FYI: You may find this useful when validating the release artifacts. I have used a variation of the following script to retrieve release artifacts, verify PGP signatures and check hashes (md5 and sha512). I run this on my macbook pro with the utilities available via homebrew. I have pasted the script below as well as the output from running it.
Regards, -=e #! /bin/sh ## ---------------------------------------------------------------------- ## Retrieve release artifacts, verify pgp signatures and check hashes. ## ## Most utilities are available via homebrew packages: ## gnupg ## gpg2 ## coreutils ## ---------------------------------------------------------------------- files=" https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Darwin.dmg https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Darwin.dmg.asc https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Darwin.dmg.md5 https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Darwin.dmg.sha512 https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5 https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512 https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux.rpm https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux.rpm.asc https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux.rpm.md5 https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux.rpm.sha512 https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-src.tar.gz https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-src.tar.gz.asc https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-src.tar.gz.md5 https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-src.tar.gz.sha512 " utils="wget gpg gsha512sum gmd5sum" for util in $utils; do if ! type $util &> /dev/null ; then echo "FATAL: required utility does not exist ($util). You may need to enhance this script to meet your systems needs" fi done KEYS="https://dist.apache.org/repos/dist/dev/madlib/KEYS"; for file in $files $KEYS; do wget -nv --timestamping $file done gpg --import KEYS if [ $? != 0 ]; then echo "FATAL: failed to import PGP KEYS" fi for file in $files; do if [[ $file == *.asc ]]; then gpg --verify $(basename $file) if [ $? != 0 ]; then echo "FATAL: gpg signature verification failed" fi fi if [[ $file == *.sha512 ]]; then gsha512sum --check $(basename $file) if [ $? != 0 ]; then echo "FATAL: sha512 check failed" fi fi if [[ $file == *.md5 ]]; then gmd5sum --check $(basename $file) if [ $? != 0 ]; then echo "FATAL: md5 check failed" fi fi done 12 creekside in ~/workspace/MADlib/apache-madlib-1.12 ○ → ls -al ls -al total 8 drwxr-xr-x 3 espino staff 102 Aug 24 12:01 . drwxr-xr-x 13 espino staff 442 Aug 24 11:09 .. -rwxr-xr-x 1 espino staff 2941 Aug 24 12:00 apache-madlib-1.12-check.sh 12 creekside in ~/workspace/MADlib/apache-madlib-1.12 ○ → ./apache-madlib-1.12-check.sh ./apache-madlib-1.12-check.sh 2017-08-24 12:01:34 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Darwin.dmg [7003768/7003768] -> "apache-madlib-1.12-bin-Darwin.dmg" [1] 2017-08-24 12:01:34 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Darwin.dmg.asc [833/833] -> "apache-madlib-1.12-bin-Darwin.dmg.asc" [1] 2017-08-24 12:01:34 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Darwin.dmg.md5 [75/75] -> "apache-madlib-1.12-bin-Darwin.dmg.md5" [1] 2017-08-24 12:01:35 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Darwin.dmg.sha512 [164/164] -> "apache-madlib-1.12-bin-Darwin.dmg.sha512" [1] 2017-08-24 12:01:35 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm [3942352/3942352] -> "apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm" [1] 2017-08-24 12:01:35 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc [833/833] -> "apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc" [1] 2017-08-24 12:01:35 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5 [85/85] -> "apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5" [1] 2017-08-24 12:01:36 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512 [174/174] -> "apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512" [1] 2017-08-24 12:01:36 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux.rpm [3934656/3934656] -> "apache-madlib-1.12-bin-Linux.rpm" [1] 