I think something weird happened with our release script and it ... double signed? Or something because that key signature that Szehon mentioned is another of my keys
> On May 30, 2022, at 10:51 AM, Eduard Tudenhoefner <edu...@dremio.com> wrote: > > I see this: > > $ gpg --verify apache-iceberg-0.13.2.tar.gz.sig > apache-iceberg-0.13.2.tar.gz.asc apache-iceberg-0.13.2.tar.gz > gpg: Signature made Thu 26 May 2022 03:07:34 AM CEST > gpg: using RSA key E2D007FD1D743D900417C433F1EB837ECD365E04 > gpg: BAD signature from "Russell Spitzer (CODE SIGNING KEY) > <russellspit...@apache.org <mailto:russellspit...@apache.org>>" [unknown] > > On Mon, May 30, 2022 at 4:11 PM Russell Spitzer <russell.spit...@gmail.com > <mailto:russell.spit...@gmail.com>> wrote: > gpg --verify apache-iceberg-0.13.2.tar.gz.sig > apache-iceberg-0.13.2.tar.gz.asc apache-iceberg-0.13.2.tar.gz > gpg: Signature made Wed May 25 20:16:24 2022 CDT > gpg: using RSA key E2D007FD1D743D900417C433F1EB837ECD365E04 > gpg: Good signature from "Russell Spitzer (CODE SIGNING KEY) > <russellspit...@apache.org <mailto:russellspit...@apache.org>>" [ultimate] > > Can you test that? > >> On May 30, 2022, at 1:49 AM, Eduard Tudenhoefner <edu...@dremio.com >> <mailto:edu...@dremio.com>> wrote: >> >> fwiw, I see the same key issue as was reported by Szehon >> >> On Mon, May 30, 2022 at 12:04 AM Szehon Ho <szehon.apa...@gmail.com >> <mailto:szehon.apa...@gmail.com>> wrote: >> On the other topic, the pr for 0.13 branch is merged: >> https://github.com/apache/iceberg/pull/4890 >> <https://github.com/apache/iceberg/pull/4890>, my preference will be to >> include this in new RC to solve the aforementioned issue : >> https://github.com/apache/iceberg/issues/4718 >> <https://github.com/apache/iceberg/issues/4718>. >> >> Thanks, >> Szehon >> >> On Sun, May 29, 2022 at 2:59 PM Szehon Ho <szehon.apa...@gmail.com >> <mailto:szehon.apa...@gmail.com>> wrote: >> Yea it does, I ran: >> >> curl -O https://dist.apache.org/repos/dist/dev/iceberg/KEYS >> <https://dist.apache.org/repos/dist/dev/iceberg/KEYS> >> gpg --import KEYS >> gpg --verify apache-iceberg-0.13.2.tar.gz.asc >> >> >> gpg: assuming signed data in 'apache-iceberg-0.13.2.tar.gz' >> >> gpg: Signature made Wed May 25 18:11:35 2022 PDT >> >> gpg: using EDDSA key >> >> 0E8C186954C8D6EDB0E769414AF56D520D263914 >> >> gpg: Can't check signature: No public key >> >> I wonder if I missed something. >> >> >> >> >> On Sun, May 29, 2022 at 11:25 AM Russell Spitzer <russell.spit...@gmail.com >> <mailto:russell.spit...@gmail.com>> wrote: >> Do you see this at the bottom of your KEY download? >> >> pub rsa4096 2022-05-26 [SC] >> E2D007FD1D743D900417C433F1EB837ECD365E04 >> uid [ultimate] Russell Spitzer (CODE SIGNING KEY) >> <russellspit...@apache.org <mailto:russellspit...@apache.org>> >> sig 3 F1EB837ECD365E04 2022-05-26 Russell Spitzer (CODE SIGNING KEY) >> <russellspit...@apache.org <mailto:russellspit...