You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@linkis.apache.org by pe...@apache.org on 2022/01/11 09:56:09 UTC
[incubator-linkis-website] branch dev updated: update how-to-release.md
This is an automated email from the ASF dual-hosted git repository.
peacewong pushed a commit to branch dev
in repository https://gitbox.apache.org/repos/asf/incubator-linkis-website.git
The following commit(s) were added to refs/heads/dev by this push:
new 70da254 update how-to-release.md
new 1b8678f Merge pull request #99 from casionone/dev
70da254 is described below
commit 70da254b620bdfe8cb5cd73aca5d25156208dabb
Author: casionone <ca...@gmail.com>
AuthorDate: Tue Jan 11 17:32:13 2022 +0800
update how-to-release.md
---
community/how-to-release.md | 38 ++++++++++++++--------
.../current/how-to-release.md | 15 +++++++--
2 files changed, 36 insertions(+), 17 deletions(-)
diff --git a/community/how-to-release.md b/community/how-to-release.md
index 267fffd..63c7956 100644
--- a/community/how-to-release.md
+++ b/community/how-to-release.md
@@ -76,14 +76,14 @@ some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
-# At this time, a dialog box will pop up, asking you to enter the key for this gpg.
-┌────────────────────────────────────────────── ─────┐
-│ Please enter this passphrase to protect your new key │
-│ │
-│ Passphrase: _______ no less than 8 digits ______________ │
-│ Repeat: _______________________________ │
-│ <OK> <Cancel> │
-└────────────────────────────────────────────── ─────┘
+# At this time, a dialog box will pop up, asking you to enter the key for this gpg. you need to remember that it will be used in subsequent steps.
+┌─────────────────────────────────────────────────────┐
+│ Please enter this passphrase to protect your new key│
+│ │
+│ Passphrase: _______ no less than 8 digits _________ │
+│ Repeat: ___________________________________________ │
+│ <OK> <Cancel> │
+└─────────────────────────────────────────────────────┘
#After entering the secret key, a certain random action needs to be performed to generate encrypted prime numbers. After creation, the following information will be output
gpg: key 1AE82584584EE68E marked as ultimately trusted
gpg: revocation certificate stored as'C:/Users/xxx/AppData/Roaming/gnupg/openpgp-revocs.d\E7A9B12D1AC2D8CF857AF5851AE82584584EE68E.rev'
@@ -269,7 +269,8 @@ Step 2.4-3.3 execute the command, merge it in the release.sh script, or execute
### 2.4 Package source code
```shell
-mkdir dist/apache-linkis
+mkdir -p dist/apache-linkis
+#based on the release-1.0.3-rc1 branch to package the source code tar.gz material
git archive --format=tar.gz --output="dist/apache-linkis/apache-linkis-1.0.3-incubating-src.tar.gz" release-1.0.3-rc1
```
### 2.5 Copy binary files
@@ -350,6 +351,14 @@ cd dist/apache-linkis
for i in *.tar.gz; do echo $i; gpg --verify $i.asc $i; done
```
+If something like the following appears, the signature is correct. Keyword: **`Good signature`**
+```shell
+ apache-linkis-xxx-incubating-src.tar.gz
+ gpg: Signature made XXXX
+ gpg: using RSA key XXXXX
+ gpg: Good signature from "xxx @apache.org>"
+````
+
Verify that sha512 is correct as follows:
```shell
cd dist/apache-linkis
@@ -736,13 +745,14 @@ cp apache-linkis-*-incubating-web-bin.tar.gz ../dist/apache-linkis
#step4 Signature
-### Sign the source package/binary package/sha512
+### Sign source/binary packages/sha512
cd ../dist/apache-linkis
-for i in *.tar.gz; do echo $i; gpg --print-md SHA512 $i> $i.sha512; done # Calculate SHA512
-for i in *.tar.gz; do echo $i; gpg --armor --output $i.asc --detach-sig $i; done # Calculate signature
+for i in *.tar.gz; do echo $i; gpg --armor --output $i.asc --detach-sig $i ; done # Calculate signature
+for i in *.tar.gz; do echo $i; sha512sum $i > $i.sha512 ; done # Calculate SHA512
-### Check whether the generated signature/sha512 is correct
-for i in *.tar.gz; do echo $i; gpg --verify $i.asc $i; done
+### Check if the generated signature/sha512 is correct
+for i in *.tar.gz; do echo $i; gpg --verify $i.asc $i ; done
+for i in *.tar.gz; do echo $i; sha512sum --check $i.sha512; done
#step5 Upload to svn
diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs-community/current/how-to-release.md b/i18n/zh-CN/docusaurus-plugin-content-docs-community/current/how-to-release.md
index e278801..c3b3496 100644
--- a/i18n/zh-CN/docusaurus-plugin-content-docs-community/current/how-to-release.md
+++ b/i18n/zh-CN/docusaurus-plugin-content-docs-community/current/how-to-release.md
@@ -80,7 +80,7 @@ some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
-# 此时会弹出对话框，要求为这个gpg输入密钥。
+# 此时会弹出对话框，要求为这个gpg输入密钥，需要记住，后续发布会用到。
┌──────────────────────────────────────────────────────┐
│ Please enter this passphrase to protect your new key │
│ │
@@ -274,7 +274,8 @@ mvn -DskipTests deploy -Prelease -Dmaven.javadoc.skip=true
### 2.4 打包源码
```shell
-mkdir dist/apache-linkis
+mkdir -p dist/apache-linkis
+#基于release-1.0.3-rc1分支打包源码的tar.gz物料
git archive --format=tar.gz --output="dist/apache-linkis/apache-linkis-1.0.3-incubating-src.tar.gz" release-1.0.3-rc1
```
### 2.5 拷贝二进制文件
@@ -354,6 +355,13 @@ for i in *.tar.gz; do echo $i; sha512sum $i > $i.sha512 ; done # 计算SHA512
cd dist/apache-linkis
for i in *.tar.gz; do echo $i; gpg --verify $i.asc $i ; done
```
+出现类似以下内容则说明签名正确，关键字：**`Good signature`**
+```shell
+ apache-linkis-xxx-incubating-src.tar.gz
+ gpg: Signature made XXXX
+ gpg: using RSA key XXXXX
+ gpg: Good signature from "xxx @apache.org>"
+```
验证sha512是否正确如下：
```shell
@@ -756,11 +764,12 @@ cp apache-linkis-*-incubating-web-bin.tar.gz ../dist/apache-linkis
### 对源码包/二进制包进行签名/sha512
cd ../dist/apache-linkis
-for i in *.tar.gz; do echo $i; gpg --print-md SHA512 $i > $i.sha512 ; done # 计算SHA512
for i in *.tar.gz; do echo $i; gpg --armor --output $i.asc --detach-sig $i ; done # 计算签名
+for i in *.tar.gz; do echo $i; sha512sum $i > $i.sha512 ; done # 计算SHA512
### 检查生成的签名/sha512是否正确
for i in *.tar.gz; do echo $i; gpg --verify $i.asc $i ; done
+for i in *.tar.gz; do echo $i; sha512sum --check $i.sha512; done
#step5 上传至svn
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@linkis.apache.org
For additional commands, e-mail: commits-help@linkis.apache.org