Hi Kirk, Congrats on the new role, and thanks for everything you’ve done for the project overall! Your support has been super valuable in many areas, Take your time — we really appreciate having you involved.
On Thu, Sep 4, 2025 at 12:12 AM Kirk Lund <kl...@apache.org> wrote: > I'm preparing to start a new job including some travel, so I'm afraid I'm > not going to have much time this week. I'll still provide participation and > support in PMC discussions, but I'm not going to have time to do any > technical digging or reverse engineering of how the old release scripts or > pipelines worked. > > Although I've reviewed releases and taken notes about the release process, > I've never been a release manager and I'm not familiar with every aspect of > handling a release. It's also been a long time since we had a release. I'd > love to help or answer more but I'm hitting the limit of what I actually > know or remember. > > -Kirk > > On Tue, Sep 2, 2025 at 2:12 PM Jinwoo Hwang <jinwoo.hw...@sas.com.invalid> > wrote: > > > Thanks, Kirk. I really appreciate your offer and the context you > provided. > > It makes sense that PMC credentials would be required, and I agree that > the > > PMC should revisit how we approach committer and PMC roles going forward. > > > > > > Best regards, > > > > Jinwoo Hwang (he/him/his) > > > > > > > > SAS® Research and Development > > > > http://JinwooHwang.com<http://jinwoohwang.com/> > > > > > > > > From: Kirk Lund <kl...@apache.org> > > Date: Tuesday, September 2, 2025 at 4:33 PM > > To: dev@geode.apache.org <dev@geode.apache.org> > > Subject: Re: [DISCUSS] Draft Geode Release Manager runbook > > > > EXTERNAL > > > > Hi Jinwoo, > > > > However, I noticed that the RM runbook specifies that the release > candidate > > > should be created using the prepare_rc.sh script: > > > > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fcwiki.apache.org%2Fconfluence%2Fdisplay%2FGEODE%2FReleasing%2BApache%2BGeode%2523ReleasingApacheGeode-Branchingforrelease___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NjFkMDM5NGY4OGQwMGYwNjI2YzNlZGI0YTkzZDg1MGM6NzowODQyOjgzNWJmNWI2MTg1YmQyMGMwMzgwNTY1M2ZkYjBmZGM0ZDRmNzA1MzMwZjMxOTg0YzMzMTc2ODRlYmJhODQzMjk6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848683309%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=6BYEYwkpASoQlIp%2B%2BcW8bQEE0g6LWJ85IgjjyNKVS9c%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://cwiki.apache.org/confluence/display/GEODE/Releasing+Apache+Geode%23ReleasingApacheGeode-Branchingforrelease___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NjFkMDM5NGY4OGQwMGYwNjI2YzNlZGI0YTkzZDg1MGM6NzowODQyOjgzNWJmNWI2MTg1YmQyMGMwMzgwNTY1M2ZkYjBmZGM0ZDRmNzA1MzMwZjMxOTg0YzMzMTc2ODRlYmJhODQzMjk6cDpUOk4 > > > > > > > > > > When I attempted to run the script, it prompted for a PMC member’s > > > credentials and required permission to publish to the Maven repository. > > As > > > a result, I was unable to proceed further. > > > > > > Yeah, I'm not too surprised if that takes PMC credentials. I'm not setup > > for the permissions or I'd offer to do that for you. > > > > I think in the past, most committers were being added as both committer > and > > PMC simultaneously. PMC should probably discuss whether this is a valid > > assumption going forward or not. That decision would drive whether or not > > this project typically proposes new committers to also be new PMC members > > simultaneously or if the PMC wants to have someone take on the step of > > publishing to the Maven repository. > > > > We've hit the limit of what I know. Beyond this, I'm in the same boat as > > you and would need to study scripts like prepare_rc.sh to > reverse-engineer > > what it's doing. I'll try to find some time for this later. > > > > -Kirk > > > > On Tue, Sep 2, 2025 at 12:43 PM Jinwoo Hwang > <jinwoo.hw...