You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Christopher Schultz <ch...@christopherschultz.net> on 2018/11/02 12:59:02 UTC

Release Manager for 8.5.x

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

All,

I'd like to volunteer to RM for the 8.5.x series.

At ApacheCon in Montréal, markt indicated that he would certainly
appreciate someone taking-over the great work that he has been doing
as RM since the very first 8.5.x release.

It's going to take me some time to get to the point where I can
competently execute the whole release cycle, update all the artifacts,
etc., so I'm going to try to "shadow" Mark as he does the next few
releases until I can do it myself without screwing it up.

Is there anything written about performing a release other than what's
on this page?
https://wiki.apache.org/tomcat/ReleaseProcess

That one seems to be fairly 7.0.x-specific, but probably not very far
off from what would be required for an 8.5.x release.

Thanks,
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=1VtQ
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: Release Manager for 8.5.x

Posted by Jim Jagielski <ji...@jaguNET.com>.

> On Nov 2, 2018, at 9:59 AM, Mark Thomas <ma...@apache.org> wrote:
> 
> On 02/11/2018 13:56, Jim Jagielski wrote:
>> If you sign and add it to the KEYS file, you should be fine.
> 
> Indeed. Also, you signing it is sufficient for it to be included in the
> web of trust but I'd be happy to sign it additionally if you ping me
> when it is ready.

Same here


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: Release Manager for 8.5.x

Posted by Mark Thomas <ma...@apache.org>.
On 02/11/2018 13:56, Jim Jagielski wrote:
> If you sign and add it to the KEYS file, you should be fine.

Indeed. Also, you signing it is sufficient for it to be included in the
web of trust but I'd be happy to sign it additionally if you ping me
when it is ready.

Mark

>> On Nov 2, 2018, at 9:13 AM, Christopher Schultz <ch...@christopherschultz.net> wrote:
>>
> All,
> 
> It looks like I'll need a PGP key used for code-signing in order to RM.
> 
> I can create a new PGP key for myself, but it won't be in the web of
> trust. Some of the folks on this list have signed my personal PGP key
> in the past at various events. If I sign this new key with my existing
> personal key, will the PMC accept my key for RM purposes (and sign it)?
> 
> The following Tomcat committers have signed my personal key in the past:
> 
> csutherl
> jfclere
> jim
> markt
> 
> I also have signatures from several well-known ASFers:
> 
> bdelacretaz
> kmcgrail
> ke4qqq
> nick
> rbowen
> sctemme
> 
> Also, should I create a new subkey of my current key[1] for
> signing-only, or should I create a completely new key for signing-only?

Your choice, I think.

Mark


> 
> Thanks,
> -chris
> 
> [1] https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E <https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E>
> 
> On 11/2/18 08:59, Christopher Schultz wrote:
>>>> All,
>>>>
>>>> I'd like to volunteer to RM for the 8.5.x series.
>>>>
>>>> At ApacheCon in Montréal, markt indicated that he would certainly 
>>>> appreciate someone taking-over the great work that he has been
>>>> doing as RM since the very first 8.5.x release.
>>>>
>>>> It's going to take me some time to get to the point where I can 
>>>> competently execute the whole release cycle, update all the
>>>> artifacts, etc., so I'm going to try to "shadow" Mark as he does
>>>> the next few releases until I can do it myself without screwing it
>>>> up.
>>>>
>>>> Is there anything written about performing a release other than
>>>> what's on this page? https://wiki.apache.org/tomcat/ReleaseProcess
>>>>
>>>> That one seems to be fairly 7.0.x-specific, but probably not very
>>>> far off from what would be required for an 8.5.x release.
>>>>
>>>> Thanks, -chris
>>>>
>>>> ---------------------------------------------------------------------
>>>>
>>>>
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org <ma...@tomcat.apache.org>
>>>> For additional commands, e-mail: dev-help@tomcat.apache.org <ma...@tomcat.apache.org>
>>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org <ma...@tomcat.apache.org>
>> For additional commands, e-mail: dev-help@tomcat.apache.org <ma...@tomcat.apache.org>
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: Release Manager for 8.5.x

Posted by Jim Jagielski <ji...@jaguNET.com>.
If you sign and add it to the KEYS file, you should be fine.

