Please refer to the policy at
> > > http://www.apache.org/legal/release-policy.html#policy for more details.
> > >
> > > As part of the validation process, the release artifacts can be generated
> > > from source by running:
> > > mvn clean install -Papache-release,dist -Dgpg.skip
> > >
> > > The RAT license check can be run from source by:
> > > mvn apache-rat:check -Prat
> > >
> > > This vote will be open for at least 72 hours. The vote will pass if a
> > > majority of at least three +1 PMC votes are cast.
> > >
> > > [ ] +1 Release this package as Apache Druid 24.0.2
> > > [ ] 0 I don't feel strongly about it, but I'm okay with the release
> > > [ ] -1 Do not release this package because...
> > >
> > >
> > > Thanks
> > > Kashif
> > >
> >
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@druid.apache.org
For additional commands, e-mail: dev-help@druid.apache.org
Re: [VOTE] Release Apache Druid 24.0.2 [RC1]
Posted by Abhishek Agarwal <ab...@imply.io.INVALID>.
+1 (binding)
src package:
- verified signature/checksum
- LICENSE/NOTICE present
- built binary distribution, Loaded example wikipedia dataset and ran some
queries
binary package:
- verified signature/checksum
- LICENSE/NOTICE present
- Loaded example wikipedia dataset and ran some queries
docker:
- verified checksum
- started cluster with docker-compose, Loaded example wikipedia dataset and
ran some queries
On Tue, Nov 29, 2022 at 2:00 PM Laksh Singla <la...@imply.io.invalid>
wrote:
> +1 (non-binding)
> Verified that https://github.com/apache/druid/pull/13138 is included and
> working in the build.
>
> Regards
> Laksh
>
> The https://github.com/apache/druid/pull/13138 is
>
> On Sat, Nov 26, 2022 at 2:52 PM Kashif Faraz <kf...@apache.org> wrote:
>
> > Hi
> >
> > I have created a build for Apache Druid 24.0.2, release candidate 1.
> >
> > Thanks to everyone who has helped contribute to the release! You can read
> > the proposed release notes here:
> > https://github.com/apache/druid/issues/13435
> >
> > The release candidate has been tagged in GitHub as druid-24.0.2-rc1
> > (13c9fdcbafcf61211a9381892615c4b4db6a3535),
> > available here:
> > https://github.com/apache/druid/releases/tag/druid-24.0.2-rc1
> >
> > The artifacts to be voted on are located here:
> > https://dist.apache.org/repos/dist/dev/druid/24.0.2-rc1/
> >
> > A staged Maven repository is available for review at:
> > https://repository.apache.org/content/repositories/orgapachedruid-1037/
> >
> > A Docker image containing the binary of the release candidate can be
> > retrieved via:
> > docker pull apache/druid:24.0.2-rc1
> >
> > Artifact checksums:
> > src:
> >
> >
> 1ca1ea4b9a4418813fc22cdba2626725f802ff886e118b9986b89e8a6df9fe304a0fb0eca1370a1c937ac5b136448c8157d58b1f79712347ca5cb67f7f034cfc
> > bin:
> >
> >
> ca22923d0c1b60803289ada2be6c7e74b41641e95e3ad36fb625edd71c62d29f5203221062e5bf7af8199075bbc46606ec3ae8b559b455e1ecfc990f0e669f55
> > docker:
> > e96ae3293242e90e0a78be128c0d12325b8a6fc5c68ce2f2bc53de3aac568bbf
> >
> > Release artifacts are signed with the following key:
> > https://people.apache.org/keys/committer/kfaraz.asc
> >
> > This key and the key of other committers can also be found in the
> project's
> > KEYS file here:
> > https://dist.apache.org/repos/dist/release/druid/KEYS
> >
> > (If you are a committer, please feel free to add your own key to that
> file
> > by following the instructions in the file's header.)
> >
> > Verify checksums:
> > diff <(shasum -a512 apache-druid-24.0.2-src.tar.gz | \
> > cut -d ' ' -f1) \
> > <(cat apache-druid-24.0.2-src.tar.gz.sha512 ; echo)
> >
> > diff <(shasum -a512 apache-druid-24.0.2-bin.tar.gz | \
> > cut -d ' ' -f1) \
> > <(cat apache-druid-24.0.2-bin.tar.gz.sha512 ; echo)
> >
> > Verify signatures:
> > gpg --verify apache-druid-24.0.2-src.tar.gz.asc \
> > apache-druid-24.0.2-src.tar.gz
> >
> > gpg --verify apache-druid-24.0.2-bin.tar.gz.asc \
> > apache-druid-24.0.2-bin.tar.gz
> >
> > Please review the proposed artifacts and vote. Note that Apache has
> > specific requirements that must be met before +1 binding votes can be
> cast
> > by PMC members. Please refer to the policy at
> > http://www.apache.org/legal/release-policy.html#policy for more details.