@sas.com.invalid > > > > > wrote: > > > > > Hi Kirk, > > > > > > Thank you very much for the information and guidance. > > > > > > Apologies for any confusion caused. We’ve followed your instructions > and > > > successfully created a signed RC tag as outlined in step #2: > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fapache%2Fgeode%2Freleases%2Ftag%2Frel%252Fv1.15.2.RC1&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848696363%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Cr5l6o0VcE4%2Bp1KJyVJV16hymhoKP5EMKy6ukMdPKIc%3D&reserved=0 > > <https://github.com/apache/geode/releases/tag/rel%2Fv1.15.2.RC1> > > > > > > However, I noticed that the RM runbook specifies that the release > > > candidate should be created using the prepare_rc.sh script: > > > > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fcwiki.apache.org%2Fconfluence%2Fdisplay%2FGEODE%2FReleasing%2BApache%2BGeode%2523ReleasingApacheGeode-Branchingforrelease___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NjFkMDM5NGY4OGQwMGYwNjI2YzNlZGI0YTkzZDg1MGM6NzpiN2MyOmIzMjVlZmZjZDM5NWNlMmVjZmYxYjUyOWZhZWYwMTA5YWU2ZDM5ZDI5ZWU4M2UwNmU5OWVjOWRkYmIzYWQ4OTA6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848703909%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2B0HftfVZppuxbexCPd1w37mavgm8mCUPf8NzC8hF5m8%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://cwiki.apache.org/confluence/display/GEODE/Releasing+Apache+Geode%23ReleasingApacheGeode-Branchingforrelease___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NjFkMDM5NGY4OGQwMGYwNjI2YzNlZGI0YTkzZDg1MGM6NzpiN2MyOmIzMjVlZmZjZDM5NWNlMmVjZmYxYjUyOWZhZWYwMTA5YWU2ZDM5ZDI5ZWU4M2UwNmU5OWVjOWRkYmIzYWQ4OTA6cDpUOk4 > > > > > > > > > When I attempted to run the script, it prompted for a PMC member’s > > > credentials and required permission to publish to the Maven repository. > > As > > > a result, I was unable to proceed further. > > > > > > Additionally, I’m unclear on how to access the webpage referenced in > step > > > 2 of “Create the release candidate.” The instructions mention that the > > > "next steps" printed at the end of the prepare_rc.sh script will guide > > the > > > finalization of Nexus staging, publishing the release candidate, and > > > sending the VOTE email. > > > > > > Since I couldn’t complete the script execution, I’m unsure how to reach > > > that point. > > > Any clarification or suggestions you could provide would be greatly > > > appreciated. > > > > > > > > > Best regards, > > > > > > Jinwoo Hwang (he/him/his) > > > > > > > > > > > > SAS® Research and Development > > > > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NjFkMDM5NGY4OGQwMGYwNjI2YzNlZGI0YTkzZDg1MGM6NzoyYzdiOjk5ZWIyMGI2NjI1NjhjYzkwMjkxYjAxZDMyNWIyNzlkNDkzY2FiZWY1ZmVhYWM5OTIyNWRmODM5OGUwYTY3Y2M6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848710659%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=0RuZb7sSCH0WYz2Q1UzjLG973RlFKh8b7zWxgVGHulU%3D&reserved=0 > > < > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2Fjinwoohwang.com%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NjFkMDM5NGY4OGQwMGYwNjI2YzNlZGI0YTkzZDg1MGM6NzpiYjM5OmJmMDFlNTEyYTM0NDYwMTJlNTc5OGViZjliMDA5NGYzOTYyYWJjNjRiOTAwMThhZWEzMzU2NjU5MGRlMTBjZWI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848717363%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ikUzTIdqKRt5M2B86MBVHLvLPlZ1lsGs89xiK47kilw%3D&reserved=0 > > >< > > > https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86NjFkMDM5NGY4OGQwMGYwNjI2YzNlZGI0YTkzZDg1MGM6NzoyYzdiOjk5ZWIyMGI2NjI1NjhjYzkwMjkxYjAxZDMyNWIyNzlkNDkzY2FiZWY1ZmVhYWM5OTIyNWRmODM5OGUwYTY3Y2M6cDpUOk4 > > > > > > > > > > > > > > > From: Kirk Lund <kl...