> On Nov 2, 2018, at 9:13 AM, Christopher Schultz <ch...@christopherschultz.net> wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> All,
> 
> It looks like I'll need a PGP key used for code-signing in order to RM.
> 
> I can create a new PGP key for myself, but it won't be in the web of
> trust. Some of the folks on this list have signed my personal PGP key
> in the past at various events. If I sign this new key with my existing
> personal key, will the PMC accept my key for RM purposes (and sign it)?
> 
> The following Tomcat committers have signed my personal key in the past:
> 
> csutherl
> jfclere
> jim
> markt
> 
> I also have signatures from several well-known ASFers:
> 
> bdelacretaz
> kmcgrail
> ke4qqq
> nick
> rbowen
> sctemme
> 
> Also, should I create a new subkey of my current key[1] for
> signing-only, or should I create a completely new key for signing-only?
> 
> Thanks,
> - -chris
> 
> [1] https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E <https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E>
> 
> On 11/2/18 08:59, Christopher Schultz wrote:
>> All,
>> 
>> I'd like to volunteer to RM for the 8.5.x series.
>> 
>> At ApacheCon in Montréal, markt indicated that he would certainly 
>> appreciate someone taking-over the great work that he has been
>> doing as RM since the very first 8.5.x release.
>> 
>> It's going to take me some time to get to the point where I can 
>> competently execute the whole release cycle, update all the
>> artifacts, etc., so I'm going to try to "shadow" Mark as he does
>> the next few releases until I can do it myself without screwing it
>> up.
>> 
>> Is there anything written about performing a release other than
>> what's on this page? https://wiki.apache.org/tomcat/ReleaseProcess
>> 
>> That one seems to be fairly 7.0.x-specific, but probably not very
>> far off from what would be required for an 8.5.x release.
>> 
>> Thanks, -chris
>> 
>> ---------------------------------------------------------------------
>> 
>> 
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org <ma...@tomcat.apache.org>
>> For additional commands, e-mail: dev-help@tomcat.apache.org <ma...@tomcat.apache.org>
>> 
> -----BEGIN PGP SIGNATURE-----
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ <https://www.enigmail.net/>
> 
> iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvcTWgACgkQHPApP6U8
> pFjM2A//VQwojNUjFacPc3jiV3tvveeXVMNzW2aRFcF0Rgb68+X0hg9Sqb9kbMpQ
> V2bfFXZzWp5Ztok/xSiq6lVpG8gkeDUYejEj7+v8XaqLFJph8EJUVyUveiVM/Ne0
> Gmr7DrxDXw8PQlYTEGMnNqw+Ck2YEz/GXisujS5LAQCu5pyABeUA7MhwyVUZU8np
> inaQxmI3Dvkm9rCrDn2euhHuF5X3A3YHgPyxys7hAc2nGBVX+Z7FNlgmSpp0csCM
> M6VatnAuG1g11ANBR8MnnEL0UCqNy8kRWvQx58qROHiF3M/Cl3yMbZZ04ZL5hCIH
> O8H5OyBfGBvl5O7hI9nZxPM8Amh2yzLG02Un5yyUekSpO9MkO+m05A7q4zTE3m7y
> 0HRqLRr8VBEHz3dTNgVfV3NPR/M8BjU1UY+GxwEWrtHeKhDkEsV920k+h5vQLE3u
> Yteeiwf9qHCrS9qEto3wzbztBPLmKe73zOOiNTdJUcRZ3/D2FEaVAwklS/Qto5B6
> wwsikK3O0S53a3HpLG85FQtv6AjCCTb3FSXSO5Oey52IsaLXNQ+4QetHyhSJAWeQ
> jcwPz9R8O57ApJH2RKb8FN/etLx4yIUyRzHTR+vbITCcskdPlnhC4vfoqW63978K
> Y5PZ+djuh5w9jotO4xf7ysw59XxkEmvJuG/3TI0ubnIc5cpgDtc=
> =4BcN
> -----END PGP SIGNATURE-----
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org <ma...@tomcat.apache.org>
> For additional commands, e-mail: dev-help@tomcat.apache.org <ma...@tomcat.apache.org>

Re: Release Manager for 8.5.x

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

All,

It looks like I'll need a PGP key used for code-signing in order to RM.

I can create a new PGP key for myself, but it won't be in the web of
trust. Some of the folks on this list have signed my personal PGP key
in the past at various events. If I sign this new key with my existing
personal key, will the PMC accept my key for RM purposes (and sign it)?

The following Tomcat committers have signed my personal key in the past:

csutherl
jfclere
jim
markt

I also have signatures from several well-known ASFers:

bdelacretaz
kmcgrail
ke4qqq
nick
rbowen
sctemme

Also, should I create a new subkey of my current key[1] for
signing-only, or should I create a completely new key for signing-only?

