+1 (non-binding as I'm not a PMC member) PGP signatures validated Hashes validated Apache Release Audit Tool (RAT) validated
On macOS 10.12.6 (16G29), build from source tarball (apache-madlib-1.12-src.tar.gz) and validated with "install-check" using PostgreSQL 9.6.4 & 9.5.8 On macOS 10.12.6 (16G29), validated convenience binary (apache-madlib-1.12-bin-Darwin.dmg) using PostgreSQL 9.6.4 & 9.5.8 On Redhat 7.2, validated convenience binary (apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm) using Greenplum Database 5 beta 8. On Redhat 7.2, validated convenience binary (apache-madlib-1.12-bin-Linux.rpm) using Greenplum Database 4.3.16.1. Regards, -=e On Thu, Aug 24, 2017 at 2:28 PM, Ed Espino <[email protected]> wrote: > I just updated the correct Apache HAWQ 1.12.RC1 convenience binary > apache-madlib-1.12-bin-Linux.rpm. All other files are in good standing. > Please reverify this binary package, pgp signature and hashes. Sorry for > the confusion. Thanks for pointing this out Orhan. > > Regards, > -=e > > On Thu, Aug 24, 2017 at 1:36 PM, Orhan Kislal <[email protected]> wrote: > >> Hi, I was testing the RPM on GPDB 4.3.11 and it seems the folder it >> creates >> is named 1.12-dev. I don't see it in the code, the cause might be reusing >> an old build folder after the version name is changed from 1.12-dev to >> 1.12. In addition, it does not have support for the platform. I see the >> GPDB 5 folder under ports so the names might have been mixed. >> >> Orhan Kislal >> >> On Thu, Aug 24, 2017 at 12:04 PM, Ed Espino <[email protected]> wrote: >> >> > FYI: You may find this useful when validating the release artifacts. I >> have >> > used a variation of the following script to retrieve release artifacts, >> > verify PGP signatures and check hashes (md5 and sha512). I run this on >> my >> > macbook pro with the utilities available via homebrew. I have pasted the >> > script below as well as the output from running it. >> > >> > Regards, >> > -=e >> > >> > #! /bin/sh >> > ## ------------------------------------------------------------ >> ---------- >> > ## Retrieve release artifacts, verify pgp signatures and check hashes. >> > ## >> > ## Most utilities are available via homebrew packages: >> > ## gnupg >> > ## gpg2 >> > ## coreutils >> > ## ------------------------------------------------------------ >> ---------- >> > >> > files=" >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Darwin.dmg >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Darwin.dmg.asc >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Darwin.dmg.md5 >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Darwin.dmg.sha512 >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5 >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512 >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux.rpm >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux.rpm.asc >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux.rpm.md5 >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux.rpm.sha512 >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-src.tar.gz >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-src.tar.gz.asc >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-src.tar.gz.md5 >> > >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-src.tar.gz.sha512 >> > " >> > >> > utils="wget gpg gsha512sum gmd5sum" >> > >> > for util in $utils; do >> > if ! type $util &> /dev/null ; then >> > echo "FATAL: required utility does not exist ($util). You may >> need >> > to enhance this script to meet your systems needs" >> > fi >> > done >> > >> > KEYS="https://dist.apache.org/repos/dist/dev/madlib/KEYS"; >> > >> > for file in $files $KEYS; do >> > wget -nv --timestamping $file >> > done >> > >> > gpg --import KEYS >> > if [ $? != 0 ]; then >> > echo "FATAL: failed to import PGP KEYS" >> > fi >> > >> > for file in $files; do >> > if [[ $file == *.asc ]]; then >> > gpg --verify $(basename $file) >> > if [ $? != 0 ]; then >> > echo "FATAL: gpg signature verification failed" >> > fi >> > fi >> > if [[ $file == *.sha512 ]]; then >> > gsha512sum --check $(basename $file) >> > if [ $? != 0 ]; then >> > echo "FATAL: sha512 check failed" >> > fi >> > fi >> > if [[ $file == *.md5 ]]; then >> > gmd5sum --check $(basename $file) >> > if [ $? != 0 ]; then >> > echo "FATAL: md5 check failed" >> > fi >> > fi >> > done >> > >> > >> > >> > >> > >> > >> > 12 creekside in ~/workspace/MADlib/apache-madlib-1.12 >> > ○ → ls -al >> > ls -al >> > total 8 >> > drwxr-xr-x 3 espino staff 102 Aug 24 12:01 . >> > drwxr-xr-x 13 espino staff 442 Aug 24 11:09 .. >> > -rwxr-xr-x 1 espino staff 2941 Aug 24 12:00 >> > apache-madlib-1.12-check.sh >> > >> > 12 creekside in ~/workspace/MADlib/apache-madlib-1.12 >> > ○ → ./apache-madlib-1.12-check.sh >> > ./apache-madlib-1.12-check.sh >> > 2017-08-24 12:01:34 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Darwin.dmg >> > [7003768/7003768] -> "apache-madlib-1.12-bin-Darwin.dmg" [1] >> > 2017-08-24 12:01:34 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Darwin.dmg.asc >> > [833/833] -> "apache-madlib-1.12-bin-Darwin.dmg.asc" [1] >> > 2017-08-24 12:01:34 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Darwin.dmg.md5 >> > [75/75] -> "apache-madlib-1.12-bin-Darwin.dmg.md5" [1] >> > 2017-08-24 12:01:35 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Darwin.dmg.sha512 >> > [164/164] -> "apache-madlib-1.12-bin-Darwin.dmg.sha512" [1] >> > 2017-08-24 12:01:35 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm >> > [3942352/3942352] -> "apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm" [1] >> > 2017-08-24 12:01:35 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc >> > [833/833] -> "apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc" [1] >> > 2017-08-24 12:01:35 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5 >> > [85/85] -> "apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5" [1] >> > 2017-08-24 12:01:36 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512 >> > [174/174] -> "apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512" [1] >> > 2017-08-24 12:01:36 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux.rpm >> > [3934656/3934656] -> "apache-madlib-1.12-bin-Linux.rpm" [1] >> > 2017-08-24 12:01:36 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux.rpm.asc >> > [833/833] -> "apache-madlib-1.12-bin-Linux.rpm.asc" [1] >> > 2017-08-24 12:01:36 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux.rpm.md5 >> > [74/74] -> "apache-madlib-1.12-bin-Linux.rpm.md5" [1] >> > 2017-08-24 12:01:36 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-bin-Linux.rpm.sha512 >> > [163/163] -> "apache-madlib-1.12-bin-Linux.rpm.sha512" [1] >> > 2017-08-24 12:01:37 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-src.tar.gz >> > [2579573/2579573] -> "apache-madlib-1.12-src.tar.gz" [1] >> > 2017-08-24 12:01:37 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-src.tar.gz.asc >> > [833/833] -> "apache-madlib-1.12-src.tar.gz.asc" [1] >> > 2017-08-24 12:01:37 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-src.tar.gz.md5 >> > [71/71] -> "apache-madlib-1.12-src.tar.gz.md5" [1] >> > 2017-08-24 12:01:37 URL: >> > https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > apache-madlib-1.12-src.tar.gz.sha512 >> > [160/160] -> "apache-madlib-1.12-src.tar.gz.sha512" [1] >> > 2017-08-24 12:01:38 URL:https://dist.apache.org/re >> pos/dist/dev/madlib/KEYS >> > [20807/20807] -> "KEYS" [1] >> > gpg: key CEAFB9B7FA9EB876: "Orhan Kislal (CODE SIGNING KEY) < >> > [email protected]>" not changed >> > gpg: key 2003B12D15C8C87A: "Orhan Kislal (ASF CODE SIGNING KEY) < >> > [email protected]>" not changed >> > gpg: key 5C1F7E296CDD6680: "Xiaocheng Tang (mktal) < >> [email protected] >> > >" >> > not changed >> > gpg: key 52B795C96C725F40: "Rahul Iyer <[email protected]>" not changed >> > gpg: key 80A9DD6D28D2C789: "Rashmi Raghu (CODE