> >
> > As part of the validation process, the release artifacts can be generated
> > from source by running:
> > mvn clean install -Papache-release,dist -Dgpg.skip
> >
> > The RAT license check can be run from source by:
> > mvn apache-rat:check -Prat
> >
> > This vote will be open for at least 72 hours. The vote will pass if a
> > majority of at least three +1 PMC votes are cast.
> >
> > [ ] +1 Release this package as Apache Druid 24.0.2
> > [ ] 0 I don't feel strongly about it, but I'm okay with the release
> > [ ] -1 Do not release this package because...
> >
> >
> > Thanks
> > Kashif
> >
>
Re: [VOTE] Release Apache Druid 24.0.2 [RC1]
Posted by Laksh Singla <la...@imply.io.INVALID>.
+1 (non-binding)
Verified that https://github.com/apache/druid/pull/13138 is included and
working in the build.
Regards
Laksh
The https://github.com/apache/druid/pull/13138 is
On Sat, Nov 26, 2022 at 2:52 PM Kashif Faraz <kf...@apache.org> wrote:
> Hi
>
> I have created a build for Apache Druid 24.0.2, release candidate 1.
>
> Thanks to everyone who has helped contribute to the release! You can read
> the proposed release notes here:
> https://github.com/apache/druid/issues/13435
>
> The release candidate has been tagged in GitHub as druid-24.0.2-rc1
> (13c9fdcbafcf61211a9381892615c4b4db6a3535),
> available here:
> https://github.com/apache/druid/releases/tag/druid-24.0.2-rc1
>
> The artifacts to be voted on are located here:
> https://dist.apache.org/repos/dist/dev/druid/24.0.2-rc1/
>
> A staged Maven repository is available for review at:
> https://repository.apache.org/content/repositories/orgapachedruid-1037/
>
> A Docker image containing the binary of the release candidate can be
> retrieved via:
> docker pull apache/druid:24.0.2-rc1
>
> Artifact checksums:
> src:
>
> 1ca1ea4b9a4418813fc22cdba2626725f802ff886e118b9986b89e8a6df9fe304a0fb0eca1370a1c937ac5b136448c8157d58b1f79712347ca5cb67f7f034cfc
> bin:
>
> ca22923d0c1b60803289ada2be6c7e74b41641e95e3ad36fb625edd71c62d29f5203221062e5bf7af8199075bbc46606ec3ae8b559b455e1ecfc990f0e669f55
> docker:
> e96ae3293242e90e0a78be128c0d12325b8a6fc5c68ce2f2bc53de3aac568bbf
>
> Release artifacts are signed with the following key:
> https://people.apache.org/keys/committer/kfaraz.asc
>
> This key and the key of other committers can also be found in the project's
> KEYS file here:
> https://dist.apache.org/repos/dist/release/druid/KEYS
>
> (If you are a committer, please feel free to add your own key to that file
> by following the instructions in the file's header.)
>
> Verify checksums:
> diff <(shasum -a512 apache-druid-24.0.2-src.tar.gz | \
> cut -d ' ' -f1) \
> <(cat apache-druid-24.0.2-src.tar.gz.sha512 ; echo)
>
> diff <(shasum -a512 apache-druid-24.0.2-bin.tar.gz | \
> cut -d ' ' -f1) \
> <(cat apache-druid-24.0.2-bin.tar.gz.sha512 ; echo)
>
> Verify signatures:
> gpg --verify apache-druid-24.0.2-src.tar.gz.asc \
> apache-druid-24.0.2-src.tar.gz
>
> gpg --verify apache-druid-24.0.2-bin.tar.gz.asc \
> apache-druid-24.0.2-bin.tar.gz
>
> Please review the proposed artifacts and vote. Note that Apache has
> specific requirements that must be met before +1 binding votes can be cast
> by PMC members. Please refer to the policy at
> http://www.apache.org/legal/release-policy.html#policy for more details.