@apache.org> > > > Date: Friday, August 29, 2025 at 4:24 PM > > > To: dev@geode.apache.org <dev@geode.apache.org> > > > Subject: Re: [DISCUSS] Draft Geode Release Manager runbook > > > > > > EXTERNAL > > > > > > Hi Jinwoo, > > > > > > No we don't want to merge or cherry-pick all commits from support/1.15. > > > Many or even all of those may be specific to that version only. > > > > > > Note: Geode uses git-flow as its style for branching/tagging/releasing. > > > > > > I think the following defines what we should be doing going forward for > > > releasing 1.15.2: > > > > > > Apache Geode 1.15.2 – Current Release Process 1. Where we start > > > > > > - > > > > > > *Active branch*: support/1.15 is the maintenance branch for the 1.15 > > > train. > > > - > > > > > > *Target release*: 1.15.2 (a patch release). > > > - > > > > > > *Release tags*: Geode uses tags like rel/v1.15.2-RC1 … > > rel/v1.15.2-RC<N> > > > for release candidates, and rel/v1.15.2 for the final GA release. > > > > > > Example from earlier trains: > > > > > > - > > > > > > rel/v1.12.0-RC1 … rel/v1.12.0-RC9 > > > - > > > > > > rel/v1.12.0 (final release) > > > > > > 2. Cutting a release candidate > > > > > > 1. > > > > > > Check out the support branch: > > > > > > git checkout support/1.15 > > > git pull origin support/1.15 > > > > > > 2. > > > > > > Create a signed RC tag (numbered sequentially): > > > > > > git tag -s rel/v1.15.2-RC1 -m "Apache Geode 1.15.2 RC1" > > > git push origin rel/v1.15.2-RC1 > > > > > > 3. > > > > > > Build, sign, checksum, and stage artifacts as per the RM runbook. > > > 4. > > > > > > Call a vote on dev@geode.apache.org. > > > > > > Repeat with -RC2, -RC3, etc. if fixes are needed. > > > 3. Finalizing the release > > > > > > When the vote passes (≥3 binding +1 PMC votes, ≥72h): > > > > > > 1. > > > > > > Tag the final release on support/1.15: > > > > > > git tag -s rel/v1.15.2 -m "Apache Geode 1.15.2" > > > git push origin rel/v1.15.2 > > > > > > 2. > > > > > > Publish release artifacts, close Nexus staging, move dist/dev → > > > dist/release, and send announce mail. > > > > > > *Note:* We do *not* merge support/1.15 into main, because main is > > tracking > > > the newer 2.x train. Patch releases for older trains stay on their > > support > > > branch. > > > 4. Forward-porting commits to develop > > > > > > - > > > > > > Every commit on support/1.15 since the last port sweep must be > > reviewed. > > > - > > > > > > Maintain a simple spreadsheet/log: > > > > > > Commit JIRA Description Forward to develop? (Y/N) > > > abc123 GEODE-12345 Fix NPE in Region destroy Y > > > def456 GEODE-12346 Update 1.15 RC version number N > > > > > > - > > > > > > After 1.15.2 ships, work through this list in order: > > > - > > > > > > Cherry-pick “Yes” commits into develop. > > > - > > > > > > Open PRs (batched if logical). > > > - > > > > > > Skip commits that are release-plumbing or 1.15-only > stabilization. > > > > > > This ensures bug fixes don’t get stranded on the support line. > > > ------------------------------ > > > > > > So right now for *1.15.2*: > > > > > > - > > > > > > Work only on support/1.15. > > > - > > > > > > Tag RCs as rel/v1.15.2-RC<N>, final as rel/v1.15.2. > > > - > > > > > > Release from those tags. > > > - > > > > > > Afterwards, sweep commits for forward-ports to develop. > > > - > > > > > > Leave main untouched, since it represents the current train. > > > > > > > > > On Fri, Aug 29, 2025 at 11:23 AM Jinwoo Hwang > > <jinwoo.hw...@sas.com.invalid > > > > > > > wrote: > > > > > > > Hi Kirk, > > > > > > > > Thank you for taking the time to put together such a valuable > > > > document—it's greatly appreciated. > > > > > > > > As we prepare for the 1.15.2 release, I noticed that the current > > > > support/1.15 branch is 79 commits ahead of develop branch. I wanted > to > > > > confirm whether we should open pull requests to merge those commits > in > > > > order to cut the release branch, or if there's a different process we > > > > should follow. > > > > > > > > I appreciate your guidance and support as always. > > > > > > > > > > > > Best regards, > > > > > > > > Jinwoo Hwang (he/him/his) > > > > > > > > > > > > > > > > SAS® Research and Development > > > > > > > > > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6Nzo4OGNlOmU1OGVlZTkwNWVhNWY2OGEyNzEzNzllYWMzNDI0MzNlNmRkYzdhNDA1MTJhODNkMTc5NzU1OTQwNzY0YmZhMzI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848725567%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=iMpDatt5lS9omgwHZwJlbaquTnNeWNqqor2yjYTULlw%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6Nzo4OGNlOmU1OGVlZTkwNWVhNWY2OGEyNzEzNzllYWMzNDI0MzNlNmRkYzdhNDA1MTJhODNkMTc5NzU1OTQwNzY0YmZhMzI6cDpUOk4 > > > > > > < > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2Fjinwoohwang.com%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6NzoxMGZhOjFjMzk2MjUwY2EwMGExZjM3MjczYzBmNjYwOTY0MWJjMzYzZGIwNWQzNThmMWMwYjY0ZDBiZTVmMTA4NDExOWI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848732002%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=cn1e9wmONpfzhduzVEU%2FWdBjEhR81ec%2BNXy9xj0WcXQ%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___http://jinwoohwang.com/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6NzoxMGZhOjFjMzk2MjUwY2EwMGExZjM3MjczYzBmNjYwOTY0MWJjMzYzZGIwNWQzNThmMWMwYjY0ZDBiZTVmMTA4NDExOWI6cDpUOk4 > > > > > > >< > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6Nzo4OGNlOmU1OGVlZTkwNWVhNWY2OGEyNzEzNzllYWMzNDI0MzNlNmRkYzdhNDA1MTJhODNkMTc5NzU1OTQwNzY0YmZhMzI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848738313%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=VN62sAdSjALz1p3FZZJ%2BmAm8mb2JACeaNd5nADIJOe4%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6Nzo4OGNlOmU1OGVlZTkwNWVhNWY2OGEyNzEzNzllYWMzNDI0MzNlNmRkYzdhNDA1MTJhODNkMTc5NzU1OTQwNzY0YmZhMzI6cDpUOk4 > > > > > > > > > > > > > > > > > > > > > > > From: Kirk Lund <kl...@apache.org> > > > > Date: Friday, August 29, 2025 at 1:54 PM > > > > To: dev@geode.apache.org <dev@geode.apache.org> > > > > Subject: [DISCUSS] Draft Geode Release Manager runbook > > > > > > > > > > > > EXTERNAL > > > > > > > > Hi all, > > > > > > > > Here’s an infrastructure-agnostic write-up of what I remember. > > > > It’s basically just a new, simplified, Release-Manager-centric way to > > > > present the same info and provide more details in a few areas. > > > > > > > > If this looks correct to others then maybe I should add a new > > Confluence > > > > page or weave this into the existing “Release Apache Geode” page > entry, > > > > which goes into great detail about the old tooling and VMware > pipelines > > > > that are now outdated. > > > > > > > > Quick note on voting: anyone can vote on dev@geode.apache.org > <mailto: > > > > dev@geode.apache.org>, but only Geode PMC votes are binding (the > > release > > > > requires 3+ binding +1s and a ≥72h vote window). > > > > > > > > ________________________________ > > > > Apache Geode Release Manager Runbook (Geode-specific) > > > > > > > > This runbook captures how we do Geode releases and how someone > > volunteers > > > > to be Release Manager (RM). Geode-specific paths, names, and > > expectations > > > > are called out explicitly. > > > > > > > > ________________________________ > > > > A) Volunteering to be the Geode Release Manager > > > > > > > > Purpose: establish who’s running the release and ensure they can > > produce > > > > verifiable signed artifacts. > > > > > > > > 1. Confirm eligibility > > > > > > > > * You’re an Apache Geode committer (binding PMC votes come > later > > > > during the release vote, but the RM can be a committer). > > > > > > > > * You’re available to drive the RC cycle (coordination on > > > > dev@geode.apache.org<mailto:dev@geode.apache.org>). > > > > > > > > 2. Announce your intent > > > > > > > > * Send a short note to dev@geode.apache.org<mailto: > > > > dev@geode.apache.org> (subject: [DISCUSS] Volunteer RM for Geode > > > > <version>). If there are multiple volunteers, decide amicably who > takes > > > RM > > > > and who helps as shadow RM. > > > > > > > > 3. Prepare your OpenPGP signing key (one-time per person) > > > > > > > > * Create a key (ed25519 or RSA-4096). > > > > > > > > * Verify your key has a non-expired expiration date and a > > > > recognizable