@apache.org>> >> sub rsa4096 2022-05-26 [E] >> sig F1EB837ECD365E04 2022-05-26 Russell Spitzer (CODE SIGNING KEY) >> <russellspit...@apache.org <mailto:russellspit...@apache.org>> >> >> -----BEGIN PGP PUBLIC KEY BLOCK----- >> >> mQINBGKOyGoBEADL2+IijVhSlCliDOSFTmsQqQ+pIVFjdZj1IVr9WtCXtOl+6/EX >> m7VIbzFl4DAQ9C0/BT7SiLXmnO0RMIRv+nVPm3i7zAB9UnYuEw8aZR9KQzPySt7b >> E7ZvAB453bOuJGOsNn4fO66OL/r1Oq6S7sJ0xXeVv1uZdWdoeVFIbNdRIIyx8BOx >> BqtqQnC3ORygDw6Pquy7EX3KkrV6xxiXaK4mFo1ETDKzyg17IOmKnmQ9WkCXEwmr >> iVSbYCYuIwgXYAE6274o9Eol+H8xacvYY6hg/S/oU36ttgawv8clQ/AcqEUvS9C5 >> 3cVdrwN+DxtfuqiKmnVodsdpjDEB3wbdGN7lEikYxzFeVaKYdJHRqTuOp/RCERdb >> g9vGMgR6Smo1qXVYvf76Kczf6F+kmqRd7BRy7xWZPhcMJ7yEgHzz0pes2TomA+67 >> 7/enlwPxDO186OZBKuUlS4A6i1964IpCgwToNYFouzSbU4BirhglzDXzaeGwye4H >> OeuvlEFNdI20fmSF8XDyQ7WmKVwktrNTHaiLRXtYWUFRxjeAvDRbf9Tqq2AHTrQ7 >> fGI7vDgEKHMZqW7WUJ/mHdklZLtopPKRtzGdYJjVt1qdJMFfYnAffXsmTc6FoDOr >> F7q+E1pwrRlKASvdaCcGShG0EvIL+dWl9a1Z1/YvA3WH+NxNflstnSXbtQARAQAB >> tD5SdXNzZWxsIFNwaXR6ZXIgKENPREUgU0lHTklORyBLRVkpIDxydXNzZWxsc3Bp >> dHplckBhcGFjaGUub3JnPokCUQQTAQgAOxYhBOLQB/0ddD2QBBfEM/Hrg37NNl4E >> BQJijshqAhsDBQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEPHrg37NNl4E >> ipUP/02iLEbQDLdRCosheyvFP27Xi05BV37HO7xjG5FXMRrERhD5WG597YshHNxy >> IOPvyc+tdhRdLpFb+hgm4RRnGGm0Zjc0fT13d1nnQ0y+JnG8Dy/uVI76/vdJppNs >> NADuv99g0ckR+61Nj25+nP86zBDiIKy/iIdNj6WgTIibB0kuAavbj7ffYJ10Cj+P >> kb6Y09qzn/8lM/ScmDy90I8TbPFnAkg5wBGG+Qn8T/x4WQaSyBSb6stYWIB3O4Vu >> 5GVxRQmYNErKtnAcOzzWYMQAXJno3rKt6cYi8NPllzsf4h5uLgR6B95lVL3Ib1aA >> 2gITVGvK0nDpevJSXEcmQvWNaBYSbcNrLZHR1OsY7XgaHXndbPGdBZBb59huLC0i >> VFXkXXOZFNl/qiEo8w4/AoB0H1JinUy7Z0DZwpELt3854nWLn3PN34T6ePJccR6G >> AZMML3R6O0qv6dea41b/GNBEgiO4A4FR2lvX7NmcjltsDvquh/5S4CBJb3HF5EvW >> zVSi2Tnda+qesPimHCybykyb0e129io4uYfW11OKB1cey5e68j/XZQGwHjggqThO >> 0ww4A4jP8T06iiysNFuKt3oUNLq57Dcstg4+1Ax+/7jUtKDXF/bMXRKk167wZ+ma >> wDr/8B4z/u8c8mHxyN1O5/FnK5weJwjfzz8fq95f0YVbbnCSuQINBGKOyGoBEAC6 >> q0Fy2oF8x1huRcHS/BiddbOLHGo9VEmD/MGAVVgC586t14zhIEb+CvGYTVVjvpm3 >> /AX8pyEXRe1g1ZarrKLAKyvArISy+loqaPnAgF01LEUzwMa1rgEpzg8994I4R/+c >> wKv2eznH2702HjItbKVsKXtU7fwLA917DBuJqL/8HwcoTB/jQnsQq/R9UjSYnBcb >> 2l5SdcdySZla6Qp2toeic96vfI3u9Jal1cm4wYYM3gpAaX31ObNOnN9PTiVkL7UW >> le9qAwCEZao8jxzjqJvQeqQDgd+xokKwlgMGkcf9hhsyX47qVEGnpvmI/T3TlNqb >> nRMM/o0nayAfbBvOaswLpf+UM4uxpmmBkJIHrsv6ae5u2OBp5ehC+myeaLo4gZZh >> gXlE6kBoGQi/saZN0L4PFeNS5gmegLn4fvQqYv1vJitXyEPgfrjRNTZr4E1QTjwy >> vwCf+UjLqk7h3QjHwqzFbEq4MPA6qrmq6xAQsYGg0+UzCaOqiDspn0N8fELBC695 >> CQ6qniOoAQe2RIv8mRtVHEBdCtASX+O7C0J0dVJvPXH+CVe2R/FqJxsDvMNySCbz >> LXupgSOfzsftPB+6qd4s3751g4sfQfOch31Rwk1K2N3SqpjypNO/6bYKnKehc4/1 >> kjBOQlDLsv6A2nejxk8RD4oQNn1unm+rwHFzA6vC1QARAQABiQI2BBgBCAAgFiEE >> 4tAH/R10PZAEF8Qz8euDfs02XgQFAmKOyGoCGwwACgkQ8euDfs02XgSkMw//WdZ+ >> ozufoPOdLsCWkvNZu0goC8ukeKFTwTnX6SdIsRNS2wqbcYnHsDlZcNNwGXOirqmM >> 1gYt6+rUC/IXJ/v6ApGf6UYup/c+w0iqzTnyZNS49sPFgKmegQrijKVi9We+hA4T >> o8omjozR2i5J0mZy0wgZ0PN31M/NekSwEYI1AepjsExcMSIuvYpgXToK4wDh8qZG >> YLNrd1yq3UhIwkMLVr8myg/yt1TjE24upyLE3NvTMbW88tm+UjVu6J3r0rIFVpn+ >> 7xt0T6U0XhM+c44F6LR+GDLiRY7l1OfVlvARohICWgk5zR1cPwKXAeUxYA36zETC >> G23daNm7HmaaEzbRDVcvShn+WyZLfh/iSAu2cz+GwYMrXyBx4K2mmE5mGofJPjpZ >> W1Kz2F9oYm2Ev6HleOgWOaebL09eSwKderQrYKRht/xrnuaDsL60LttiS4UuR4xY >> zdd+xI6Vx9XFjmbDL24k7fQ8wNy3rhmRyrQRFYYMNLNoH29eRMO3CkcbMB3MNvME >> mk43A19XoEEHQ52Tv7+aTVzrS5QjzKvcQ+62eEE15k0XH39/ZCYPikR8XEqs0YkO >> wdFeyrBN22jtT48jMJ4IFw4odabqOqBn6Wazx3tBg0ZMTxn/i2H4tHpe78RIj/7Z >> 7eLhkMY0meA64TMBCc0aS3ffCnJzetWOSpgjv9o= >> =gy3b >> -----END PGP PUBLIC KEY BLOCK----- >> >> >>> On May 28, 2022, at 2:04 PM, Szehon Ho <szehon.apa...@gmail.com >>> <mailto:szehon.apa...@gmail.com>> wrote: >>> >>> Hi >>> >>> For gpg verify KEYS i get: >>> gpg: Can't check signature: No public key >>> >>> I imported latest keys and do see key for : >>> uid Russell Spitzer (CODE SIGNING KEY) <russellspit...@apache.org >>> <mailto:russellspit...@apache.org>> >>> sub rsa4096 2022-05-26 [E] >>> >>> but maybe no public key? Maybe I am missing something obvious. >>> >>> Also wanted to ask, can we get this one in as well: >>> https://github.com/apache/iceberg/pull/4720 >>> <https://github.com/apache/iceberg/pull/4720> : user cannot use projection >>> on partitions table. >>> >>> If so, I will make a backport pr. Sorry it's a regression in 0.13.2, and I >>> should have noticed and marked it for backport earlier. >>> >>> Thanks, >>> Szehon >>> >>> >>> On Thu, May 26, 2022 at 12:11 AM Eduard Tudenhoefner <edu...@dremio.com >>> <mailto:edu...@dremio.com>> wrote: >>> Hi Everyone, >>> >>> I propose that we release the following RC as the official Apache Iceberg >>> 0.13.2 release. >>> The commit ID is f7fd013645823911da116770362463d9df1a54ae >>> >>> * This corresponds to the tag: apache-iceberg-0.13.2-rc0 >>> * https://github.com/apache/iceberg/commits/apache-iceberg-0.13.2-rc0 >>> <https://github.com/apache/iceberg/commits/apache-iceberg-0.13.2-rc0> >>> * >>> https://github.com/apache/iceberg/tree/f7fd013645823911da116770362463d9df1a54ae >>> >>> <https://github.com/apache/iceberg/tree/f7fd013645823911da116770362463d9df1a54ae> >>> >>> The release tarball, signature, and checksums are here: >>> * https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-0.13.2-rc0 >>> <https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-0.13.2-rc0> >>> >>> You can find the KEYS file here: >>> * https://dist.apache.org/repos/dist/dev/iceberg/KEYS >>> <https://dist.apache.org/repos/dist/dev/iceberg/KEYS> >>> >>> Convenience binary artifacts are staged on Nexus. The Maven repository URL >>> is: >>> * https://repository.apache.org/content/repositories/orgapacheiceberg-1085/ >>> <https://repository.apache.org/content/repositories/orgapacheiceberg-1085/> >>> >>> Please download, verify, and test. >>> >>> Please vote in the next 72 hours. >>> >>> [ ] +1 Release this as Apache Iceberg <VERSION> >>> [ ] +0 >>> [ ] -1 Do not release this because... >> >
