Chip, I just attempted to use the release verification script on Ubuntu 12.04.2 LTS with the stock instructions.conf file provided in the git repo, and I receiving the following error:
root@zone1:/opt/release-verification-tool# ./verify-release.py -i instructions.conf -v 4.1.0 -c 7048baaa4417880db690cba4a620af06276dd040 RUNNING COMMAND: rm -Rf /tmp/cloudstack RUNNING COMMAND: rm -Rf ~/.m2 RUNNING COMMAND: mkdir /tmp/cloudstack RUNNING COMMAND: wget --no-check-certificate -q https://dist.apache.org/repos/dist/release/cloudstack/KEYS RUNNING COMMAND: wget --no-check-certificate -q https://dist.apache.org/repos/dist/dev/cloudstack/4.1.0/apache-cloudstack-4.1.0-src.tar.bz2 RUNNING COMMAND: wget --no-check-certificate -q https://dist.apache.org/repos/dist/dev/cloudstack/4.1.0/apache-cloudstack-4.1.0-src.tar.bz2.asc RUNNING COMMAND: wget --no-check-certificate -q https://dist.apache.org/repos/dist/dev/cloudstack/4.1.0/apache-cloudstack-4.1.0-src.tar.bz2.md5 RUNNING COMMAND: wget --no-check-certificate -q https://dist.apache.org/repos/dist/dev/cloudstack/4.1.0/apache-cloudstack-4.1.0-src.tar.bz2.sha RUNNING COMMAND: gpg --verify apache-cloudstack-4.1.0-src.tar.bz2.asc OUTPUT: AUTOMATED TESTING RESULTS: [PASS] rm -Rf /tmp/cloudstack [PASS] rm -Rf ~/.m2 [PASS] mkdir /tmp/cloudstack [PASS] wget --no-check-certificate -q https://dist.apache.org/repos/dist/release/cloudstack/KEYS [PASS] wget --no-check-certificate -q https://dist.apache.org/repos/dist/dev/cloudstack/4.1.0/apache-cloudstack-4.1.0-src.tar.bz2 [PASS] wget --no-check-certificate -q https://dist.apache.org/repos/dist/dev/cloudstack/4.1.0/apache-cloudstack-4.1.0-src.tar.bz2.asc [PASS] wget --no-check-certificate -q https://dist.apache.org/repos/dist/dev/cloudstack/4.1.0/apache-cloudstack-4.1.0-src.tar.bz2.md5 [PASS] wget --no-check-certificate -q https://dist.apache.org/repos/dist/dev/cloudstack/4.1.0/apache-cloudstack-4.1.0-src.tar.bz2.sha [FAILED] gpg --verify apache-cloudstack-4.1.0-src.tar.bz2.asc [SKIPPED] gpg --print-md MD5 apache-cloudstack-${version}-src.tar.bz2 | diff - apache-cloudstack-${version}-src.tar.bz2.md5 [SKIPPED] gpg --print-md SHA512 apache-cloudstack-${version}-src.tar.bz2 | diff - apache-cloudstack-${version}-src.tar.bz2.sha [SKIPPED] mkdir /tmp/cloudstack/git [SKIPPED] mkdir /tmp/cloudstack/tree [SKIPPED] git clone -q https://git-wip-us.apache.org/repos/asf/cloudstack.git /tmp/cloudstack/git [SKIPPED] git archive --prefix=/tmp/cloudstack/tree/ ${commit-sh} | tar Pxf - [SKIPPED] tar xvfj apache-cloudstack-${version}-src.tar.bz2 [SKIPPED] diff -r /tmp/cloudstack/apache-cloudstack-${version}-src /tmp/cloudstack/tree [SKIPPED] mvn --projects='org.apache.cloudstack:cloudstack' org.apache.rat:apache-rat-plugin:0.8:check [SKIPPED] mvn -P developer,systemvm clean install [SKIPPED] mvn -P developer -pl developer,tools/devcloud -Ddeploydb Traceback (most recent call last): File "./verify-release.py", line 121, in <module> main(sys.argv[1:]) File "./verify-release.py", line 118, in main x.print_results() File "./verify-release.py", line 85, in print_results print "[" + self.FAIL + action["result"] + self.ENDC + "]\t" + action["command"] When I execute `gpg --verify apache-cloudstack-4.1.0-src.tar.bz2.asc` in /tmp/cloudstack, I get the following error: root@zone1:/tmp/cloudstack# gpg --verify apache-cloudstack-4.1.0-src.tar.bz2.asc gpg: Signature made Mon 22 Apr 2013 04:45:37 PM PDT using RSA key ID A99A5D58 gpg: Can't check signature: public key not found What am I doing wrong? -John On Apr 23, 2013, at 9:44 AM, Chip Childers <chip.child...@sungard.com> wrote: > 7048baaa4417880db690cba4a620af06276dd040