You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@calcite.apache.org by fr...@apache.org on 2018/11/16 04:37:24 UTC

calcite-avatica git commit: [CALCITE-2676] Add release script and docker-compose.yml to support building a release using docker [Forced Update!]

Repository: calcite-avatica
Updated Branches:
  refs/heads/master 87fd0a0e6 -> 583da3c16 (forced update)


[CALCITE-2676] Add release script and docker-compose.yml to support building a release using docker


Project: http://git-wip-us.apache.org/repos/asf/calcite-avatica/repo
Commit: http://git-wip-us.apache.org/repos/asf/calcite-avatica/commit/583da3c1
Tree: http://git-wip-us.apache.org/repos/asf/calcite-avatica/tree/583da3c1
Diff: http://git-wip-us.apache.org/repos/asf/calcite-avatica/diff/583da3c1

Branch: refs/heads/master
Commit: 583da3c1618e064eecf56ebee21563bfab7a7f68
Parents: 3f0e5af
Author: Francis Chuang <fr...@apache.org>
Authored: Fri Nov 16 10:05:45 2018 +1100
Committer: Francis Chuang <fr...@apache.org>
Committed: Fri Nov 16 15:36:08 2018 +1100

----------------------------------------------------------------------
 docker-compose.yml  |  44 ++++++++
 release.sh          | 261 +++++++++++++++++++++++++++++++++++++++++++++++
 site/_docs/howto.md |  40 ++++++++
 3 files changed, 345 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/calcite-avatica/blob/583da3c1/docker-compose.yml
----------------------------------------------------------------------
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..a2d9fd4
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,44 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to you under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+version: '3'
+services:
+  dry-run:
+    image: maven:alpine
+    working_dir: /src
+    command: sh -c "./release.sh dry-run"
+    volumes:
+      - .:/src
+      - maven-repo:/root/.m2
+
+  release:
+    image: maven:alpine
+    working_dir: /src
+    command: sh -c "./release.sh release"
+    volumes:
+      - .:/src
+      - maven-repo:/root/.m2
+
+  clean:
+    image: maven:alpine
+    working_dir: /src
+    command: sh -c "./release.sh clean"
+    volumes:
+      - .:/src
+      - maven-repo:/root/.m2
+volumes:
+  maven-repo:
+
+# End docker-compose.yml

