Thank you your assistance to both Krisztián and Kou (and Jorge!) I have added my (signed) public key to both files. I believe we are all set now for a proposed rust 4.1.0 release candidate and I will send a separate email on this topic shortly.
Andrew On Tue, May 18, 2021 at 3:27 PM Krisztián Szűcs <szucs.kriszt...@gmail.com> wrote: > On Tue, May 18, 2021 at 10:31 AM Sutou Kouhei <k...@clear-code.com> wrote: > > > > Hi, > > > > It seems that the signed key isn't in > > https://dist.apache.org/repos/dist/dev/arrow/KEYS . > > We must publish the signed key in the KEYS file. Could you > > append the signed key to the following files: > > > > * https://dist.apache.org/repos/dist/dev/arrow/KEYS > > * https://dist.apache.org/repos/dist/release/arrow/KEYS > > > > See also: > https://infra.apache.org/release-distribution.html#sigs-and-sums > > > > > Signing keys used at Apache must be published in the KEYS > > > file and should be made available through the global > > > public keyserver network. Signing keys should be linked > > > into a strong web of trust. > > > > See the comment in KEYS how to append a new key to KEYS. > We have both Jorge and Andrew in the web-of-trust now, the KEYS files > should be updated soon. > > > > > > Thanks, > > -- > > kou > > > > In <CAFhtnRyqJJmyAL8jD+uFkHhryVdO3HUTLC0yN=9meuabza7...@mail.gmail.com> > > "[RUST] Request for Comment / Check proposed release process" on Mon, > 17 May 2021 09:56:44 -0400, > > Andrew Lamb <al...@influxdata.com> wrote: > > > > > I need help verifying the proposed source tarball format for the Arrow > Rust > > > releases; > > > > > > Specifically, can someone please: > > > 1. Download the example files and ensure they can successfully > validate the > > > signatures > > > 2. Ensure that the contents of this tarball could be used to publish to > > > crates.io > > > > > > Background: I have been working on the new release process for > > > arrow-rs (updates in [2]). The contents and changelog in this example > > > release tarball are from [3] and were created using the scripts / > > > instructions in [1]. > > > > > > [1] https://github.com/apache/arrow-rs/pull/299 > > > [2] https://github.com/apache/arrow-rs/issues/292 > > > [3] https://github.com/apache/arrow-rs/pull/305 > > > > > > Here is an example output (including Vote Email) generated by script > in [1]: > > > > > > ``` > > > cd /Users/alamb/Software/arrow-rs/ && ./dev/release/create-tarball.sh > 0.0.3 > > > Attempting to create > > > > /Users/alamb/Software/arrow-rs/dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz > > > from tag 0.0.3 > > > Draft email for dev@arrow.apache.org mailing list > > > > > > --------------------------------------------------------- > > > To: dev@arrow.apache.org > > > Subject: [VOTE][RUST] Release Apache Arrow > > > > > > Hi, > > > > > > I would like to propose a release of Apache Arrow Rust > > > Implementation, version 0.0.3. > > > > > > This release candidate is based on commit: > > > f3959f59a6119dab23818e6eef87e0d7b58c820e [1] > > > > > > The proposed release tarball and signatures are hosted at [2]. > > > The changelog is located at [3]. > > > > > > Please download, verify checksums and signatures, run the unit tests, > > > and vote on the release. > > > > > > The vote will be open for at least 72 hours. > > > > > > [ ] +1 Release this as Apache Arrow Rust > > > [ ] +0 > > > [ ] -1 Do not release this as Apache Arrow Rust because... > > > > > > [1]: > > > > https://github.com/apache/arrow-rs/tree/f3959f59a6119dab23818e6eef87e0d7b58c820e > > > [2]: > https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-0.0.3 > > > [3]: > > > > https://github.com/apache/arrow-rs/blob/f3959f59a6119dab23818e6eef87e0d7b58c820e/CHANGELOG.md > > > --------------------------------------------------------- > > > Running rat license checker on > > > > /Users/alamb/Software/arrow-rs/dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz > > > OK > > > No unapproved licenses > > > Signing tarball and creating checksums > > > Uploading to apache dist/dev to > > > https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-0.0.3 > > > Checked out revision 47764. > > > A dev/dist/apache-arrow-rs-0.0.3 > > > A (bin) > > > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz > > > A > > > > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha512 > > > A > > > > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.asc > > > A > > > > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha256 > > > Adding dev/dist/apache-arrow-rs-0.0.3 > > > Adding (bin) > > > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz > > > Adding > > > > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.asc > > > Adding > > > > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha256 > > > Adding > > > > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha512 > > > Transmitting file data ....done > > > Committing transaction... > > > Committed revision 47765. > > > > > > ``` >