SIGNING KEY) < >> > [email protected]>" not changed >> > gpg: key FC0662F257325522: "Edward Bartolo Espino (CODE SIGNING KEY) < >> > [email protected]>" not changed >> > gpg: Total number processed: 6 >> > gpg: unchanged: 6 >> > gpg: assuming signed data in 'apache-madlib-1.12-bin-Darwin.dmg' >> > gpg: Signature made Wed Aug 23 16:49:12 2017 PDT >> > gpg: using RSA key BBEDA7B5F336D516B34ADE0CFC0662 >> F257325522 >> > gpg: Good signature from "Edward Bartolo Espino (CODE SIGNING KEY) < >> > [email protected]>" [ultimate] >> > apache-madlib-1.12-bin-Darwin.dmg: OK >> > apache-madlib-1.12-bin-Darwin.dmg: OK >> > gpg: assuming signed data in 'apache-madlib-1.12-bin-Linux- >> GPDB5beta8.rpm' >> > gpg: Signature made Wed Aug 23 16:54:04 2017 PDT >> > gpg: using RSA key BBEDA7B5F336D516B34ADE0CFC0662 >> F257325522 >> > gpg: Good signature from "Edward Bartolo Espino (CODE SIGNING KEY) < >> > [email protected]>" [ultimate] >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm: OK >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm: OK >> > gpg: assuming signed data in 'apache-madlib-1.12-bin-Linux.rpm' >> > gpg: Signature made Wed Aug 23 16:16:56 2017 PDT >> > gpg: using RSA key BBEDA7B5F336D516B34ADE0CFC0662 >> F257325522 >> > gpg: Good signature from "Edward Bartolo Espino (CODE SIGNING KEY) < >> > [email protected]>" [ultimate] >> > apache-madlib-1.12-bin-Linux.rpm: OK >> > apache-madlib-1.12-bin-Linux.rpm: OK >> > gpg: assuming signed data in 'apache-madlib-1.12-src.tar.gz' >> > gpg: Signature made Wed Aug 23 15:45:34 2017 PDT >> > gpg: using RSA key BBEDA7B5F336D516B34ADE0CFC0662 >> F257325522 >> > gpg: Good signature from "Edward Bartolo Espino (CODE SIGNING KEY) < >> > [email protected]>" [ultimate] >> > apache-madlib-1.12-src.tar.gz: OK >> > apache-madlib-1.12-src.tar.gz: OK >> > >> > 12 creekside in ~/workspace/MADlib/apache-madlib-1.12 >> > ○ → ls -al >> > ls -al >> > total 34264 >> > drwxr-xr-x 20 espino staff 680 Aug 24 12:01 . >> > drwxr-xr-x 13 espino staff 442 Aug 24 11:09 .. >> > -rw-r--r--@ 1 espino staff 20807 Aug 23 14:52 KEYS >> > -rw-r--r--@ 1 espino staff 7003768 Aug 23 17:00 >> > apache-madlib-1.12-bin-Darwin.dmg >> > -rw-r--r--@ 1 espino staff 833 Aug 23 17:00 >> > apache-madlib-1.12-bin-Darwin.dmg.asc >> > -rw-r--r--@ 1 espino staff 75 Aug 23 17:00 >> > apache-madlib-1.12-bin-Darwin.dmg.md5 >> > -rw-r--r--@ 1 espino staff 164 Aug 23 17:00 >> > apache-madlib-1.12-bin-Darwin.dmg.sha512 >> > -rw-r--r--@ 1 espino staff 3942352 Aug 23 17:00 >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm >> > -rw-r--r--@ 1 espino staff 833 Aug 23 17:00 >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc >> > -rw-r--r--@ 1 espino staff 85 Aug 23 17:00 >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5 >> > -rw-r--r--@ 1 espino staff 174 Aug 23 17:00 >> > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512 >> > -rw-r--r--@ 1 espino staff 3934656 Aug 23 17:00 >> > apache-madlib-1.12-bin-Linux.rpm >> > -rw-r--r--@ 1 espino staff 833 Aug 23 17:00 >> > apache-madlib-1.12-bin-Linux.rpm.asc >> > -rw-r--r--@ 1 espino staff 74 Aug 23 17:00 >> > apache-madlib-1.12-bin-Linux.rpm.md5 >> > -rw-r--r--@ 1 espino staff 163 Aug 23 17:00 >> > apache-madlib-1.12-bin-Linux.rpm.sha512 >> > -rwxr-xr-x 1 espino staff 2941 Aug 24 12:00 >> > apache-madlib-1.12-check.sh >> > -rw-r--r--@ 1 espino staff 2579573 Aug 23 17:00 >> > apache-madlib-1.12-src.tar.gz >> > -rw-r--r--@ 1 espino staff 833 Aug 23 17:00 >> > apache-madlib-1.12-src.tar.gz.asc >> > -rw-r--r--@ 1 espino staff 71 Aug 23 17:00 >> > apache-madlib-1.12-src.tar.gz.md5 >> > -rw-r--r--@ 1 espino staff 160 Aug 23 17:00 >> > apache-madlib-1.12-src.tar.gz.sha512 >> > >> > 12 creekside in ~/workspace/MADlib/apache-madlib-1.12 >> > ○ → >> > >> > On Thu, Aug 24, 2017 at 9:49 AM, Ed Espino <[email protected]> wrote: >> > >> > > Hello Apache MADlib dev community, >> > > >> > > This is the vote for Apache MADlib 1.12 Release (RC1). It provides