Hi,

I confirm Toshiya's findings. The two signature files,
incubator-kie-10.0.0-rc2-sandbox-extended-services-macOS-x86.zip.sha512 and
incubator-kie-10.0.0-rc2-sandbox-extended-services-windows-x86.zip.sha512,
contain a whole path to the signed file (probably from the machine, where
it was created), which is incorrect on other users machines. I hope we
could just reupload the fixed signatures and not need a rc3 build.

Best regards,
Tibor

On Mon, Oct 7, 2024 at 10:41 AM Toshiya Kobayashi <
toshiyakobaya...@gmail.com> wrote:

> Hi,
>
> When testing checksum
>
> for i in *.{tar.gz,zip,vsix}; do echo $i; sha512sum --check $i.sha512; done
>
> I hit these failures.
>
> ```
> incubator-kie-10.0.0-rc2-sandbox-extended-services-macOS-x86.zip
> sha512sum:
>
> /home/runner/work/incubator-kie-tools/incubator-kie-tools/extended-services-final-release-artifacts/incubator-kie-10.0.0-rc2-sandbox-extended-services-macOS-x86.zip:
> No such file or directory
>
> /home/runner/work/incubator-kie-tools/incubator-kie-tools/extended-services-final-release-artifacts/incubator-kie-10.0.0-rc2-sandbox-extended-services-macOS-x86.zip:
> FAILED open or read
> sha512sum: WARNING: 1 listed file could not be read
> incubator-kie-10.0.0-rc2-sandbox-extended-services-windows-x86.zip
> sha512sum:
>
> /home/runner/work/incubator-kie-tools/incubator-kie-tools/extended-services-final-release-artifacts/incubator-kie-10.0.0-rc2-sandbox-extended-services-windows-x86.zip:
> No such file or directory
>
> /home/runner/work/incubator-kie-tools/incubator-kie-tools/extended-services-final-release-artifacts/incubator-kie-10.0.0-rc2-sandbox-extended-services-windows-x86.zip:
> FAILED open or read
> sha512sum: WARNING: 1 listed file could not be read
> ```
>
> I can workaround the issue by manually fixing
>
> incubator-kie-10.0.0-rc2-sandbox-extended-services-macOS-x86.zip.sha512
> incubator-kie-10.0.0-rc2-sandbox-extended-services-windows-x86.zip.sha512
>
> to trim the file path. (only file names will work)
>
> Hmm, it's trivial, but do we need rebuid?
>
> Regards,
> Toshiya
>
>
>
>
> On Sat, Oct 5, 2024 at 6:25 AM Alex Porcelli <porce...@apache.org> wrote:
>
> > Hello, Apache KIE(incubating) Community:
> >
> > I'm excited to announce our second call for a vote to release Apache
> > KIE(Incubating) 10.0.0-rc2 under the Apache Foundation. This follows
> > the cancellation [1] of RC1 due to a blocker issue that has now been
> > addressed.
> >
> > **IMPORTANT: Completing the checklist is REQUIRED for a valid vote.
> > Please ensure you go through all the items before casting your vote.**
> >
> > Key points:
> > 1. This is our first release under the Apache Foundation, marking a
> > significant milestone for our project.
> > 2. Our last community release was in September 2023. Since then, we've
> > worked hard to adapt to our new home: Apache Foundation.
> > 3. The verification and build instructions on our website have been
> > updated with improvements, including container images verification
> > (addressing the blocker found in RC1).
> >
> > The release candidate:
> > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc2/
> >
> > The maven staging for this release:
> > - Drools:
> > https://repository.apache.org/content/repositories/orgapachekie-1046
> > - Optaplanner:
> > https://repository.apache.org/content/repositories/orgapachekie-1047
> > - Kogito Runtimes:
> > https://repository.apache.org/content/repositories/orgapachekie-1048
> > - Kogito Apps:
> > https://repository.apache.org/content/repositories/orgapachekie-1049
> > - Kogito Apps - JITExecutor Native Linux:
> > https://repository.apache.org/content/repositories/orgapachekie-1050
> > - Kogito Apps - JITExecutor Native Windows:
> > https://repository.apache.org/content/repositories/orgapachekie-1051
> > - Kogito Apps - JITExecutor Native MacOS:
> > https://repository.apache.org/content/repositories/orgapachekie-1052
> > - KIE Tools - JBPM Quarkus DevUI:
> > https://repository.apache.org/content/repositories/orgapachekie-1053
> > - KIE Tools - Sonataflow Quarkus DevUI:
> > https://repository.apache.org/content/repositories/orgapachekie-1054
> >
> > The artifacts are signed with PGP key corresponding to
> > [priv...@kie.apache.org], found in the KEYS file:
> > https://downloads.apache.org/incubator/kie/KEYS
> >
> > The vote will be open for at least 72 hours until the necessary number
> > of votes are reached.
> >
> > Please vote accordingly:
> > [ ] +1 approve
> > [ ] +0 no opinion
> > [ ] -1 disapprove with the reason
> >
> > To learn more about KIE, please see https://kie.apache.org/
> >
> > *Valid check is a requirement for a vote.* Checklist for reference:
> >
> > [ ] Download KIE artifacts are valid.
> > [ ] Checksums and PGP signatures are valid.
> > [ ] Source code distributions have correct names matching the current
> > release.
> > [ ] LICENSE and NOTICE files are correct.
> > [ ] All files have license headers if necessary.
> > [ ] No compiled archives bundled in source archive.
> > [ ] Can compile from source.
> >
> > More detail checklist please refer:
> >
> >
> https://cwiki.apache.org/confluence/display/INCUBATOR/Incubator+Release+Checklist
> >
> > For updated information on how to verify the release, including new
> > container image verification, please refer to:
> > https://kie.apache.org/docs/community/verify
> >
> > For updated information on how to build from source zip, please refer to:
> > https://kie.apache.org/docs/community/build
> >
> > [1] - https://lists.apache.org/thread/fr77w51gbhbfprxdybqvr7gh5163p3mz
> >
> > Best,
> > Alex
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscr...@kie.apache.org
> > For additional commands, e-mail: dev-h...@kie.apache.org
> >
> >
>

Reply via email to