You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mesos.apache.org by id...@apache.org on 2014/11/08 00:26:13 UTC

mesos git commit: Document authentication prerequisites in docs/release-guide.md.

Repository: mesos
Updated Branches:
  refs/heads/master d9f85d7f7 -> 69705dae4


Document authentication prerequisites in docs/release-guide.md.

Review: https://reviews.apache.org/r/27707


Project: http://git-wip-us.apache.org/repos/asf/mesos/repo
Commit: http://git-wip-us.apache.org/repos/asf/mesos/commit/69705dae
Tree: http://git-wip-us.apache.org/repos/asf/mesos/tree/69705dae
Diff: http://git-wip-us.apache.org/repos/asf/mesos/diff/69705dae

Branch: refs/heads/master
Commit: 69705dae49840d19e405bdca7c4150178b35ebb4
Parents: d9f85d7
Author: Ian Downes <id...@twitter.com>
Authored: Thu Nov 6 14:39:35 2014 -0800
Committer: Ian Downes <id...@twitter.com>
Committed: Fri Nov 7 15:25:02 2014 -0800

----------------------------------------------------------------------
 docs/release-guide.md | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/mesos/blob/69705dae/docs/release-guide.md
----------------------------------------------------------------------
diff --git a/docs/release-guide.md b/docs/release-guide.md
index 3aa6262..896dcf1 100644
--- a/docs/release-guide.md
+++ b/docs/release-guide.md
@@ -10,6 +10,42 @@ This guide describes the process of doing an official release of Mesos.
 
 ## Prerequisites
 
+1. Ensure that you have a GPG key or generate a new one, e.g., using `gpg --gen-key`.
+
+2. Add your GPG public key to the Apache Mesos dist repository in the KEYS file.
+  - Fetch the svn repository `svn co https://dist.apache.org/repos/dist/release/mesos`
+  - Append your public key using one of methods described in KEYS,
+    e.g., `(gpg --list-sigs <your name> && gpg --armor --export <your name>) >> KEYS`.
+  - Push the commit: `svn ci`
+
+3. Submit your GPG public key to a keyserver, e.g., [MIT PGP Public Key Server](https://pgp.mit.edu).
+
+4. Add your GPG fingerprint to your [Apache account](https://id.apache.org/).
+
+5. Create a Maven settings file (`~/.m2/settings.xml`) for the Apache
+   servers. Encrypt your Apache password using `mvn --encrypt-password`.
+```
+<settings>
+  <servers>
+    <server>
+      <id>apache.snapshots.https</id>
+      <username>APACHE USERNAME</username>
+      <password>APACHE ENCRYPTED PASSWORD</password>
+    </server>
+    <server>
+      <id>apache.releases.https</id>
+      <username>APACHE USERNAME</username>
+      <password>APACHE ENCRYPTED PASSWORD</password>
+    </server>
+  </servers>
+</settings>
+```
+
+6. Use `gpg-agent` to avoid typing your passphrase repeatedly.
+
+
+## Preparation
+
 1. Go to [Apache Jira](https://issues.apache.org/jira/browse/MESOS) and make sure that
    the CHANGELOG for the release version is up to date.
 
@@ -60,6 +96,7 @@ This guide describes the process of doing an official release of Mesos.
 4. It is not uncommon to release multiple release candidates, with increasing release candidate
    version, if there are bugs found.
 
+5. Update to the *next* Mesos version in `configure.ac`: change `AC_INIT([mesos], [X.Y.Z]))` and commit.
 
 ## Voting the release candidate