You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@shiro.apache.org by Les Hazlewood <lh...@apache.org> on 2010/10/30 20:56:48 UTC

Maven release questions

When I was releasing, I followed the guide here (which is referenced
by many other Apache projects):

http://www.apache.org/dev/publishing-maven-artifacts.html

and specifically set up my settings.xml file according to this:

http://www.apache.org/dev/publishing-maven-artifacts.html#settings

However, the 'mvn release:perform' task was still not hands off:

1.  Even though I had my gpg.passphrase property set in my
~/.m2/settings.xml, I was still prompted for it the first time
code-signing was performed (first module in the project).  Afterwards,
I was not prompted for any remaining modules.

Here is the relevant part of my profiles section:

<profiles>
  <profile>
    <id>apache-release</id>
    <properties>
      <gpg.passphrase>MY_GPG_PASSPHRASE_HERE</gpg.passphrase>
    </properties>
  </profile>

2.  Every time a module's site artifact was published to people.a.o, I
was prompted to enter my password, even though I had the following in
my settings.xml:

<servers>
...
  <server>
    <!-- This id matches that in the shiro-root POM's
distributionManagement section -->
    <id>shiro.website</id>
    <username>lhazlewood</username>
    <password>MY_PASSWORD_HERE</password>
    <filePermissions>664</filePermissions>
    <directoryPermissions>775</directoryPermissions>
  </server>
</servers>

This was particularly annoying because it happened for _every_ module :)

Any thoughts as to why I saw this behavior?  Was I doing something
wrong?  I thought I followed the documentation exactly.

Thanks for any ideas!

Les

Re: Maven release questions

Posted by Les Hazlewood <lh...@apache.org>.

Fantastic - thanks Stefan.  I still may want to be prompted for my gpg
passphrase, but I'm grateful to know why it was failing previously.

Thanks!

Les

Re: Maven release questions

Posted by Stefan Seelmann <se...@apache.org>.

Hi Les,

On Sat, Oct 30, 2010 at 8:56 PM, Les Hazlewood <lh...@apache.org> wrote:
> 1.  Even though I had my gpg.passphrase property set in my
> ~/.m2/settings.xml, I was still prompted for it the first time
> code-signing was performed (first module in the project).  Afterwards,
> I was not prompted for any remaining modules.

The shiro-root POM defines maven-gpg-plugin in version 1.0. Try to
update to version 1.1, see [1].

> 2.  Every time a module's site artifact was published to people.a.o, I
> was prompted to enter my password, even though I had the following in
> my settings.xml:
>
> <servers>
> ...
>  <server>
>    <!-- This id matches that in the shiro-root POM's
> distributionManagement section -->
>    <id>shiro.website</id>
>    <username>lhazlewood</username>
>    <password>MY_PASSWORD_HERE</password>
>    <filePermissions>664</filePermissions>
>    <directoryPermissions>775</directoryPermissions>
>  </server>
> </servers>

I use my private key, instead of the username/password.

HTH,
Stefan

[1] http://jira.codehaus.org/browse/MGPG-17