http://git-wip-us.apache.org/repos/asf/calcite-avatica/blob/583da3c1/release.sh
----------------------------------------------------------------------
diff --git a/release.sh b/release.sh
new file mode 100644
index 0000000..93a2da1
--- /dev/null
+++ b/release.sh
@@ -0,0 +1,261 @@
+#!/bin/bash
+
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to you under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+function terminate() {
+    printf "\n\nUser terminated build. Exiting...\n"
+    exit 1
+}
+
+trap terminate SIGINT
+
+KEYS=()
+
+init(){
+    apk --no-cache add ca-certificates wget git gnupg
+    wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub
+    wget -q -O /tmp/glibc.apk https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.28-r0/glibc-2.28-r0.apk
+    apk add /tmp/glibc.apk
+}
+
+GPG_COMMAND="gpg2"
+
+get_gpg_keys(){
+    GPG_KEYS=$($GPG_COMMAND --list-keys --with-colons --keyid-format LONG)
+
+    KEY_NUM=1
+
+    KEY_DETAILS=""
+
+    while read -r line; do
+
+        IFS=':' read -ra PART <<< "$line"
+
+        if [ ${PART[0]} == "pub" ]; then
+
+            if [ -n "$KEY_DETAILS" ]; then
+                KEYS[$KEY_NUM]=$KEY_DETAILS
+                KEY_DETAILS=""
+                ((KEY_NUM++))
+
+            fi
+
+            KEY_DETAILS=${PART[4]}
+        fi
+
+        if [ ${PART[0]} == "uid" ]; then
+            KEY_DETAILS="$KEY_DETAILS - ${PART[9]}"
+        fi
+
+    done <<< "$GPG_KEYS"
+
+    if [ -n "$KEY_DETAILS" ]; then
+        KEYS[$KEY_NUM]=$KEY_DETAILS
+    fi
+}
+
+mount_gpg_keys(){
+    mkdir -p /.gnupg
+
+    if [ -z "$(ls -A /.gnupg)" ]; then
+        echo "Please mount the contents of your .gnupg folder into /.gnupg. Exiting..."
+        exit 1
+    fi
+
+    mkdir -p /root/.gnupg
+
+    cp -r /.gnupg/ /root/
+
+    chmod -R 700 /root/.gnupg/
+
+    rm -rf /root/.gnupg/*.lock
+}
+
+SELECTED_GPG_KEY=""
+
+select_gpg_key(){
+
+    get_gpg_keys
+
+    export GPG_TTY=/dev/console
+
+    touch /root/.gnupg/gpg-agent.conf
+    echo 'default-cache-ttl 10000' >> /root/.gnupg/gpg-agent.conf
+    echo 'max-cache-ttl 10000' >> /root/.gnupg/gpg-agent.conf
+
+    echo "Starting GPG agent..."
+    gpg-agent --daemon
+
+    while $INVALID_KEY_SELECTED; do
+
+        if [ "${#KEYS[@]}" -le 0 ]; then
+            echo "You do not have any GPG keys available. Exiting..."
+            exit 1
+        fi
+
+        echo "You have the following GPG keys:"
+
+        for i in "${!KEYS[@]}"; do
+                echo "$i) ${KEYS[$i]}"
+        done
+
+        read -p "Select your GPG key for signing: " KEY_INDEX
+
+        SELECTED_GPG_KEY=$(sed 's/ -.*//' <<< ${KEYS[$KEY_INDEX]})
+
+        if [ -z $SELECTED_GPG_KEY ]; then
+            echo "Selected key is invalid, please try again."
+            continue
+        fi
+
+        echo "Authenticating your GPG key..."
+
+        echo "test" | $GPG_COMMAND --local-user $SELECTED_GPG_KEY --output /dev/null --sign -
+
+        if [ $? != 0 ]; then
+            echo "Invalid GPG passphrase or GPG error. Please try again."
+            continue
+        fi
+
+        echo "You have selected the following GPG key to sign the release:"
+        echo "${KEYS[$KEY_INDEX]}"
+
+        INVALID_CONFIRMATION=true
+
+        while $INVALID_CONFIRMATION; do
+            read -p "Is this correct? (y/n) " CONFIRM
+
+            if [[ ($CONFIRM == "Y") || ($CONFIRM == "y") ]]; then
+                INVALID_KEY_SELECTED=false
+                INVALID_CONFIRMATION=false
+            elif [[ ($CONFIRM == "N") || ($CONFIRM == "n") ]]; then
+                INVALID_CONFIRMATION=false
+            fi
+        done
+    done
+}
+
+RELEASE_VERSION=""
+RC_NUMBER=""
+DEV_VERSION=""
+ASF_USERNAME=""
+
+get_build_configuration(){
+
+    while $NOT_CONFIRMED; do
+        read -p "Enter the version number to be released (example: 1.12.0): " RELEASE_VERSION
+        read -p "Enter the release candidate number (example: if you are releasing rc0, enter 0): " RC_NUMBER
+        read -p "Enter the development version number (example: if your release version is 1.12.0, enter 1.13.0): " DEV_VERSION
+        read -p "Enter your ASF username: " ASF_USERNAME
+        echo "Build configured as follows:"
+        echo "Release: $RELEASE_VERSION-rc$RC_NUMBER"
+        echo "Next development version: $DEV_VERSION-SNAPSHOT"
+        echo "ASF Username: $ASF_USERNAME"
+
+        INVALID_CONFIRMATION=true
+
+        while $INVALID_CONFIRMATION; do
+            read -p "Is this correct? (y/n) " CONFIRM
+
+            if [[ ($CONFIRM == "Y") || ($CONFIRM == "y") ]]; then
+                NOT_CONFIRMED=false
+                INVALID_CONFIRMATION=false
+            elif [[ ($CONFIRM == "N") || ($CONFIRM == "n") ]]; then
+                INVALID_CONFIRMATION=false
+            fi
+        done
+    done
+}
+
+ASF_PASSWORD=""
+
+set_git_credentials(){
+    read -s -p "Enter your ASF password: " ASF_PASSWORD
+
+    printf "\n"
+
+    echo https://$ASF_USERNAME:$ASF_GIT_PASSWORD@git-wip-us.apache.org > /root/.git-credentials
+    git config --global credential.helper 'store --file=/root/.git-credentials'
+}
+
+set_maven_credentials(){
+
+    mkdir -p /root/.m2
+
+    read -s -p "Enter a maven master password (used to encrypt your ASF password): " MAVEN_MASTER_PASSWORD
+
+    printf "\n"
+
+    ENCRYPTED_MAVEN_PASSWORD="$(mvn --encrypt-master-password $MAVEN_MASTER_PASSWORD)"
+
+    cat <<EOF >> /root/.m2/settings-security.xml
+<settingsSecurity>
+  <master>$ENCRYPTED_MAVEN_PASSWORD</master>
+</settingsSecurity>
+EOF
+
+    ENCRYPTED_ASF_PASSWORD="$(mvn --encrypt-password $ASF_PASSWORD)"
+
+    cat <<EOF >> /root/.m2/settings.xml
+<settings>
+  <servers>
+    <server>
+      <id>apache.snapshots.https</id>
+      <username>${ASF_USERNAME}</username>
+      <password>${ENCRYPTED_ASF_PASSWORD}</password>
+    </server>
+    <server>
+      <id>apache.releases.https</id>
+      <username>${ASF_USERNAME}</username>
+      <password>${ENCRYPTED_ASF_PASSWORD}</password>
+    </server>
+  </servers>
+</settings>
+EOF
+}
+
+case $1 in
+    dry-run)
+        init
+        mount_gpg_keys
+        select_gpg_key
+        get_build_configuration
+
+        mvn -Dmaven.artifact.threads=20 -DdryRun=true -DreleaseVersion=$RELEASE_VERSION -DdevelopmentVersion=$DEV_VERSION-SNAPSHOT -Dtag="avatica-$RELEASE_VERSION-rc$RC_NUMBER" -Papache-release -Duser.name=$ASF_USERNAME release:prepare -Darguments="-DskipDockerCheck -Dgpg.keyname=$SELECTED_GPG_KEY"
+        ;;
+
+    release)
+        init
+        mount_gpg_keys
+        select_gpg_key
+        get_build_configuration
+        set_git_credentials
+        set_maven_credentials
+
+        mvn -Dmaven.artifact.threads=20 -DreleaseVersion=$RELEASE_VERSION -DdevelopmentVersion=$DEV_VERSION-SNAPSHOT -Dtag="avatica-$RELEASE_VERSION-rc$RC_NUMBER" -Papache-release -Duser.name=$ASF_USERNAME release:prepare -Darguments=-Dgpg.keyname=$SELECTED_GPG_KEY
+        mvn -Dmaven.artifact.threads=20 -Papache-release -Duser.name=$ASF_USERNAME release:perform -Darguments="-DskipTests"
+        ;;
+
+    clean)
+        init
+        mvn release:clean
+        ;;
+
+    *)
+       echo $"Usage: $0 {dry-run|release|clean}"
+       ;;
+
+esac
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/calcite-avatica/blob/583da3c1/site/_docs/howto.md
----------------------------------------------------------------------
diff --git a/site/_docs/howto.md b/site/_docs/howto.md
index 51e0c5a..5733018 100644
--- a/site/_docs/howto.md
+++ b/site/_docs/howto.md
@@ -202,6 +202,10 @@ that the release process will complete as expected.
 If any of the steps fail, clean up (see below), fix the problem, and
 start again from the top.
 
