Hi Jan
Under linux - but running again, I saw this gem I missed before:
verify-release.sh: line 19: unzip: command not found
This is a (relatively) new install, so it's just missing the unzip command.
If you really felt like it, you could modify the script - insert at the top:
if ! which unzip &> /dev/null; then
echo "The 'unzip' utility is required, but was not found in your path"
exit 1
fi
Making the script fail fast decreases the likelihood that this is ever
an issue again. Doesn't have to be done now tho - can be modified and go
out with the next release, if you are going to make the change.
-d
On 2025/08/20 10:45, Jan Friedrich wrote:
Hi Davyd,
are you verifying under Windows or Linux?
Jan
Windows:
D:\Svn\apache-dist-logging-dev\log4net\3.2.0> ls
Directory: D:\Svn\apache-dist-logging-dev\log4net\3.2.0
Mode LastWriteTime Length Name
---- ------------- ------ ----
-a--- 2025-08-19 23:01 676722
apache-log4net-binaries-3.2.0.zip
-a--- 2025-08-19 23:01 235
apache-log4net-binaries-3.2.0.zip.asc
-a--- 2025-08-19 23:01 167
apache-log4net-binaries-3.2.0.zip.sha512
-a--- 2025-08-19 23:01 1329981
apache-log4net-source-3.2.0.zip
-a--- 2025-08-19 23:01 235
apache-log4net-source-3.2.0.zip.asc
-a--- 2025-08-19 23:01 165
apache-log4net-source-3.2.0.zip.sha512
-a--- 2025-08-19 23:01 713174 apache-log4net.3.2.0.nupkg
-a--- 2025-08-19 23:01 235 apache-log4net.3.2.0.nupkg.asc
-a--- 2025-08-19 23:01 160
apache-log4net.3.2.0.nupkg.sha512
-a--- 2025-08-19 20:17 1371 verify-release.ps1
-a--- 2025-08-19 23:01 235 verify-release.ps1.asc
-a--- 2025-08-19 23:01 152 verify-release.ps1.sha512
-a--- 2025-05-19 16:31 314 verify-release.sh
-a--- 2025-08-19 23:01 235 verify-release.sh.asc
-a--- 2025-08-19 23:01 151 verify-release.sh.sha512
D:\Svn\apache-dist-logging-dev\log4net\3.2.0> .\verify-release.ps1
./apache-log4net-binaries-3.2.0.zip: Passed
./apache-log4net-source-3.2.0.zip: Passed
./apache-log4net.3.2.0.nupkg: Passed
./verify-release.ps1: Passed
./verify-release.sh: Passed
gpg: assuming signed data in
'D:\\Svn\\apache-dist-logging-dev\\log4net\\3.2.0\\apache-log4net-binaries-3.2.0.zip'
gpg: Signature made 08/19/25 23:01:58 W. Europe Daylight Time
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
gpg: assuming signed data in
'D:\\Svn\\apache-dist-logging-dev\\log4net\\3.2.0\\apache-log4net-source-3.2.0.zip'
gpg: Signature made 08/19/25 23:01:58 W. Europe Daylight Time
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
gpg: assuming signed data in
'D:\\Svn\\apache-dist-logging-dev\\log4net\\3.2.0\\apache-log4net.3.2.0.nupkg'
gpg: Signature made 08/19/25 23:01:57 W. Europe Daylight Time
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
gpg: assuming signed data in
'D:\\Svn\\apache-dist-logging-dev\\log4net\\3.2.0\\verify-release.ps1'
gpg: Signature made 08/19/25 23:01:58 W. Europe Daylight Time
