+1 Thanks @Jialiang for driving this and detailed steps for release validation.
* Built from Source * Verified the signature/checksums New website might need some improvements before we publish.? Regards, Brahma From: Kumar, Sandeep <skuma...@visa.com.INVALID> Date: Friday, 4 April 2025 at 11:43 AM To: dev@ambari.apache.org <dev@ambari.apache.org> Subject: Re: [VOTE] Release Apache Ambari 3.0.0 (rc0) +1 Thanks & Regards, Sandeep Kumar From: Jialiang Cai <jialiangca...@gmail.com> Date: Tuesday, 25 March 2025 at 9:33 AM To: dev@ambari.apache.org <dev@ambari.apache.org> Subject: [VOTE] Release Apache Ambari 3.0.0 (rc0) Hi All, This is a call for a vote to release Apache Ambari version 3.0.0 (rc0). --- **Release Details**: - **Issues Fixed**: Review the release notes: https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fambari.staged.apache.org%2Fdocs%2F3.0.0%2Frelease-notes&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849651479%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=z7DLPEN%2FLJraDF1sYOH%2BdrvZQkEaP48SUzGxwCED4AY%3D&reserved=0<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fambari.staged.apache.org%2Fdocs%2F3.0.0%2Frelease-notes&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849680796%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=43JkqYJ7ZuMizajZexir1E%2Buw5mViyUyDVKINDDRuC0%3D&reserved=0><https://ambari.staged.apache.org/docs/3.0.0/release-notes> - **Release Candidates** (source-only release): https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fambari%2Fambari-3.0.0-rc0&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849694558%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=c8WckmDW1Se6tXbeyGT9w%2FQBe1xSwEHkz215n6hAD1g%3D&reserved=0<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fambari%2Fambari-3.0.0-rc0&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849707709%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=x0r3rPnpN0EOB7fEKscf7LwR%2BwaQuPDZsgZ3yUgS324%3D&reserved=0><https://dist.apache.org/repos/dist/dev/ambari/ambari-3.0.0-rc0> - **Git Tag**: https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fapache%2Fambari%2Freleases%2Ftag%2Frelease-3.0.0-rc0&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849721634%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=QLfE2Usn6faB%2B2BHHl7ELMqm7%2BhK4DddxipfTHo4QHw%3D&reserved=0<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fapache%2Fambari%2Freleases%2Ftag%2Frelease-3.0.0-rc0&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849735519%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=hKEyJC0YpPp5sq%2Fd5YLLqvFhpPRBwDu0fltYhiYGnsA%3D&reserved=0><https://github.com/apache/ambari/releases/tag/release-3.0.0-rc0> - **Tag Hash**: 15feafb7dfa2f4964a01edac47c0956ab29ad99e - **Signing Key**: E33E3A690928A669 (available in KEYS file: https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fambari%2FKEYS&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849748779%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=GT%2FV9AC0ENPWwXVNAtAAQHFjAt0Mq22gHHHLgLIoGpg%3D&reserved=0)<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fambari%2FKEYS&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849761933%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=fHNgu5pOvQEE1K8xErn2Dm2A2RN3xkT%2FzMSCqSy49vY%3D&reserved=0><https://dist.apache.org/repos/dist/dev/ambari/KEYS> --- **Verification Steps** *Supported Systems*: Linux/macOS *Required Checks*: SHA512 Checksum + GPG Signature 1. **Download Artifacts**: Run the following commands (replace variables as needed): ``` VERSION="3.0.0" BASE_URL="https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fambari%2Fambari-3.0.0-rc0%2F&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849775025%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=K6sz4boKmvCURGj%2BtId4IRE5aVZsXbr0oDim5qjE%2F40%3D&reserved=0<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fambari%2Fambari-3.0.0-rc0%2F&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849788741%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=zreLwrDcQ%2BmuOWXj%2Bzdj9OH3HMl86W8FT9iH2VtX7kY%3D&reserved=0<https://dist.apache.org/repos/dist/dev/ambari/ambari-3.0.0-rc0/>>" wget "${BASE_URL}/apache-ambari-${VERSION}-src.tar.gz" \ "${BASE_URL}/apache-ambari-${VERSION}-src.tar.gz.asc" \ "${BASE_URL}/apache-ambari-${VERSION}-src.tar.gz.sha512" ``` 2. **Verify SHA512 Checksum**: Execute: ``` sha512sum -c "apache-ambari-${VERSION}-src.tar.gz.sha512" ``` *Expected Output*: `apache-ambari-3.0.0-src.tar.gz: OK` *Troubleshooting* (manual check): ``` shasum -a 512 "apache-ambari-${VERSION}-src.tar.gz" | diff - "apache-ambari-${VERSION}-src.tar.gz.sha512" # No output indicates consistency ``` 3. **Verify GPG Signature**: a) Import the public key: ``` curl -sL "https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fambari%2FKEYS&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849801938%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=kVjs49oX4ZwIVppOa0ciMf3%2F66sld4%2B0jpBcadlsNPc%3D&reserved=0<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fambari%2FKEYS&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849815077%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=gYR%2F5gJCfkdPmNH879NOiSdcRDRAqUHG%2BBTJckgo1kg%3D&reserved=0<https://dist.apache.org/repos/dist/dev/ambari/KEYS>>" | gpg --import ``` b) Verify the signature: ``` gpg --verify "apache-ambari-${VERSION}-src.tar.gz.asc" "apache-ambari-${VERSION}-src.tar.gz" ``` *Expected Output*: `gpg: Good signature from "[Release Manager Name] <em...@apache.org>"` c) If encountering "No public key" errors, confirm key import: ``` gpg --list-keys "E33E3A690928A669" ``` --- **Build Instructions** *Prerequisites*: - For Rocky Linux 8/9: ``` sudo yum install java-17-openjdk-devel export JAVA_HOME=/usr/lib/jvm/java-17-openjdk export PATH=$JAVA_HOME/bin:$PATH ``` - For Ubuntu 22.04: ``` sudo apt install openjdk-17-jdk export JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64 export PATH=$JAVA_HOME/bin:$PATH ``` *Compile*: ``` mvn -B clean install package \ -Drat.skip=true \ -DskipTests \ -Dmaven.test.skip=true \ -Dfindbugs.skip=true \ -Dcheckstyle.skip=true ``` --- **Additional Notes**: 1. **RPM Packages**: This release includes RPMs for Rocky Linux 8/9. Installation guide: https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fambari.staged.apache.org%2Fdocs%2F3.0.0%2Fquick-start%2Fquick-start-guide&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849831777%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=uuNF0ZUBfRtkn7ZNNTFiMEcuy6o%2ByRyOyWLWWbPxSW0%3D&reserved=0<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fambari.staged.apache.org%2Fdocs%2F3.0.0%2Fquick-start%2Fquick-start-guide&data=05%7C02%7Cbbattula%40visa.com%7C34f60f92643d47f3856508dd733fbf09%7C38305e12e15d4ee888b9c4db1c477d76%7C0%7C0%7C638793439849845473%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=KnK%2FmemEpyscJ3JRvZHqcMmlsXc0Cao2WJSDdD658uI%3D&reserved=0><https://ambari.staged.apache.org/docs/3.0.0/quick-start/quick-start-guide> 2. **RPM Hosting**: RPMs will be hosted either on a CloudCone-sponsored CDN (pending agreement) or a limited-bandwidth server (3TB/month). --- **Voting Guidelines**: [ ] +1 Approve [ ] +0 No opinion [ ] -1 Disapprove (provide reason) *Voting Period*: 72 hours minimum. Thanks, The Apache Ambari Team