+1 Verified signatures and checksums of source and binary: 11:49:46 ~/Downloads$ ~/scripts/verify-sig accumulo-2.0.0-alpha-2-src.tar.gz Checking accumulo-2.0.0-alpha-2-src.tar.gz.md5 a55501b88e5dd2c9209dfad9352de1bb Looks good Checking accumulo-2.0.0-alpha-2-src.tar.gz.sha1 7e331f95a01464c8ce5ffe7c776f6ada0158a64f Looks good Calling gpg --verify accumulo-2.0.0-alpha-2-src.tar.gz.asc gpg: assuming signed data in `accumulo-2.0.0-alpha-2-src.tar.gz' gpg: Signature made Thu 17 Jan 2019 08:04:36 PM EST using RSA key ID 00B6899D gpg: Good signature from "Christopher L Tubbs II (Christopher) < ctubb...@gmail.com>"
11:59:38 ~/Downloads$ ~/scripts/verify-sig accumulo-2.0.0-alpha-2-bin.tar.gz Checking accumulo-2.0.0-alpha-2-bin.tar.gz.md5 0b22a3385a7ac5b6ed7083496b5cdb93 Looks good Checking accumulo-2.0.0-alpha-2-bin.tar.gz.sha1 3652377d2d4c791d09c5ddf412207053c5ba58b4 Looks good Calling gpg --verify accumulo-2.0.0-alpha-2-bin.tar.gz.asc gpg: assuming signed data in `accumulo-2.0.0-alpha-2-bin.tar.gz' gpg: Signature made Thu 17 Jan 2019 08:04:36 PM EST using RSA key ID 00B6899D gpg: Good signature from "Christopher L Tubbs II (Christopher) < ctubb...@gmail.com>" Successfully built from source accumulo-2.0.0-alpha-2-src.tar.gz using "mvn clean package -DskipQA -DskipTests" Successfully installed, ingested files and scanned using uno On Fri, Jan 18, 2019 at 11:11 AM Mike Walch <mwa...@apache.org> wrote: > The Accumulo binary tarball typically includes a proxy.thrift file: > > ./lib/proxy/thrift/proxy.thrift > > However, it looks like generated Thrift files were included for this > release candidate. > > I am OK with this for an alpha release but I don't think these should be > included in the 2.0.0 release: > > ./lib/proxy/gen-cpp/proxy_types.h > ./lib/proxy/gen-cpp/proxy_constants.h-with-license > ./lib/proxy/gen-cpp/AccumuloProxy.h > ./lib/proxy/gen-cpp/AccumuloProxy.cpp-with-license > ./lib/proxy/gen-cpp/proxy_types.cpp-with-license > ./lib/proxy/gen-cpp/proxy_constants.cpp > ./lib/proxy/gen-cpp/AccumuloProxy.cpp > ./lib/proxy/gen-cpp/proxy_types.cpp > ./lib/proxy/gen-cpp/AccumuloProxy.h-with-license > ./lib/proxy/gen-cpp/proxy_constants.cpp-with-license > ./lib/proxy/gen-cpp/proxy_constants.h > ./lib/proxy/gen-cpp/AccumuloProxy_server.skeleton.cpp > ./lib/proxy/gen-cpp/AccumuloProxy_server.skeleton.cpp-with-license > ./lib/proxy/gen-cpp/proxy_types.h-with-license > ./lib/proxy/gen-rb/proxy_constants.rb-with-license > ./lib/proxy/gen-rb/accumulo_proxy.rb-with-license > ./lib/proxy/gen-rb/proxy_constants.rb > ./lib/proxy/gen-rb/proxy_types.rb-with-license > ./lib/proxy/gen-rb/accumulo_proxy.rb > ./lib/proxy/gen-rb/proxy_types.rb > ./lib/proxy/gen-py/__init__.py > ./lib/proxy/gen-py/accumulo/constants.py-with-license > ./lib/proxy/gen-py/accumulo/AccumuloProxy-remote > ./lib/proxy/gen-py/accumulo/__init__.py > ./lib/proxy/gen-py/accumulo/AccumuloProxy-remote-with-license > ./lib/proxy/gen-py/accumulo/ttypes.py > ./lib/proxy/gen-py/accumulo/ttypes.py-with-license > ./lib/proxy/gen-py/accumulo/AccumuloProxy.py > ./lib/proxy/gen-py/accumulo/__init__.py-with-license > ./lib/proxy/gen-py/accumulo/AccumuloProxy.py-with-license > ./lib/proxy/gen-py/accumulo/constants.py > ./lib/proxy/gen-py/__init__.py-with-license > > On Thu, Jan 17, 2019 at 8:11 PM Christopher <ctubb...