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
gpg: assuming signed data in
'D:\\Svn\\apache-dist-logging-dev\\log4net\\3.2.0\\verify-release.sh'
gpg: Signature made 08/19/25 23:01:58 W. Europe Daylight Time
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
D:\Svn\apache-dist-logging-dev\log4net\3.2.0\src> ls
Directory: D:\Svn\apache-dist-logging-dev\log4net\3.2.0\src
Mode LastWriteTime Length Name
---- ------------- ------ ----
d---- 2025-08-20 10:30 .github
d---- 2025-08-20 10:30 .mvn
d---- 2025-08-20 10:30 doc
d---- 2025-08-20 10:30 examples
d---- 2025-08-20 10:30 local-tasks
d---- 2025-08-20 10:30 scripts
d---- 2025-08-20 10:30 src
-a--- 2025-08-19 23:01 2309 .asf.yaml
-a--- 2025-08-19 23:01 11433 .editorconfig
-a--- 2025-08-19 23:01 737 .gitattributes
-a--- 2025-08-19 23:01 3947 .gitignore
-a--- 2025-08-19 23:01 1162 .zarro-defaults
-a--- 2025-08-19 23:01 6342 antora-playbook.yaml
-a--- 2025-08-19 23:01 161 appveyor.yml
-a--- 2025-08-19 23:01 2010 Dockerfile
-a--- 2025-08-19 23:01 11556 LICENSE
-a--- 2025-08-19 23:01 596 log4net.snk
-a--- 2025-08-19 23:01 650 log4net.snk.readme
-a--- 2025-08-19 23:01 11658 mvnw
-a--- 2025-08-19 23:01 7882 mvnw.cmd
-a--- 2025-08-19 23:01 186 NOTICE
-a--- 2025-08-19 23:01 40042 package-icon.png
-a--- 2025-08-19 23:01 263469 package-lock.json
-a--- 2025-08-19 23:01 1878 package.json
-a--- 2025-08-19 23:01 3236 pom.xml
-a--- 2025-08-19 23:01 465 rat.excludesFile
-a--- 2025-08-19 23:01 1125 README.md
-a--- 2025-08-19 23:01 746 STATUS.txt
Linux:
jan@localhost:/tmp/jfri/log4net$ export releaseVersion=3.2.0
jan@localhost:/tmp/jfri/log4net$ svn co
https://dist.apache.org/repos/dist/dev/logging/log4net/$releaseVersion \
log4net-$releaseVersion && cd $_
A log4net-3.2.0/apache-log4net-binaries-3.2.0.zip
A log4net-3.2.0/apache-log4net-binaries-3.2.0.zip.asc
A log4net-3.2.0/apache-log4net-binaries-3.2.0.zip.sha512
A log4net-3.2.0/apache-log4net-source-3.2.0.zip
A log4net-3.2.0/apache-log4net-source-3.2.0.zip.asc
A log4net-3.2.0/apache-log4net-source-3.2.0.zip.sha512
A log4net-3.2.0/apache-log4net.3.2.0.nupkg
A log4net-3.2.0/apache-log4net.3.2.0.nupkg.asc
A log4net-3.2.0/apache-log4net.3.2.0.nupkg.sha512
A log4net-3.2.0/verify-release.ps1.asc
A log4net-3.2.0/verify-release.sh.asc
A log4net-3.2.0/verify-release.ps1
A log4net-3.2.0/verify-release.ps1.sha512
A log4net-3.2.0/verify-release.sh
A log4net-3.2.0/verify-release.sh.sha512
Checked out revision 78757.
jan@localhost:/tmp/jfri/log4net/log4net-3.2.0$ bash ./verify-release.sh
./apache-log4net.3.2.0.nupkg: OK
./apache-log4net-binaries-3.2.0.zip: OK
./apache-log4net-source-3.2.0.zip: OK
./verify-release.ps1: OK
./verify-release.sh: OK
--2025-08-20 10:39:42-- https://downloads.apache.org/logging/KEYS
Resolving downloads.apache.org (downloads.apache.org)... 135.181.214.104,
88.99.208.237, 2a01:4f8:10a:39da::2, ...