2017-08-24 12:01:36 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux.rpm.asc [833/833] -> "apache-madlib-1.12-bin-Linux.rpm.asc" [1] 2017-08-24 12:01:36 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux.rpm.md5 [74/74] -> "apache-madlib-1.12-bin-Linux.rpm.md5" [1] 2017-08-24 12:01:36 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-bin-Linux.rpm.sha512 [163/163] -> "apache-madlib-1.12-bin-Linux.rpm.sha512" [1] 2017-08-24 12:01:37 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-src.tar.gz [2579573/2579573] -> "apache-madlib-1.12-src.tar.gz" [1] 2017-08-24 12:01:37 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-src.tar.gz.asc [833/833] -> "apache-madlib-1.12-src.tar.gz.asc" [1] 2017-08-24 12:01:37 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-src.tar.gz.md5 [71/71] -> "apache-madlib-1.12-src.tar.gz.md5" [1] 2017-08-24 12:01:37 URL: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/apache-madlib-1.12-src.tar.gz.sha512 [160/160] -> "apache-madlib-1.12-src.tar.gz.sha512" [1] 2017-08-24 12:01:38 URL:https://dist.apache.org/repos/dist/dev/madlib/KEYS [20807/20807] -> "KEYS" [1] gpg: key CEAFB9B7FA9EB876: "Orhan Kislal (CODE SIGNING KEY) < [email protected]>" not changed gpg: key 2003B12D15C8C87A: "Orhan Kislal (ASF CODE SIGNING KEY) < [email protected]>" not changed gpg: key 5C1F7E296CDD6680: "Xiaocheng Tang (mktal) <[email protected]>" not changed gpg: key 52B795C96C725F40: "Rahul Iyer <[email protected]>" not changed gpg: key 80A9DD6D28D2C789: "Rashmi Raghu (CODE SIGNING KEY) < [email protected]>" not changed gpg: key FC0662F257325522: "Edward Bartolo Espino (CODE SIGNING KEY) < [email protected]>" not changed gpg: Total number processed: 6 gpg: unchanged: 6 gpg: assuming signed data in 'apache-madlib-1.12-bin-Darwin.dmg' gpg: Signature made Wed Aug 23 16:49:12 2017 PDT gpg: using RSA key BBEDA7B5F336D516B34ADE0CFC0662F257325522 gpg: Good signature from "Edward Bartolo Espino (CODE SIGNING KEY) < [email protected]>" [ultimate] apache-madlib-1.12-bin-Darwin.dmg: OK apache-madlib-1.12-bin-Darwin.dmg: OK gpg: assuming signed data in 'apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm' gpg: Signature made Wed Aug 23 16:54:04 2017 PDT gpg: using RSA key BBEDA7B5F336D516B34ADE0CFC0662F257325522 gpg: Good signature from "Edward Bartolo Espino (CODE SIGNING KEY) < [email protected]>" [ultimate] apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm: OK apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm: OK gpg: assuming signed data in 'apache-madlib-1.12-bin-Linux.rpm' gpg: Signature made Wed Aug 23 16:16:56 2017 PDT gpg: using RSA key BBEDA7B5F336D516B34ADE0CFC0662F257325522 gpg: Good signature from "Edward Bartolo Espino (CODE SIGNING KEY) < [email protected]>" [ultimate] apache-madlib-1.12-bin-Linux.rpm: OK apache-madlib-1.12-bin-Linux.rpm: OK gpg: assuming signed data in 'apache-madlib-1.12-src.tar.gz' gpg: Signature made Wed Aug 23 15:45:34 2017 PDT gpg: using RSA key BBEDA7B5F336D516B34ADE0CFC0662F257325522 gpg: Good signature from "Edward Bartolo Espino (CODE SIGNING KEY) < [email protected]>" [ultimate] apache-madlib-1.12-src.tar.gz: OK apache-madlib-1.12-src.tar.gz: OK 12 creekside in ~/workspace/MADlib/apache-madlib-1.12 ○ → ls -al ls -al total 34264 drwxr-xr-x 20 espino staff 680 Aug 24 12:01 . drwxr-xr-x 13 espino staff 442 Aug 24 11:09 .. -rw-r--r--@ 1 espino staff 20807 Aug 23 14:52 KEYS -rw-r--r--@ 1 espino staff 7003768 Aug 23 17:00 apache-madlib-1.12-bin-Darwin.dmg -rw-r--r--@ 1 espino staff 833 Aug 23 17:00 apache-madlib-1.12-bin-Darwin.dmg.asc -rw-r--r--@ 1 espino staff 75 Aug 23 17:00 apache-madlib-1.12-bin-Darwin.dmg.md5 -rw-r--r--@ 1 espino staff 164 Aug 23 17:00 apache-madlib-1.12-bin-Darwin.dmg.sha512 -rw-r--r--@ 1 espino staff 3942352 Aug 23 17:00 apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm -rw-r--r--@ 1 espino staff 833 Aug 23 17:00 apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc -rw-r--r--@ 1 espino staff 85 Aug 23 17:00 apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5 -rw-r--r--@ 1 espino staff 174 Aug 23 17:00 apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512 -rw-r--r--@ 1 espino staff 3934656 Aug 23 17:00 