This is an automated email from the ASF dual-hosted git repository. meonkeys pushed a commit to branch release-doc-fixes in repository https://gitbox.apache.org/repos/asf/fineract.git
commit a145e2a10c6b639a1f2c4f4d462695e7b73c76de Author: Adam Monsen <[email protected]> AuthorDate: Tue Jul 15 16:11:27 2025 -0700 WIP --- .../docs/en/chapters/release/process-step06.adoc | 11 ++++++++++- .../docs/en/chapters/release/process-step09.adoc | 23 ++++++++++++++++++++++ 2 files changed, 33 insertions(+), 1 deletion(-) diff --git a/fineract-doc/src/docs/en/chapters/release/process-step06.adoc b/fineract-doc/src/docs/en/chapters/release/process-step06.adoc index 4367e014a4..d692ace94b 100644 --- a/fineract-doc/src/docs/en/chapters/release/process-step06.adoc +++ b/fineract-doc/src/docs/en/chapters/release/process-step06.adoc @@ -27,7 +27,16 @@ Make sure to do some sanity checks. The source tarball and the code in the relea % diff -r fineract apache-fineract-{revnumber} ---- -Make sure the code compiles and tests pass on the uncompressed source. Do as much testing as you can and share what you did. Ideally you'd build code and docs and run every possible test and check, but https://github.com/apache/fineract/actions[running everything has complex dependencies, caches, and takes many hours]. It is rarely done in practice offline / local / on developer machines. But please, go ahead and run the test and doc tasks, and more! Grab a cup of coffee and run everythi [...] +// FIXME - add output example + +Make sure the code compiles and tests pass on the uncompressed source. Do as much testing as you can and share what you did. Here's the bare minimum check: + +[source,bash,subs="attributes+"] +---- +% ./gradlew build -x test -x doc +---- + +Ideally you'd build code and docs and run every possible test and check, but https://github.com/apache/fineract/actions[running everything has complex dependencies, caches, and takes many hours]. It is rarely done in practice offline / local / on developer machines. But please, go ahead and run the test and doc tasks, and more! Grab a cup of coffee and run everything you can. See the various builds in `.github/workflows/` and try the same things on your own. We should all hammer on a rel [...] Finally, inspect `apache-fineract-{revnumber}-binary.tar.gz`. Make sure the `fineract-provider-{revnumber}.jar` can be run directly, and the `fineract-provider.war` can be run with Tomcat. diff --git a/fineract-doc/src/docs/en/chapters/release/process-step09.adoc b/fineract-doc/src/docs/en/chapters/release/process-step09.adoc index 9dd65d1492..877396f899 100644 --- a/fineract-doc/src/docs/en/chapters/release/process-step09.adoc +++ b/fineract-doc/src/docs/en/chapters/release/process-step09.adoc @@ -15,6 +15,29 @@ Make sure release artifacts are hosted at https://dist.apache.org/repos/dist/dev * No jar files in the source artifacts * Integration tests should work +Code examples: + +[source,bash,subs="attributes+"] +---- +# source tarball signature and checksum verification steps +# we'll check the source tarball first +version=1.12.0 +src=apache-fineract-$version-src.tar.gz + +# upon success: prints "Good signature" and returns successful exit code +# upon failure: prints "BAD signature" and returns error exit code +gpg --verify $src.asc + +# upon success: prints nothing and returns successful exit code +# upon failure: prints checksum differences and returns error exit code +gpg --print-md SHA512 $src | diff - $src.sha512 + +# binary tarball signature and checksum verification steps and outputs are similar +bin=apache-fineract-$version-binary.tar.gz +gpg --verify $bin.asc +gpg --print-md SHA512 $bin | diff - $bin.sha512 +---- + == Gradle Task .Command