Connecting to downloads.apache.org
(downloads.apache.org)|135.181.214.104|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 101768 (99K)
Saving to: ‘KEYS’
KEYS
100%[==================================================================================>]
99.38K --.-KB/s in 0.1s
2025-08-20 10:39:42 (795 KB/s) - ‘KEYS’ saved [101768/101768]
gpg: assuming signed data in '/tmp/jfri/log4net/log4net-3.2.0/verify-release.sh'
gpg: Signature made Tue 19 Aug 2025 11:01:58 PM CEST
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
gpg: assuming signed data in
'/tmp/jfri/log4net/log4net-3.2.0/verify-release.ps1'
gpg: Signature made Tue 19 Aug 2025 11:01:58 PM CEST
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
gpg: assuming signed data in
'/tmp/jfri/log4net/log4net-3.2.0/apache-log4net-binaries-3.2.0.zip'
gpg: Signature made Tue 19 Aug 2025 11:01:58 PM CEST
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
gpg: assuming signed data in
'/tmp/jfri/log4net/log4net-3.2.0/apache-log4net-source-3.2.0.zip'
gpg: Signature made Tue 19 Aug 2025 11:01:58 PM CEST
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
gpg: assuming signed data in
'/tmp/jfri/log4net/log4net-3.2.0/apache-log4net.3.2.0.nupkg'
gpg: Signature made Tue 19 Aug 2025 11:01:57 PM CEST
gpg: using EDDSA key 7D24496A230E29D6349A99EF583E491578F02D5D
gpg: Good signature from "Jan Friedrich <freeand...@apache.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D24 496A 230E 29D6 349A 99EF 583E 4915 78F0 2D5D
jan@localhost:/tmp/jfri/log4net/log4net-3.2.0$ cd src
jan@localhost:/tmp/jfri/log4net/log4net-3.2.0/src$ ll
total 444
drwxrwxr-x 9 build_agent build_agent 4096 Aug 20 10:39 ./
drwxrwxr-x 4 build_agent build_agent 4096 Aug 20 10:39 ../
-rw-rw-r-- 1 build_agent build_agent 6342 Aug 19 23:01 antora-playbook.yaml
-rw-rw-r-- 1 build_agent build_agent 161 Aug 19 23:01 appveyor.yml
-rw-rw-r-- 1 build_agent build_agent 2309 Aug 19 23:01 .asf.yaml
drwxrwxr-x 2 build_agent build_agent 4096 Aug 19 23:01 doc/
-rw-rw-r-- 1 build_agent build_agent 2010 Aug 19 23:01 Dockerfile
-rw-rw-r-- 1 build_agent build_agent 11433 Aug 19 23:01 .editorconfig
drwxrwxr-x 9 build_agent build_agent 4096 Aug 19 23:01 examples/
-rw-rw-r-- 1 build_agent build_agent 737 Aug 19 23:01 .gitattributes
drwxrwxr-x 3 build_agent build_agent 4096 Aug 19 23:01 .github/
-rw-rw-r-- 1 build_agent build_agent 3947 Aug 19 23:01 .gitignore
-rw-rw-r-- 1 build_agent build_agent 11556 Aug 19 23:01 LICENSE
drwxrwxr-x 2 build_agent build_agent 4096 Aug 19 23:01 local-tasks/
-rw-rw-r-- 1 build_agent build_agent 596 Aug 19 23:01 log4net.snk
-rw-rw-r-- 1 build_agent build_agent 650 Aug 19 23:01 log4net.snk.readme
drwxrwxr-x 3 build_agent build_agent 4096 Aug 19 23:01 .mvn/
-rwxr-xr-x 1 build_agent build_agent 11658 Aug 19 23:01 mvnw*
-rw-rw-r-- 1 build_agent build_agent 7882 Aug 19 23:01 mvnw.cmd
-rw-rw-r-- 1 build_agent build_agent 186 Aug 19 23:01 NOTICE
-rw-rw-r-- 1 build_agent build_agent 40042 Aug 19 23:01 package-icon.png
-rw-rw-r-- 1 build_agent build_agent 1878 Aug 19 23:01 package.json
-rw-rw-r-- 1 build_agent build_agent 263469 Aug 19 23:01 package-lock.json
-rw-rw-r-- 1 build_agent build_agent 3236 Aug 19 23:01 pom.xml
-rw-rw-r-- 1 build_agent build_agent 465 Aug 19 23:01 rat.excludesFile
-rw-rw-r-- 1 build_agent build_agent 1125 Aug 19 23:01 README.md
drwxrwxr-x 2 build_agent build_agent 4096 Aug 19 23:01 scripts/
drwxrwxr-x 7 build_agent build_agent 4096 Aug 19 23:01 src/
-rw-rw-r-- 1 build_agent build_agent 746 Aug 19 23:01 STATUS.txt
-rw-rw-r-- 1 build_agent build_agent 1162 Aug 19 23:01 .zarro-defaults
jan@localhost:/tmp/jfri/log4net/log4net-3.2.0/src$
Jan
