Lari, thanks you're right.

I'll send out a new RC

Nicolò Boschi


Il giorno mer 3 apr 2024 alle ore 09:18 Lari Hotari <lhot...@apache.org> ha
scritto:

> -1 (non-binding)
>
> The signing key F4439BD9D8BB60A5F0693E7D307F9414B754EFE5 isn't in
> https://dist.apache.org/repos/dist/release/bookkeeper/KEYS .
>
> Ran commands:
> svn co
> https://dist.apache.org/repos/dist/dev/bookkeeper/bookkeeper-4.16.5-rc0/
> cd bookkeeper-4.16.5-rc0
> gpg --import <(curl
> https://dist.apache.org/repos/dist/release/bookkeeper/KEYS)
> for i in *.asc; do gpg --verify $i; done
>
> Error message:
> gpg: assuming signed data in 'bookkeeper-4.16.5-src.tar.gz'
> gpg: Signature made Wed Mar 27 12:26:02 2024 EET
> gpg:                using RSA key F4439BD9D8BB60A5F0693E7D307F9414B754EFE5
>
>
> - sha512 checksums are ok, verified with "sha512sum -c *.sha512"
>
> - All Pulsar master branch CI tests pass with staged BK 4.16.5 artifacts
> in the staging repository
>    - verified with PR builds in https://github.com/lhotari/pulsar/pull/176
>
> One possible solution to the signing problem is to ensure that the Apache
> key is the default GPG key. In Pulsar's release guides there's instructions
> for this [1].
>
> -Lari
>
> 1 -
> https://pulsar.apache.org/contribute/create-gpg-keys/#make-your-the-apache-key-the-default-key-for-gpg
>
> On 2024/03/27 10:50:02 Nicolò Boschi wrote:
> > Hi everyone,
> > Please review and vote on the release candidate #0 for the version
> 4.16.5,
> > as follows:
> > [ ] +1, Approve the release
> > [ ] -1, Do not approve the release (please provide specific comments)
> >
> > The complete staging area is available for your review, which includes:
> > * Release notes [1]
> > * The official Apache source and binary distributions to be deployed to
> > dist.apache.org [2]
> > * All artifacts to be deployed to the Maven Central Repository [3]
> > * Source code tag "v4.16.5-rc0" [4] with git sha
> > 3160f9628c625310fef322d4d84060248763cb3f
> >
> > BookKeeper's KEYS file contains PGP keys we used to sign this release:
> > https://dist.apache.org/repos/dist/release/bookkeeper/KEYS
> >
> > Please download these packages and review this release candidate:
> >
> > - Review release notes
> > - Download the source package (verify shasum, and asc) and follow the
> > instructions to build and run the bookkeeper service.
> > - Download the binary package (verify shasum, and asc) and follow the
> > instructions to run the bookkeeper service.
> > - Review maven repo, release tag, licenses, and any other things you
> think
> > it is important for a release.
> >
> > The vote will be open for at least 72 hours. It is adopted by majority
> > approval, with at least 3 PMC affirmative votes.
> >
> > Thanks,
> > Release Manager
> >
> > [1] https://github.com/apache/bookkeeper/pull/4249
> > [2]
> https://dist.apache.org/repos/dist/dev/bookkeeper/bookkeeper-4.16.5-rc0/
> > [3]
> >
> https://repository.apache.org/content/repositories/orgapachebookkeeper-1093/
> >
> > [4] https://github.com/apache/bookkeeper/tree/v4.16.5-rc0
> >
>

Reply via email to