>
> As part of the validation process, the release artifacts can be generated
> from source by running:
> mvn clean install -Papache-release,dist -Dgpg.skip
>
> The RAT license check can be run from source by:
> mvn apache-rat:check -Prat
>
> This vote will be open for at least 72 hours. The vote will pass if a
> majority of at least three +1 PMC votes are cast.
>
> [ ] +1 Release this package as Apache Druid 24.0.2
> [ ] 0 I don't feel strongly about it, but I'm okay with the release
> [ ] -1 Do not release this package because...
>
>
> Thanks
> Kashif
>
Re: [VOTE] Release Apache Druid 24.0.2 [RC1]
Posted by Vadim Ogievetsky <vo...@apache.org>.
I vote +1
My checks included:
1. Checksum verified
2. Signature verified
3. Source code compiled (Intel based Mac)
4. Ran through the quickstart and the 60m NYC taxi query (Java 11)
On 2022/11/26 09:21:53 Kashif Faraz wrote:
> Hi
>
> I have created a build for Apache Druid 24.0.2, release candidate 1.
>
> Thanks to everyone who has helped contribute to the release! You can read
> the proposed release notes here:
> https://github.com/apache/druid/issues/13435
>
> The release candidate has been tagged in GitHub as druid-24.0.2-rc1
> (13c9fdcbafcf61211a9381892615c4b4db6a3535),
> available here:
> https://github.com/apache/druid/releases/tag/druid-24.0.2-rc1
>
> The artifacts to be voted on are located here:
> https://dist.apache.org/repos/dist/dev/druid/24.0.2-rc1/
>
> A staged Maven repository is available for review at:
> https://repository.apache.org/content/repositories/orgapachedruid-1037/
>
> A Docker image containing the binary of the release candidate can be
> retrieved via:
> docker pull apache/druid:24.0.2-rc1
>
> Artifact checksums:
> src:
> 1ca1ea4b9a4418813fc22cdba2626725f802ff886e118b9986b89e8a6df9fe304a0fb0eca1370a1c937ac5b136448c8157d58b1f79712347ca5cb67f7f034cfc
> bin:
> ca22923d0c1b60803289ada2be6c7e74b41641e95e3ad36fb625edd71c62d29f5203221062e5bf7af8199075bbc46606ec3ae8b559b455e1ecfc990f0e669f55
> docker:
> e96ae3293242e90e0a78be128c0d12325b8a6fc5c68ce2f2bc53de3aac568bbf
>
> Release artifacts are signed with the following key:
> https://people.apache.org/keys/committer/kfaraz.asc
>
> This key and the key of other committers can also be found in the project's
> KEYS file here:
> https://dist.apache.org/repos/dist/release/druid/KEYS
>
> (If you are a committer, please feel free to add your own key to that file
> by following the instructions in the file's header.)
>
> Verify checksums:
> diff <(shasum -a512 apache-druid-24.0.2-src.tar.gz | \
> cut -d ' ' -f1) \
> <(cat apache-druid-24.0.2-src.tar.gz.sha512 ; echo)
>
> diff <(shasum -a512 apache-druid-24.0.2-bin.tar.gz | \
> cut -d ' ' -f1) \
> <(cat apache-druid-24.0.2-bin.tar.gz.sha512 ; echo)
>
> Verify signatures:
> gpg --verify apache-druid-24.0.2-src.tar.gz.asc \
> apache-druid-24.0.2-src.tar.gz
>
> gpg --verify apache-druid-24.0.2-bin.tar.gz.asc \
> apache-druid-24.0.2-bin.tar.gz
>
> Please review the proposed artifacts and vote. Note that Apache has
> specific requirements that must be met before +1 binding votes can be cast
> by PMC members. Please refer to the policy at
> http://www.apache.org/legal/release-policy.html#policy for more details.
>
> As part of the validation process, the release artifacts can be generated
> from source by running:
> mvn clean install -Papache-release,dist -Dgpg.skip
>
> The RAT license check can be run from source by:
> mvn apache-rat:check -Prat
>
> This vote will be open for at least 72 hours. The vote will pass if a
> majority of at least three +1 PMC votes are cast.
>
> [ ] +1 Release this package as Apache Druid 24.0.2
> [ ] 0 I don't feel strongly about it, but I'm okay with the release
> [ ] -1 Do not release this package because...
>
>
> Thanks
> Kashif
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@druid.apache.org
For additional commands, e-mail: dev-help@druid.apache.org