- signatures and checksums match
- source builds
- apache rat passes
+1
Below are the linux commands I used to verify the release of the
cayenne-3.1 files:
=============================================
# check checksums
## made with gpg --print-md MD5 cayenne-X.X.tar.gz
cat *.md5 | tr -d ' ' | awk 'BEGIN{OFS=" "; FS=":"}
{tmp=$1;$1=$2;$2=tmp;print}' | md5sum -c
# check signatures
wget http://www.apache.org/dist/cayenne/KEYS
gpg --import KEYS
find . -name '*.asc' -exec gpg --verify {} \;
# verify .tar.gz and -win.zip files are identical -- flawed process
due to platform building differences
mkdir src
cd src
tar xvf ../cayenne-3.1.tar.gz
mv cayenne-3.1/ cayenne-3.1-tar-gz
unzip ../cayenne-3.1-win.zip
# should be no output
# but windows and tar package are built with different java versions.
## differences in jars, pdfs, html resources, css, html, package-info
between tar.gz and zip(win)
diff -rq cayenne-3.1* | grep -v "jar differ" | grep -v "html differ" |
grep -v "pdf differ" | grep -v ".css differ"
# should be "are identical" output
diff -srq cayenne-3.1* | grep -v "jar differ" | grep -v "html differ"
| grep -v "pdf differ" | grep -v ".css differ" | grep -v "are
identical"
# unpack source
tar xvzf ../cayenne-3.1-src.tar.gz
# build source
cd cayenne-3.1-src
mvn install
## mvn apache-rat currently unused for cayenne
./rat.sh ../../../apache-rat-0.9/apache-rat-0.9.jar
##mvn apache-rat:check
# To check for all errors, if more than one project is affected
# mvn apache-rat:check -Drat.numUnapprovedLicenses=9999
# To see details of rat failure
# mvn -e -X apache-rat:check
On Sat, Sep 20, 2014 at 11:41 AM, Andrus Adamchik
<and...@objectstyle.org> wrote:
> After half a day of fighting with the build system bit rot, I prepared and
> posted release artifacts for 3.1 final. Rat and testing results were posted
> here some time ago.
>
> Maven artifacts:
> https://repository.apache.org/content/repositories/orgapachecayenne-1002
> Assemblies: https://dist.apache.org/repos/dist/dev/cayenne/3.1
>
> That was quite some time in the making. I am really excited to get it out.
>
> Please evaluate and cast your votes.
>
> Andrus