Thanks,
- -chris

[1] https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E

On 11/2/18 08:59, Christopher Schultz wrote:
> All,
> 
> I'd like to volunteer to RM for the 8.5.x series.
> 
> At ApacheCon in Montréal, markt indicated that he would certainly 
> appreciate someone taking-over the great work that he has been
> doing as RM since the very first 8.5.x release.
> 
> It's going to take me some time to get to the point where I can 
> competently execute the whole release cycle, update all the
> artifacts, etc., so I'm going to try to "shadow" Mark as he does
> the next few releases until I can do it myself without screwing it
> up.
> 
> Is there anything written about performing a release other than
> what's on this page? https://wiki.apache.org/tomcat/ReleaseProcess
> 
> That one seems to be fairly 7.0.x-specific, but probably not very
> far off from what would be required for an 8.5.x release.
> 
> Thanks, -chris
> 
> ---------------------------------------------------------------------
>
> 
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
> 
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvcTWgACgkQHPApP6U8
pFjM2A//VQwojNUjFacPc3jiV3tvveeXVMNzW2aRFcF0Rgb68+X0hg9Sqb9kbMpQ
V2bfFXZzWp5Ztok/xSiq6lVpG8gkeDUYejEj7+v8XaqLFJph8EJUVyUveiVM/Ne0
Gmr7DrxDXw8PQlYTEGMnNqw+Ck2YEz/GXisujS5LAQCu5pyABeUA7MhwyVUZU8np
inaQxmI3Dvkm9rCrDn2euhHuF5X3A3YHgPyxys7hAc2nGBVX+Z7FNlgmSpp0csCM
M6VatnAuG1g11ANBR8MnnEL0UCqNy8kRWvQx58qROHiF3M/Cl3yMbZZ04ZL5hCIH
O8H5OyBfGBvl5O7hI9nZxPM8Amh2yzLG02Un5yyUekSpO9MkO+m05A7q4zTE3m7y
0HRqLRr8VBEHz3dTNgVfV3NPR/M8BjU1UY+GxwEWrtHeKhDkEsV920k+h5vQLE3u
Yteeiwf9qHCrS9qEto3wzbztBPLmKe73zOOiNTdJUcRZ3/D2FEaVAwklS/Qto5B6
wwsikK3O0S53a3HpLG85FQtv6AjCCTb3FSXSO5Oey52IsaLXNQ+4QetHyhSJAWeQ
jcwPz9R8O57ApJH2RKb8FN/etLx4yIUyRzHTR+vbITCcskdPlnhC4vfoqW63978K
Y5PZ+djuh5w9jotO4xf7ysw59XxkEmvJuG/3TI0ubnIc5cpgDtc=
=4BcN
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: Release Manager for 8.5.x

Posted by Violeta Georgieva <vi...@apache.org>.
Hi Chris,

На пт, 2.11.2018 г. в 22:58 ч. Christopher Schultz <
chris@christopherschultz.net> написа:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Mark,
>
> On 11/2/18 10:04, Mark Thomas wrote:
> > On 02/11/2018 12:59, Christopher Schultz wrote:
> >> All,
> >>
> >> I'd like to volunteer to RM for the 8.5.x series.
> >
> > Excellent.
> >
> >> At ApacheCon in Montréal, markt indicated that he would
> >> certainly appreciate someone taking-over the great work that he
> >> has been doing as RM since the very first 8.5.x release.
> >>
> >> It's going to take me some time to get to the point where I can
> >> competently execute the whole release cycle, update all the
> >> artifacts, etc., so I'm going to try to "shadow" Mark as he does
> >> the next few releases until I can do it myself without screwing
> >> it up.
> >>
> >> Is there anything written about performing a release other than
> >> what's on this page?
> >> https://wiki.apache.org/tomcat/ReleaseProcess
> >>
> >> That one seems to be fairly 7.0.x-specific, but probably not very
> >> far off from what would be required for an 8.5.x release.