@apache.org> wrote: > > > Sorry, my gpg key search seemed to match extra keys. The expected GPG > > key is *ONLY*: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D > > > > On Thu, Jan 17, 2019 at 8:09 PM Christopher <ctubb...@apache.org> wrote: > > > > > > Accumulo Developers, > > > > > > Please consider the following candidate for Apache Accumulo > > 2.0.0-alpha-2. > > > > > > Git Commit: > > > 4d8405c0004c57b9c514c1f207461519cc58b3f7 > > > Branch: > > > 2.0.0-alpha-2-rc1 > > > > > > If this vote passes, a gpg-signed tag will be created using: > > > git tag -f -m 'Apache Accumulo 2.0.0-alpha-2' -s rel/2.0.0-alpha-2 > \ > > > 4d8405c0004c57b9c514c1f207461519cc58b3f7 > > > > > > Staging repo: > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1075 > > > Source (official release artifact): > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1075/org/apache/accumulo/accumulo/2.0.0-alpha-2/accumulo-2.0.0-alpha-2-src.tar.gz > > > Binary: > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1075/org/apache/accumulo/accumulo/2.0.0-alpha-2/accumulo-2.0.0-alpha-2-bin.tar.gz > > > (Append ".sha1", ".md5", or ".asc" to download the signature/hash for > > > a given artifact.) > > > > > > In addition to the tarballs, and their signatures, the following > checksum > > > files will be added to the dist/release SVN area after release: > > > accumulo-2.0.0-alpha-2-src.tar.gz.sha512 will contain: > > > SHA512 (accumulo-2.0.0-alpha-2-src.tar.gz) = > > > > > > 64f7340142205242a2183b263eefeaff09aec153d25f0c750ca2b786a962ee5f05e4e437a949ba351a97b4aa0a0d7928e9a3487904432616c7b1646a57e1cf4a > > > accumulo-2.0.0-alpha-2-bin.tar.gz.sha512 will contain: > > > SHA512 (accumulo-2.0.0-alpha-2-bin.tar.gz) = > > > > > > 6c7a1741dec5043b0e41fb7e2ecac23415fa3fd3b1c3df8eb60e3e648a39de94bab3d5f57fa7b56672840349a79ff3430a6748e6aeeeaa682a164f685c791a26 > > > > > > Signing keys are available at > https://www.apache.org/dist/accumulo/KEYS > > > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D > > > 45A4BB9ABAEA5D41C19771D62FFC0085C23D3DA9 > > > D9B852C814B77755831258C64417A0C14245D003) > > > > > > Release notes (in progress) can be found at: > > > https://accumulo.apache.org/release/accumulo-2.0.0-alpha-2/ > > > > > > Release testing instructions: > > > https://accumulo.apache.org/contributor/verifying-release > > > > > > Please vote one of: > > > [ ] +1 - I have verified and accept... > > > [ ] +0 - I have reservations, but not strong enough to vote against... > > > [ ] -1 - Because..., I do not accept... > > > ... these artifacts as the 2.0.0-alpha-2 release of Apache Accumulo. > > > > > > This vote will remain open until at least Mon Jan 21 01:30:00 UTC 2019. > > > (Sun Jan 20 20:30:00 EST 2019 / Sun Jan 20 17:30:00 PST 2019) > > > Voting can continue after this deadline until the release manager > > > sends an email ending the vote. > > > > > > Thanks! > > > > > > P.S. Hint: download the whole staging repo with > > > wget -erobots=off -r -l inf -np -nH \ > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1075/ > > > # note the trailing slash is needed > > >
