ysh329 commented on issue #15812:
URL: https://github.com/apache/tvm/issues/15812#issuecomment-1776250323

   Hi all, with help of @Hzfengsy , candidate package uploaded.
   
   ## Check sha512
   
   ```shell
   @ysh329 ➜ /workspaces/tmp $ shasum -a 512 ./apache-tvm-src-v0.14.0.rc0.tar.gz
   
223335470a249f3bd357ac385f6b7820dc6b400e572e71f8180107e7d8c2960a3e1dd6ee89327f65072d643c324c09b91b16586ecdf7bfc8eb4d7a0a17de0b27
  ./apache-tvm-src-v0.14.0.rc0.tar.gz
   @ysh329 ➜ /workspaces/tmp $ cat ./apache-tvm-src-v0.14.0.rc0.tar.gz.sha512 
   
223335470a249f3bd357ac385f6b7820dc6b400e572e71f8180107e7d8c2960a3e1dd6ee89327f65072d643c324c09b91b16586ecdf7bfc8eb4d7a0a17de0b27
  apache-tvm-src-v0.14.0.rc0.tar.gz
   ```
   
   ## Check asc
   
   
   ```shell
   @ysh329 ➜ /workspaces/tmp/apache-tvm-src-v0.14.0 $ gpg --import ./KEYS
   gpg: key 6754EA97C55E3DEB: public key "Tianqi Chen (CODE SIGNING KEY) 
<[email protected]>" imported
   gpg: key 8955D84E20C9AB0C: public key "Yizhi Liu <[email protected]>" 
imported
   gpg: key 3A709F6F2B86E9D6: public key "Yizhi Liu (Yizhi Liu at Apache) 
<[email protected]>" imported
   gpg: key CA751254E97B9FE4: public key "Yizhi Liu <[email protected]>" 
imported
   gpg: key ED03B26E4FC3509F: public key "Ziheng Jiang <[email protected]>" 
imported
   gpg: key 9FBECBD3D75EFD4B: public key "Zhi Chen <[email protected]>" imported
   gpg: key 35ABC9676004ADAE: public key "Junru Shao <[email protected]>" 
imported
   gpg: key 2C75E5A496C80880: public key "Wuwei Lin <[email protected]>" imported
   gpg: key 07FA463F1C926F48: public key "David Riazati <[email protected]>" 
imported
   gpg: key C9A56ABD5CCA3EB8: public key "Andrew Zhao Luo 
<[email protected]>" imported
   gpg: key 28D4862222B8EC31: public key "Leandro Nunes <[email protected]>" 
imported
   gpg: key 06D051CA84EF3749: public key "Siyuan Feng (CODE SIGNING KEY) 
<[email protected]>" imported
   gpg: Total number processed: 12
   gpg:               imported: 12
   @ysh329 ➜ /workspaces/tmp/apache-tvm-src-v0.14.0 $ gpg --edit-key 
664EF29634C05669C3DCF83106D051CA84EF3749
   gpg (GnuPG) 2.2.19; Copyright (C) 2019 Free Software Foundation, Inc.
   This is free software: you are free to change and redistribute it.
   There is NO WARRANTY, to the extent permitted by law.
   
   
   pub  rsa4096/06D051CA84EF3749
        created: 2023-05-05  expires: never       usage: SC  
        trust: unknown       validity: unknown
   sub  rsa4096/D0064A60FA06DD20
        created: 2023-05-05  expires: never       usage: E   
   [ unknown] (1). Siyuan Feng (CODE SIGNING KEY) <[email protected]>
   
   gpg> trust
   pub  rsa4096/06D051CA84EF3749
        created: 2023-05-05  expires: never       usage: SC  
        trust: unknown       validity: unknown
   sub  rsa4096/D0064A60FA06DD20
        created: 2023-05-05  expires: never       usage: E   
   [ unknown] (1). Siyuan Feng (CODE SIGNING KEY) <[email protected]>
   
   Please decide how far you trust this user to correctly verify other users' 
keys
   (by looking at passports, checking fingerprints from different sources, etc.)
   
     1 = I don't know or won't say
     2 = I do NOT trust
     3 = I trust marginally
     4 = I trust fully
     5 = I trust ultimately
     m = back to the main menu
   
   Your decision? 5
   Do you really want to set this key to ultimate trust? (y/N) y
   
   pub  rsa4096/06D051CA84EF3749
        created: 2023-05-05  expires: never       usage: SC  
        trust: ultimate      validity: unknown
   sub  rsa4096/D0064A60FA06DD20
        created: 2023-05-05  expires: never       usage: E   
   [ unknown] (1). Siyuan Feng (CODE SIGNING KEY) <[email protected]>
   Please note that the shown key validity is not necessarily correct
   unless you restart the program.
   
   gpg> quit
   @ysh329 ➜ /workspaces/tmp/apache-tvm-src-v0.14.0 $ gpg --verify 
../apache-tvm-src-v0.14.0.rc0.tar.gz.asc ../apache-tvm-src-v0.14.0.rc0.tar.gz
   gpg: Signature made Mon Oct 23 07:30:46 2023 UTC
   gpg:                using RSA key 664EF29634C05669C3DCF83106D051CA84EF3749
   gpg: checking the trustdb
   gpg: marginals needed: 3  completes needed: 1  trust model: pgp
   gpg: depth: 0  valid:   2  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 2u
   gpg: next trustdb check due at 2025-10-14
   gpg: Good signature from "Siyuan Feng (CODE SIGNING KEY) 
<[email protected]>" [ultimate]
   ```
   
   ## Check binary in source code
   
   ```shell
   # check binary
   $ find ./apache-tvm-src-v0.14.0 -type f -exec file {} + | grep -w 
"ELF\|shared object"
   # find nothing
   ```
   
   ## Compile and Python Import on Linux
   
   ```shell
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to