Apache NiFi NAR Maven Plugin 1.3.1 RC1 Release Helper Guide

[Bryan Bende <bb...@apache.org>]

Hello Apache NiFi community,

Please find the associated guidance to help those interested in
validating/verifying the release so they can vote.

# Download latest KEYS file:
https://dist.apache.org/repos/dist/dev/nifi/KEYS

# Import keys file:
gpg --import KEYS

# [optional] Clear out local maven artifact repository

# Pull down nifi-nar-maven-plugin-1.3.1 source release artifacts for review:

wget https://dist.apache.org/repos/dist/dev/nifi/nifi-nar-maven-plugin-1.3.1/nifi-nar-maven-plugin-1.3.1-source-release.zip
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-nar-maven-plugin-1.3.1/nifi-nar-maven-plugin-1.3.1-source-release.zip.asc
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-nar-maven-plugin-1.3.1/nifi-nar-maven-plugin-1.3.1-source-release.zip.sha256
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-nar-maven-plugin-1.3.1/nifi-nar-maven-plugin-1.3.1-source-release.zip.sha512

# Verify the signature
gpg --verify -v nifi-nar-maven-plugin-1.3.1-source-release.zip.asc

# Verify the hashes (sha256, sha512) match the source and what was
provided in the vote email thread
shasum -a 256 nifi-nar-maven-plugin-1.3.1-source-release.zip
shasum -a 512 nifi-nar-maven-plugin-1.3.1-source-release.zip

# Unzip nifi-nar-maven-plugin-1.3.1-source-release.zip

# Verify the build works including release audit tool (RAT) checks
cd nifi-nar-maven-plugin-1.3.1
mvn clean install -Pcontrib-check

# Verify the contents contain a good README, NOTICE, and LICENSE.

# Verify the git commit ID is correct

# Verify the RC was branched off the correct git commit ID

# Verify that NiFi can build NARs correctly using the plugin

- Update NiFi's root pom to use version 1.3.1 of the plugin
https://github.com/apache/nifi/blob/master/pom.xml#L491

- Perform a build of NiFi, optionally clear out local .m2 repo
mvn clean install

- Ensure that NiFi starts and loads all processors, controller
services, and reporting tasks

- Spot check a few NARs to ensure they include
META-INF/docs/extension-manifest.xml
cp NIFI_HOME/lib/nifi-xyz-bundle.nar /tmp
cd /tmp
unzip nifi-xyz-bundle.nar
cat META-INF/docs/extension-manifest.xml

# Send a response to the vote thread indicating a +1, 0, -1 based on
your findings.

Thank you for your time and effort to validate the release!

Re: Apache NiFi NAR Maven Plugin 1.3.1 RC1 Release Helper Guide

[Bryan Bende <bb...@gmail.com>]

Meant to add that if you plan to test building with a clean M2 repo,
then there is one small change needed on the NiFi side which is in
this PR:

https://github.com/apache/nifi/pull/3463

On Thu, May 9, 2019 at 2:53 PM Bryan Bende <bb...@apache.org> wrote:
>
> Hello Apache NiFi community,
>
> Please find the associated guidance to help those interested in
> validating/verifying the release so they can vote.
>
> # Download latest KEYS file:
> https://dist.apache.org/repos/dist/dev/nifi/KEYS
>
> # Import keys file:
> gpg --import KEYS
>
> # [optional] Clear out local maven artifact repository
>
> # Pull down nifi-nar-maven-plugin-1.3.1 source release artifacts for review:
>
> wget https://dist.apache.org/repos/dist/dev/nifi/nifi-nar-maven-plugin-1.3.1/nifi-nar-maven-plugin-1.3.1-source-release.zip
> wget https://dist.apache.org/repos/dist/dev/nifi/nifi-nar-maven-plugin-1.3.1/nifi-nar-maven-plugin-1.3.1-source-release.zip.asc
> wget https://dist.apache.org/repos/dist/dev/nifi/nifi-nar-maven-plugin-1.3.1/nifi-nar-maven-plugin-1.3.1-source-release.zip.sha256
> wget https://dist.apache.org/repos/dist/dev/nifi/nifi-nar-maven-plugin-1.3.1/nifi-nar-maven-plugin-1.3.1-source-release.zip.sha512
>
> # Verify the signature
> gpg --verify -v nifi-nar-maven-plugin-1.3.1-source-release.zip.asc
>
> # Verify the hashes (sha256, sha512) match the source and what was
> provided in the vote email thread
> shasum -a 256 nifi-nar-maven-plugin-1.3.1-source-release.zip
> shasum -a 512 nifi-nar-maven-plugin-1.3.1-source-release.zip
>
> # Unzip nifi-nar-maven-plugin-1.3.1-source-release.zip
>
> # Verify the build works including release audit tool (RAT) checks
> cd nifi-nar-maven-plugin-1.3.1
> mvn clean install -Pcontrib-check
>
> # Verify the contents contain a good README, NOTICE, and LICENSE.
>
> # Verify the git commit ID is correct
>
> # Verify the RC was branched off the correct git commit ID
>
> # Verify that NiFi can build NARs correctly using the plugin
>
> - Update NiFi's root pom to use version 1.3.1 of the plugin
> https://github.com/apache/nifi/blob/master/pom.xml#L491
>
> - Perform a build of NiFi, optionally clear out local .m2 repo
> mvn clean install
>
> - Ensure that NiFi starts and loads all processors, controller
> services, and reporting tasks
>
> - Spot check a few NARs to ensure they include
> META-INF/docs/extension-manifest.xml
> cp NIFI_HOME/lib/nifi-xyz-bundle.nar /tmp
> cd /tmp
> unzip nifi-xyz-bundle.nar
> cat META-INF/docs/extension-manifest.xml
>
> # Send a response to the vote thread indicating a +1, 0, -1 based on
> your findings.
>
> Thank you for your time and effort to validate the release!