the >> > > source release tarball and convenience binaries. This is the first >> > > Apache MADlib release as an Apache Top Level Project (TLP). >> > > >> > > The vote will run for at least 72 working hours and will close on >> > > Tuesday, Aug 29, 2017 @ 6pm PDT. A minimum of 3 binding +1 votes and >> > > more binding +1 than binding -1 are required to pass. >> > > >> > > The main goals of this release are: >> > > >> > > * New modules (All Pairs Shortest Path, Weakly Connected Components, >> > > Breadth First Search, Mulitple Graph Measures, Stratified Sampling, >> > > Train-test split, Multilayer Perceptron) >> > > * Decision tree and random forest improvements (Allow expressions in >> > > feature list, Allow array input for features, Filter NULL dependent >> > > values in OOB, Add option to treat NULL as category) >> > > * Summary improvements (Allow user to determine the number of columns >> > > per run, Improve efficiency of computation time by ~35%) >> > > * Sketch (Promote cardinality estimators to top level module from >> > > early stage) >> > > * Add basic code coverage support >> > > * Updates for Apache Top Level Project >> > > * Multiple bug fixes >> > > >> > > For additional information, please see: >> > > https://cwiki.apache.org/confluence/display/MADLIB/MADlib+1.12 >> > > >> > > Here are the release artifact details: >> > > >> > > Source release tag to be voted on: rc/1.12-rc1, located here: >> > > https://git-wip-us.apache.org/repos/asf?p=incubator-madlib.g >> it;a=tag;h= >> > > 65e6c9175e2754de85885f1f0d42b162deb9b76e >> > > >> > > Source release tarball can be retrieved from the following locations: >> > > >> > > Package: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-src.tar.gz >> > > PGP Signature: https://dist.apache.org/repos/ >> dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-src.tar.gz.asc >> > > SHA512 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-src.tar.gz.sha512 >> > > MD5 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-src.tar.gz.md5 >> > > >> > > Convenience binary packages can be retrieved from the following >> > > locations: >> > > >> > > macOS Sierra: 10.12.6 (16G29) - PostgreSQL 9.5.8 & 9.6.4 >> > > Package: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Darwin.dmg >> > > PGP Signature: https://dist.apache.org/repos/ >> dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Darwin.dmg.asc >> > > SHA512 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Darwin.dmg.sha512 >> > > MD5 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Darwin.dmg.md5 >> > > >> > > CentOS 6 - GPDB 5 Beta 8 >> > > Package: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm >> > > PGP Signature: https://dist.apache.org/repos/ >> dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.asc >> > > SHA512 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.sha512 >> > > MD5 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Linux-GPDB5beta8.rpm.md5 >> > > >> > > CentOS 5, 6 & 7 - GPDB 4 Orca, 4, PostgreSQL 9.5 & 9.6, HAWQ 2.0 >> > > Package: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Linux.rpm >> > > PGP Signature: https://dist.apache.org/repos/ >> dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Linux.rpm.asc >> > > SHA512 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Linux.rpm.sha512 >> > > MD5 Hash: https://dist.apache.org/repos/dist/dev/madlib/1.12.RC1/ >> > > apache-madlib-1.12-bin-Linux.rpm.md5 >> > > >> > > The PGP KEYS file used to validate the signature of the release >> artifacts >> > > is available here: >> > > https://dist.apache.org/repos/dist/dev/madlib/KEYS >> > > >> > > To help in tallying the vote, PMC members please be sure to indicate >> > > "(binding)" with the vote. >> > > >> > > [ ] +1 approve >> > > [ ] +0 no opinion >> > > [ ] -1 disapprove (and reason why) >> > > >> > > Regards, >> > > Ed Espino >> > > >> > >> > >> > >> > -- >> > *Ed Espino* >> > >> > > > > -- > *Ed Espino* > -- *Ed Espino*