+To perform the dry-run, you can either use your environment or the release script and docker.
+
+### To perform the dry-run directly in your environment:
+
 {% highlight bash %}
 # Make sure that there are no junk files in the sandbox
 git clean -xn
@@ -214,7 +218,22 @@ git clean -xn
 
 # If you have multiple GPG keys, you can select the key used to sign the release by appending `-Dgpg.keyname=${your.key.id}` to `-Darguments`:
 ./mvnw -DdryRun=true -DreleaseVersion=X.Y.Z -DdevelopmentVersion=X2.Y2.Z2-SNAPSHOT -Dtag=avatica-X.Y.Z-rcN -Papache-release -Duser.name=${asf.username} release:prepare -Darguments="-DskipDockerCheck -Dgpg.keyname=${your.key.id}"
+{% endhighlight %}
+
+### To perform the dry-run in docker:
+
+* You will need to have [docker](https://docs.docker.com/install/) and [Docker Compose](https://docs.docker.com/compose/install/) installed.
 
+* The script expects you to mount your `~/.gnupg` directory into the `/.gnupg` directory in the container. Once mounted into the container,
+the script will make a copy of the contents and move it to a different location, so that it will not modify the contents of your original
+`~/.gnupg` directory during the build.
+
+{% highlight bash %}
+# On Linux:
+docker-compose run -v ~/.gnupg:/.gnupg dry-run
+
+# On Windows
+docker-compose run -v /c/Users/username/AppData/Roaming/gnupg:/.gnupg dry-run
 {% endhighlight %}
 
 Check the artifacts:
@@ -242,12 +261,22 @@ Check the artifacts:
 If something is not correct, you can invoke the `release:clean` mojo to remove the
 generated files from your workspace:
 
+### If you are building directly in your environment:
+
 {% highlight bash %}
 ./mvnw release:clean
 {% endhighlight %}
 
+### If you are building using docker:
+
+{% highlight bash %}
+docker-compose run clean
+{% endhighlight %}
+
 If successful, remove the `-DdryRun` flag and run the release for real.
 
+### To build directly in your environment:
+
 {% highlight bash %}
 # Prepare sets the version numbers, creates a tag, and pushes it to git.
 # Typically we increment minor version: If X.Y.Z is 1.11.0, X2.Y2.Z2 is 1.12.0.
@@ -262,6 +291,17 @@ If successful, remove the `-DdryRun` flag and run the release for real.
 ./mvnw -Papache-release -Duser.name=${asf.username} release:perform -Darguments="-DskipTests"
 {% endhighlight %}
 
+### To build using docker:
+
+{% highlight bash %}
+# On Linux:
+docker-compose run -v ~/.gnupg:/.gnupg release
+
+# On Windows
+docker-compose run -v /c/Users/username/AppData/Roaming/gnupg:/.gnupg release
+{% endhighlight %}
+
+
 Verify the staged artifacts in the Nexus repository:
 
 * Go to [https://repository.apache.org/](https://repository.apache.org/) and login