UID (your Apache email recommended). > > > > > > > > 4. Publish your public key > > > > > > > > * Export ASCII-armored public key and publish to a keyserver > > > (e.g., > > > > keys.openpgp.org< > > > > > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2Fkeys.openpgp.org___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6Nzo3OGE3OjBlYmIxYjdjMzU0MTM3MTM4MmUwMGY4NTQzYjgwOWM4OWEyZjI1Y2JlMzVkYjg4MGFhYTVmNWZmYWQ1NGJmMDY6aDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848744430%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=GKrqO6ZOeVDFSMCCtoywz8bIzffSsuIt1D5QcmrRiR8%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___http://keys.openpgp.org___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6Nzo3OGE3OjBlYmIxYjdjMzU0MTM3MTM4MmUwMGY4NTQzYjgwOWM4OWEyZjI1Y2JlMzVkYjg4MGFhYTVmNWZmYWQ1NGJmMDY6aDpUOk4 > > > > > > >)< > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2Fkeys.openpgp.org___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6Nzo3OGE3OjBlYmIxYjdjMzU0MTM3MTM4MmUwMGY4NTQzYjgwOWM4OWEyZjI1Y2JlMzVkYjg4MGFhYTVmNWZmYWQ1NGJmMDY6aDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848750624%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=pPqjYlXmMkIG66cmvZUNa4TsqUYg3KQSVm48b1kKv7U%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___http://keys.openpgp.org___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6Nzo3OGE3OjBlYmIxYjdjMzU0MTM3MTM4MmUwMGY4NTQzYjgwOWM4OWEyZjI1Y2JlMzVkYjg4MGFhYTVmNWZmYWQ1NGJmMDY6aDpUOk4 > > > > > > > > > > > so others can fetch it. > > > > > > > > 5. Add your key to Geode’s KEYS file > > > > > > > > * Checkout the Geode dist area: > > > > > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Frelease%2Fgeode%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6Nzo1ZTA0OjNjYzZiZTAyNmQ2ZjNmNjU4NTE5NjVjNGNhNGFhYTA0NWZhOTg3ZTc3MzhkMmU3NGM0YTU5MGEwMDlmZmFlNjc6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848756595%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=w1zOKGjDjheq8DvBtVj9VQM9FcwbPA2SWG1qSUljFt4%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/release/geode/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6Nzo1ZTA0OjNjYzZiZTAyNmQ2ZjNmNjU4NTE5NjVjNGNhNGFhYTA0NWZhOTg3ZTc3MzhkMmU3NGM0YTU5MGEwMDlmZmFlNjc6cDpUOk4 > > > > > > << > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Frelease%2Fgeode%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6Nzo1ZTA0OjNjYzZiZTAyNmQ2ZjNmNjU4NTE5NjVjNGNhNGFhYTA0NWZhOTg3ZTc3MzhkMmU3NGM0YTU5MGEwMDlmZmFlNjc6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848762645%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ajPEY6lqaVHAgs5LKIM7lqELjR76eSuSQfM0Rtr1ZTo%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/release/geode/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6Nzo1ZTA0OjNjYzZiZTAyNmQ2ZjNmNjU4NTE5NjVjNGNhNGFhYTA0NWZhOTg3ZTc3MzhkMmU3NGM0YTU5MGEwMDlmZmFlNjc6cDpUOk4 > > > > > > > > > > > > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Frelease%2Fgeode%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6NzphNmU4OjRlNmJjZDUzZjM4MWYwYTNjMWUyYzAzNGYxZjY3YzM0MjVlNzFhYjlmNmQ4NTg4YWM3ZTkyY2QzYzhlYzJhNzY6aDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848768621%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=TnW9ZajEL4uNBLIqZ520T8YKBdZoeerMVjAP6mguUP4%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/release/geode/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6NzphNmU4OjRlNmJjZDUzZjM4MWYwYTNjMWUyYzAzNGYxZjY3YzM0MjVlNzFhYjlmNmQ4NTg4YWM3ZTkyY2QzYzhlYzJhNzY6aDpUOk4 > > > > > > < > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Frelease%2Fgeode%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6NzphNmU4OjRlNmJjZDUzZjM4MWYwYTNjMWUyYzAzNGYxZjY3YzM0MjVlNzFhYjlmNmQ4NTg4YWM3ZTkyY2QzYzhlYzJhNzY6aDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848774581%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=TogL9W3lLrF%2FQNpN1DPQBxS9ONLKa6vHIFtsqf83Qeo%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/release/geode/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6NzphNmU4OjRlNmJjZDUzZjM4MWYwYTNjMWUyYzAzNGYxZjY3YzM0MjVlNzFhYjlmNmQ4NTg4YWM3ZTkyY2QzYzhlYzJhNzY6aDpUOk4 > > > > > > > > > > > > > > > > > > > > * Append your public key to KEYS and commit. > > > > > > > > * This ensures users and voters can verify your signatures for > > > > Geode releases. > > > > > > > > 6. Local tooling sanity checks > > > > > > > > * Ensure gpg works in non-TUI mode, you can create detached > > ASCII > > > > signatures (.asc), and you have utilities for checksums (sha512sum or > > > > equivalent). > > > > > > > > * Ensure you can deploy to ASF Nexus (Maven staging) with your > > > > Apache credentials and that your Maven settings.xml is configured > > > > appropriately. > > > > > > > > Once steps 1–6 are complete, you’re ready to act as Release Manager > for > > > > Geode. > > > > > > > > ________________________________ > > > > B) Geode Release Steps (performed by the RM) > > > > > > > > Scope: from cutting the release branch/tag through vote, promotion, > and > > > > publication. Geode-specific repos/paths are used throughout. > > > > > > > > 1. Cut the release branch & tag > > > > > > > > * Branch from the intended baseline (e.g., release/1.16.0 or > > > > whatever Geode is using). > > > > > > > > * Bump version numbers, update CHANGELOG/RELEASE NOTES, > > > > LICENSE/NOTICE as needed. > > > > > > > > * Create a signed tag for the RC base if the project > convention > > > > uses RC tags (e.g., rel/v1.16.0-RC1). > > > > > > > > 2. Build release artifacts > > > > > > > > * Produce source archive (required by Apache) and optional > > binary > > > > archive if Geode ships one: > > > > > > > > * apache-geode-<version>-src.tar.gz > > > > > > > > * apache-geode-<version>-bin.tar.gz (if applicable) > > > > > > > > 3. Sign and checksum the archives > > > > > > > > * For each archive: create detached ASCII PGP signature > (.asc). > > > > > > > > * Generate SHA-512 checksum files (.sha512). > > > > > > > > * Note: For the ASF release vote, we sign the archives (not > each > > > > JAR inside). Per-artifact signatures for JARs are handled during > Maven > > > > Central staging. > > > > > > > > 4. Stage Maven artifacts for Central (do not release yet) > > > > > > > > * Deploy with the Geode release profile so that JARs, POMs, > > > > sources, and javadocs are signed. > > > > > > > > * Close the staged repository in ASF Nexus but do not release > > > until > > > > the vote passes. > > > > > > > > 5. Upload the Release Candidate to dist/dev > > > > > > > > * Commit the RC to: > > > > > > > > * > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fgeode%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6NzozNjBhOmZhYzAwODk2YjQ2NzhlMzk3YThiZjI3YzljYjIxYTJhYWRhYTZlODBjZjExZTNiZTVhMGUxMmY0ZDFmZjFhMzc6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848780577%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=hbcTY6jiPSoppJoKlPlPWV4CSydAXgJAxcoiBHoV8g4%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/dev/geode/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6NzozNjBhOmZhYzAwODk2YjQ2NzhlMzk3YThiZjI3YzljYjIxYTJhYWRhYTZlODBjZjExZTNiZTVhMGUxMmY0ZDFmZjFhMzc6cDpUOk4 > > > > > > << > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fgeode%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6NzozNjBhOmZhYzAwODk2YjQ2NzhlMzk3YThiZjI3YzljYjIxYTJhYWRhYTZlODBjZjExZTNiZTVhMGUxMmY0ZDFmZjFhMzc6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848786475%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=NlDZBPNSdHx27Vfx%2B7nPM2RQTWSUU5A7KcukosUTy%2BA%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/dev/geode/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjRiMDBkYWEzNWVkMTgxMzY3Y2IyMDhjY2JkOWMxYWQ6NzozNjBhOmZhYzAwODk2YjQ2NzhlMzk3YThiZjI3YzljYjIxYTJhYWRhYTZlODBjZjExZTNiZTVhMGUxMmY0ZDFmZjFhMzc6cDpUOk4 > > > > > > > > > > > > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fgeode%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6NzphMTgxOjZiZDUwM2RiN2YwYThkOGQ3NDZlOWU4N2JmZDQ5MmNhY2RkYmQ3ZjczMGRmODg1NDNlYmQ0NDU0YWNhZThkNTY6aDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848792429%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=pXl%2FqrCGpQbG7m3RAXukOST9CwGuxcVnNXUnRD1WJJ0%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/dev/geode/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6NzphMTgxOjZiZDUwM2RiN2YwYThkOGQ3NDZlOWU4N2JmZDQ5MmNhY2RkYmQ3ZjczMGRmODg1NDNlYmQ0NDU0YWNhZThkNTY6aDpUOk4 > > > > > > < > > > > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fgeode%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6NzphMTgxOjZiZDUwM2RiN2YwYThkOGQ3NDZlOWU4N2JmZDQ5MmNhY2RkYmQ3ZjczMGRmODg1NDNlYmQ0NDU0YWNhZThkNTY6aDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C16a2ff93ffc34c7d6c0508ddea5fe639%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638924419848798378%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=vuKzUmMxsl5Wm62LOSSX%2FeA%2FnCxLmMGGR81iTl%2FXBSE%3D&reserved=0 > > < > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/dev/geode/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MGJhM2RjMTIxYjFjY2IzODg5YTFiMGFmMTBlOWNlMGE6NzphMTgxOjZiZDUwM2RiN2YwYThkOGQ3NDZlOWU4N2JmZDQ5MmNhY2RkYmQ3ZjczMGRmODg1NDNlYmQ0NDU0YWNhZThkNTY6aDpUOk4 > > > > > > > > > > > ><version>-RC<N>/ > > > > > > > > * Include the archives plus their .asc and .sha512 files. > > > > > > > > 6. Start the vote on dev@geode.apache.org<mailto: > > dev@geode.apache.org > > > > > > > > (≥72 hours) > > > > > > > > * Email subject: [VOTE] Apache Geode <version> RC<N> > > > > > > > > * Include links to: > > > > > > > > * The RC in dist/dev > > > > > > > > * The KEYS file for Geode (under dist/release/geode/KEYS) > > > > > > > > * The Nexus staging repository URL > > > > > > > > * Verification steps (sig/checksum commands, building from > > > > source, license/RAT checks) > > > > > > > > * Anyone can vote on dev@geode.apache.org<mailto: > > > > dev@geode.apache.org>, but only PMC member votes are binding. > Approval > > > > requires 3+ binding +1 PMC votes, and the vote must be open at least > 72 > > > > hours. > > > > > > > > 7. If issues are found > > > > > > > > * Cancel/close the vote, address the issues, increment RC > (e.g., > > > > RC2), and repeat steps 2–6. > > > > > > > > 8. Promote on success > > > > > > > > * After a successful vote, promote the release: > > > > > > > > * Copy the approved artifacts from > > > > dist/dev/geode/<version>-RC<N>/ to dist/release/geode/<version>/. > > > > > > > > * Only supported releases live in dist/release; older ones > > get > > > > archived automatically by ASF infra. > > > > > > > > 9. Publish to Maven Central > > > > > > > > * In ASF Nexus, Release the previously closed staging > repository > > > so > > > > artifacts sync to Maven Central. > > > > > > > > 10. Finalize communications & site updates > > > > > > > > * Push the final git tag (if you staged from a temporary tag). > > > > > > > > * Update the Geode website/downloads/release notes as per project > > > > convention. > > > > > > > > * Send an announce note to project lists (and > annou...@apache.org > > > > <mailto:annou...@apache.org> if appropriate). > > > > > > > > ________________________________ > > > > > > > > Notes: > > > > > > > > * ASF release vote = sign source/bin tarballs, not every JAR. > Maven > > > > Central staging handles per-JAR .asc. > > > > > > > > * Voting: anyone may vote on dev@, but only PMC votes are > binding. > > > > > > > > * Make sure your key is present in Geode’s KEYS file before > > starting > > > a > > > > vote. > > > > > > > > ________________________________ > > > > > > > > Thanks for reviewing. If this matches our current understanding, I > can > > > > polish it into Confluence either as a new page or merged into the > > > existing > > > > Release Apache Geode page. > > > > > > > > > > -- Best wishes！ CalvinKirs