I think that the only additional step to these described on the wiki
is for the code signing service
https://github.com/apache/tomcat85/blob/trunk/BUILDING.txt#L284

Regards,
Violeta

> >
> > There are probably some details missing and/or assumptions that
> > should be documented. This looks like a good opportunity to fix
> > those.
> >
> > How do you want to do this?
> >
> > I'm ready to tag 9.0.x and close to tagging 8.5.x. I just need to
> > run the tests for 8.5.x.
>
> Why don't you handle the November release and I'll see if I can go
> through all the motions. That way I won't hold-up the release and any
> questions I have will probably be fresh in your head.
>
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
>
> iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvcuo8ACgkQHPApP6U8
> pFhM0Q//d3Wrho/ZzulDvj2sAq9j+0iYeFCrYkZA5myGRONWoG6sK35hMg3J3Vjk
> Hhu0b+vEUWiSrEOqdeh1DdDVW2y59jk8fY7/J2nM/tVB//5+noH52uwMpNTgVRth
> qkcOgE2SyHWcziKnhlEOsfku3L/OAVfE7NTZ5PmUjmyi3kIZlynCCNkRHCS0cV5w
> l+EaTwf1PTYBJ8NLAqhJKvpjUrPeN0QY8IxbqFk0xhcfKyQTs/5XJqXwHqXy29G2
> AD9SbV0q8qIziO1jDoRuTuFDvZMOCteblJvS3EGvWA5iNLdMuVRHN3udv8vhMFHX
> S+fc3lAzRN3hQTE5hOA/V868perCpwqSW3FSHievMEuw/DUoddCHYW3/06IvrDS4
> gCgxmChcpVBy5ZqkcYTYy17JtrnFYnHBYvnuzYba7uPfJaKNBBNwCeJ+/dxzxjk/
> Y21P1plP43C3U7we+9idkVu6CJ2lIenf3gRT08P5UYQQfEwHC6niCT25vHZQ8PG+
> 5+0z2LG6TTEqjCaUPumS05gB/oSwZN7gRXY0dWE4WyznAjmvXv6ksO88H3cLwyiJ
> 9vvX2cC85Q3Yb1iCLMIS8HgnmVRZt4dTO8suh+H+hK+xUdzVpac4Dm7YZY03bzmF
> CCojLHICka4oRf4auKE+Fr9s3gIOz/DFAdqbPXBjV+PBy0hY1w4=
> =AT6u
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org

Re: Release Manager for 8.5.x

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Mark,

On 11/2/18 10:04, Mark Thomas wrote:
> On 02/11/2018 12:59, Christopher Schultz wrote:
>> All,
>> 
>> I'd like to volunteer to RM for the 8.5.x series.
> 
> Excellent.
> 
>> At ApacheCon in Montréal, markt indicated that he would
>> certainly appreciate someone taking-over the great work that he
>> has been doing as RM since the very first 8.5.x release.
>> 
>> It's going to take me some time to get to the point where I can 
>> competently execute the whole release cycle, update all the
>> artifacts, etc., so I'm going to try to "shadow" Mark as he does
>> the next few releases until I can do it myself without screwing
>> it up.
>> 
>> Is there anything written about performing a release other than
>> what's on this page? 
>> https://wiki.apache.org/tomcat/ReleaseProcess
>> 
>> That one seems to be fairly 7.0.x-specific, but probably not very
>> far off from what would be required for an 8.5.x release.
> 
> There are probably some details missing and/or assumptions that
> should be documented. This looks like a good opportunity to fix
> those.
> 
> How do you want to do this?
> 
> I'm ready to tag 9.0.x and close to tagging 8.5.x. I just need to
> run the tests for 8.5.x.

Why don't you handle the November release and I'll see if I can go
through all the motions. That way I won't hold-up the release and any
questions I have will probably be fresh in your head.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=AT6u
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: Release Manager for 8.5.x

Posted by Mark Thomas <ma...@apache.org>.
On 02/11/2018 12:59, Christopher Schultz wrote:
> All,
> 
> I'd like to volunteer to RM for the 8.5.x series.

Excellent.

> At ApacheCon in Montréal, markt indicated that he would certainly
> appreciate someone taking-over the great work that he has been doing
> as RM since the very first 8.5.x release.
> 
> It's going to take me some time to get to the point where I can
> competently execute the whole release cycle, update all the artifacts,
> etc., so I'm going to try to "shadow" Mark as he does the next few
> releases until I can do it myself without screwing it up.
> 
> Is there anything written about performing a release other than what's
> on this page?
> https://wiki.apache.org/tomcat/ReleaseProcess
> 
> That one seems to be fairly 7.0.x-specific, but probably not very far
> off from what would be required for an 8.5.x release.

There are probably some details missing and/or assumptions that should
be documented. This looks like a good opportunity to fix those.

How do you want to do this?

I'm ready to tag 9.0.x and close to tagging 8.5.x. I just need to run
the tests for 8.5.x.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org