apache-madlib-1.12-bin-Linux.rpm -rw-r--r--@ 1 espino staff 833 Aug 23 17:00 apache-madlib-1.12-bin-Linux.rpm.asc -rw-r--r--@ 1 espino staff 74 Aug 23 17:00 apache-madlib-1.12-bin-Linux.rpm.md5 -rw-r--r--@ 1 espino staff 163 Aug 23 17:00 apache-madlib-1.12-bin-Linux.rpm.sha512 -rwxr-xr-x 1 espino staff 2941 Aug 24 12:00 apache-madlib-1.12-check.sh -rw-r--r--@ 1 espino staff 2579573 Aug 23 17:00 apache-madlib-1.12-src.tar.gz -rw-r--r--@ 1 espino staff 833 Aug 23 17:00 apache-madlib-1.12-src.tar.gz.asc -rw-r--r--@ 1 espino staff 71 Aug 23 17:00 apache-madlib-1.12-src.tar.gz.md5 -rw-r--r--@ 1 espino staff 160 Aug 23 17:00 apache-madlib-1.12-src.tar.gz.sha512 12 creekside in ~/workspace/MADlib/apache-madlib-1.12 ○ → On Thu, Aug 24, 2017 at 9:49 AM, Ed Espino <[email protected]> wrote: > Hello Apache MADlib dev community, > > This is the vote for Apache MADlib 1.12 Release (RC1). It provides the > source release tarball and convenience binaries. This is the first > Apache MADlib release as an Apache Top Level Project (TLP). > > The vote will run for at least 72 working hours and will close on > Tuesday, Aug 29, 2017 @ 6pm PDT. A minimum of 3 binding +1 votes and > more binding +1 than binding -1 are required to pass. > > The main goals of this release are: > > * New modules (All Pairs Shortest Path, Weakly Connected Components, > Breadth First Search, Mulitple Graph Measures, Stratified Sampling, > Train-test split, Multilayer Perceptron) > * Decision tree and random forest improvements (Allow expressions in > feature list, Allow array input for features, Filter NULL dependent > values in OOB, Add option to treat NULL as category) > * Summary improvements (Allow user to determine the number of columns > per run, Improve efficiency of computation time by ~35%) > * Sketch (Promote cardinality estimators to top level module from > early stage) > * Add basic code coverage support > * Updates for Apache Top Level Project > * Multiple bug fixes > > For additional information, please see: > https://cwiki.apache.org/confluence/display/MADLIB/MADlib+1.12 > > Here are the release artifact details: > > Source release tag to be voted on: rc/1.12-rc1, located here: > https://git-wip-us.apache.org/repos/asf?p=incubator-madlib.git;a=tag;h= > 65e6c9175e2754de85885f1f0d42b162deb9b76e > > Source release tarball can be retrieved from the following locations: > > Package: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-src.tar.gz > PGP Signature: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-src.tar.gz.asc > SHA512 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-src.tar.gz.sha512 > MD5 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-src.tar.gz.md5 > > Convenience binary packages can be retrieved from the following > locations: > > macOS Sierra: 10.12.6 (16G29) - PostgreSQL 9.5.8 & 9.6.4 > Package: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Darwin.dmg > PGP Signature: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Darwin.dmg.asc > SHA512 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Darwin.dmg.sha512 > MD5 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Darwin.dmg.md5 > > CentOS 6 - GPDB 5 Beta 8 > Package: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm > PGP Signature: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc > SHA512 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512 > MD5 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5 > > CentOS 5, 6 & 7 - GPDB 4 Orca, 4, PostgreSQL 9.5 & 9.6, HAWQ 2.0 > Package: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Linux.rpm > PGP Signature: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Linux.rpm.asc > SHA512 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Linux.rpm.sha512 > MD5 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ > apache-madlib-1.12-bin-Linux.rpm.md5 > > The PGP KEYS file used to validate the signature of the release artifacts > is available here: > https://dist.apache.org/repos/dist/dev/madlib/KEYS > > To help in tallying the vote, PMC members please be sure to indicate > "(binding)" with the vote. > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove (and reason why) > > Regards, > Ed Espino > -- *Ed Espino*
