Hi all,

well we setup things in PLC4X the same way most projects have them … so for 
PLC4X we stage releases here:
https://dist.apache.org/repos/dist/dev/plc4x/

and as soon as they are released, they are SVN-Moved here:
https://dist.apache.org/repos/dist/release/plc4x

This then automatically makes all the mirror syncing of Apache make the 
artifacts available here:
https://downloads.apache.org/plc4x/
All this SVN staging stuff is manual stuff … for PLC4X too, the release:perform 
uploads the source bundles to Nexus, but we don’t vote on that.
We vote on the stuff that’s in SVN.

Chris


Von: Andrew Musselman <andrew.mussel...@gmail.com>
Datum: Dienstag, 30. Juni 2020 um 16:57
An: Mahout Dev List <dev@mahout.apache.org>, Christofer Dutz 
<christofer.d...@c-ware.de>
Betreff: Re: RC1 for 14.1

(1) We've always done it through Nexus, not married to the approach
(2) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2109
(3) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2110
(4) Also https://issues.apache.org/jira/browse/MAHOUT-2110
(5) @Christofer Dutz<mailto:christofer.d...@c-ware.de> where are KEYS normally 
kept?

On Tue, Jun 30, 2020 at 5:47 AM Trevor Grant 
<trevor.d.gr...@gmail.com<mailto:trevor.d.gr...@gmail.com>> wrote:
1. Interesting on the Nexux- who knows who set that up- what are the
pro/cons of nexus v SVN?
2. make sure this gets added to docs
3. let's make a jira for this.
4. just drop them then.
5. https://github.com/apache/mahout/blob/trunk/distribution/KEYS



On Tue, Jun 30, 2020 at 2:42 AM Christofer Dutz 
<christofer.d...@c-ware.de<mailto:christofer.d...@c-ware.de>>
wrote:

> Hi folks,
>
> some things I noticed:
>
> 1) You're using the Nexus Staging Repo ... I know most Apache projects use
> the apache SVN for officially staging the release
> 2) The source-repo is missing the RELEASE_NOTES which usually goes
> alongside the source bundle.
> 3) (this might be the most serious issue) you are using SHA1 hashes and
> Apache wants us to use SHA512 hashes (The build does provide these, but
> doesn't automatically deploy them) (
> https://infra.apache.org/release-distribution.html)
> 4) MD5 are also considered deprecated
> 5) Where's your KEYS file? I need that to validate the signatures.
>
> Chris
>
>
>
> Am 30.06.20, 07:11 schrieb "Andrew Musselman" 
> <a...@apache.org<mailto:a...@apache.org>>:
>
>     Thanks to some great work by Chris Dutz, RC1 for 14.1 release is out!
>     Please go try it out, check signatures and checksums, etc.
>
>     Binaries:
>
> https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/apache-mahout-distribution/14.1/
>
>     Source:
>
> https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/mahout/14.1/
>
>     Best
>     Andrew
>
>

Reply via email to