+1 2016-12-13 9:49 GMT-05:00 Mike Kienenberger <[email protected]>:
> - signatures and checksums match > - source builds > - apache rat passes > > +1 > > > > Below are the linux commands I used to verify the release of the > tobago-3.0.0 files: > > ============================================= > > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/ > 3.0.0/tobago-3.0.0-source-release.zip > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/ > 3.0.0/tobago-3.0.0-source-release.zip.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/ > 3.0.0/tobago-3.0.0-source-release.zip.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago/ > 3.0.0/tobago-3.0.0-source-release.zip.sha1 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.tar.gz.sha1 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.zip > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > assembly/3.0.0/tobago-assembly-3.0.0-dist.zip.sha1 > > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.tar.gz.sha1 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.asc > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.md5 > wget https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/org/apache/myfaces/tobago/tobago- > example-assembly/3.0.0/tobago-example-assembly-3.0.0-example.zip.sha1 > > # check checksums > find . -name '*.md5' -exec cat {} \; -printf ' %f\n' | sed > 's|\.md5$||' | md5sum -c > find . -name '*.sha1' -exec cat {} \; -printf ' %f\n' | sed > 's|\.sha1$||' | sha1sum -c > > # check signatures > wget http://www.apache.org/dist/myfaces/KEYS > gpg --import KEYS > find . -name '*.asc' -exec gpg --verify {} \; > > # build source > mkdir src > cd src > unzip ../tobago-3.0.0-source-release.zip > cd tobago-3.0.0 > mvn install -Pall-modules > > mvn apache-rat:check -Pall-modules > ## Note: DEPENDENCIES needs to be ignored > ## https://issues.apache.org/jira/browse/TOBAGO-1450 > #### > # To check for all errors, if more than one project is affected > # mvn apache-rat:check -Drat.numUnapprovedLicenses=9999 > # To see details of rat failure, including location of rat report > # mvn -e -X apache-rat:check > > > # verify tobago-assembly-*-dist.tar.gz and tobago-assembly-*-dist.zip > binaries are identical > # verify tobago-example-assembly-*-example.tar.gz and > tobago-example-assembly-*-example.zip binaries are identical > > cd .. > > tar xvf ../tobago-assembly-3.0.0-dist.tar.gz > mv myfaces-tobago-3.0.0/ myfaces-tobago-3.0.0.tar.gz.unpacked > unzip ../tobago-assembly-3.0.0-dist.zip > mv myfaces-tobago-3.0.0/ myfaces-tobago-3.0.0.zip.unpacked > > tar xvf ../tobago-example-assembly-3.0.0-example.tar.gz > mv myfaces-tobago-3.0.0/ myfaces-tobago-example-3.0.0.tar.gz.unpacked > unzip ../tobago-example-assembly-3.0.0-example.zip > mv myfaces-tobago-3.0.0/ myfaces-tobago-example-3.0.0.zip.unpacked > > # should be no output > diff -rq myfaces-tobago-3.0.0.*.unpacked > # should only be "are identical" output > diff -srq myfaces-tobago-3.0.0.*.unpacked | grep -v "are identical" > > # should be no output > diff -rq myfaces-tobago-example-3.0.0.*.unpacked > # should only be "are identical" output > diff -srq myfaces-tobago-example-3.0.0.*.unpacked | grep -v "are > identical" > > > On Mon, Dec 12, 2016 at 6:03 PM, Udo Schnurpfeil <[email protected]> > wrote: > > Hello, > > > > I would like to release Tobago 3.0.0. > > > > Major changes since last beta are: > > > > * Some bug fixes > > * Minor improvements > > > > This is a major release with a lot of changes. For a detail list please > > consult the release notes: > > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa? > projectId=12310273&version=12325880 > > The version is available at the staging repository (Nexus). > > > > Staging repository: > > > > https://repository.apache.org/content/repositories/ > orgapachemyfaces-1092/ > > > > Please vote now! (The vote is open for 72h.) > > > > [ ] +1 > > [ ] +0 > > [ ] -1 > > > > Regards, > > > > Udo > > >
