Thanks a lot, after re-check, the files gpg sign and checksum looks good: > Check signature gpg: Signature made Sat 15 Jul 2023 03:31:15 PM CST gpg: using RSA key E64715957B780E6D29DC7B32E0A5F564C51C056E gpg: Good signature from "Cai Lue (Cl in apache.org) <[email protected]>" [ultimate] gpg: aka "Cai Lue (main key) <[email protected]>" [ultimate] gpg: aka "ClSlaid (Cl in bupt) <[email protected]>" [ultimate] Success to verify the gpg sign > Check sha512sum apache-opendal-incubating-0.38.1-src.tar.gz: OK Success to verify the checksum
Another problem still exist, the link to branch is not found: https://github.com/apache/incubator-opendal/tree/release-0.38.1-rc1 On Sat, Jul 15, 2023, at 16:06, Xuanwo wrote: > The KEYS you uploaded in SVN seems not the key to used to sign the package: > > :) ./scripts/check.sh dist/apache-opendal-incubating-0.38.1-src.tar.gz >> Check signature > gpg: Signature made Fri 14 Jul 2023 05:14:29 PM CST > gpg: using RSA key 35786239353BF1C6FF9A187094B59D89A0105979 > gpg: Can't check signature: No public key > :( gpg --list-key [email protected] > pub rsa4096 2018-08-02 [SCEA] [expires: 2027-07-14] > B1D67F3E33A2724985353B78D0E527DAFFFFFFFF > uid [ultimate] Cai Lue (Cl in apache.org) <[email protected]> > uid [ultimate] Cai Lue (main key) <[email protected]> > uid [ultimate] ClSlaid (Cl in bupt) <[email protected]> > sub rsa4096 2023-07-15 [S] [expires: 2026-07-14] > > Would you like to check again? Thanks. > > On Sat, Jul 15, 2023, at 15:49, Cai Lue wrote: >> should be fixed, please try again. >> >> On 2023/07/15 06:38:38 Xuanwo wrote: >>> Refer to >>> https://opendal.apache.org/docs/contributing/reference/setup_gpg#add-your-gpg-public-key-to-the-keys-document >>> for more details about adding GPG key in KEYS. >>> >>> On Sat, Jul 15, 2023, at 14:31, Xuanwo wrote: >>> > Hi, >>> > >>> > Thanks for starting the VOTE! >>> > >>> > However, this VOTE has the following issues: >>> > >>> > - The signing key of 0.38.1-rc1 seems not added in KEYS: >>> > >>> > Only 4 keys here >>> > >>> > :) gpg --import /tmp/keys >>> > gpg: key F063A0FE61C0B7F9: "Xuanwo <[email protected]>" not changed >>> > gpg: key 2AAECF0ABFC5F308: "suyanhanx (Apache Committer) >>> > <[email protected]>" not changed >>> > gpg: key F172BCB57A289B20: "Zili Chen (OPENDAL CODE AUTO SIGNING KEY) >>> > <[email protected]>" not changed >>> > gpg: key 646F38033D700795: "Chojan Shang <[email protected]>" not >>> > changed >>> > gpg: Total number processed: 4 >>> > gpg: unchanged: 4 >>> > >>> > And check failed >>> > >>> > :) ./scripts/check.sh dist/apache-opendal-incubating-0.38.1-src.tar.gz >>> >> Check signature >>> > gpg: Signature made Fri 14 Jul 2023 05:14:29 PM CST >>> > gpg: using RSA key 35786239353BF1C6FF9A187094B59D89A0105979 >>> > gpg: Can't check signature: No public key >>> > >>> > - The branch "release-0.38.1-rc1" is not exist on github. >>> > >>> > On Sat, Jul 15, 2023, at 13:45, 蔡略 wrote: >>> >> Hello, Apache OpenDAL(incubating) Community, >>> >> >>> >> This is a call for a vote to release Apache OpenDAL(incubating) version >>> >> 0.38.1. >>> >> >>> >> The tag to be voted on is 0.38.1. >>> >> >>> >> The release candidate: >>> >> >>> >> https://dist.apache.org/repos/dist/dev/incubator/opendal/0.38.1-rc1/ >>> >> >>> >> Keys to verify the release candidate: >>> >> >>> >> https://downloads.apache.org/incubator/opendal/KEYS >>> >> >>> >> Git branch for the release: >>> >> >>> >> https://github.com/apache/incubator-opendal/tree/release-0.38.1-rc1 >>> >> >>> >> >>> >> Please download, verify, and test. >>> >> >>> >> The VOTE will pass after got 3 binding approve. >>> >> >>> >> [ ] +1 approve >>> >> [ ] +0 no opinion >>> >> [ ] -1 disapprove with the reason >>> >> >>> >> To learn more about apache opendal, please see >>> >> https://opendal.apache.org/ >>> >> >>> >> Checklist for reference: >>> >> >>> >> [ ] Download links are valid. >>> >> [ ] Checksums and signatures. >>> >> [ ] LICENSE/NOTICE files exist >>> >> [ ] No unexpected binary files >>> >> [ ] All source files have ASF headers >>> >> [ ] Can compile from source >>> >> >>> >> More detailed checklist please refer to: >>> >> https://github.com/apache/incubator-opendal/tree/main/scripts >>> >> >>> >> To compile from source, please refer to: >>> >> https://github.com/apache/incubator-opendal/blob/main/CONTRIBUTING.md >>> >> >>> >> Thanks >>> >> >>> >> Cai Lue >>> > >>> > -- >>> > Xuanwo >>> >>> -- >>> Xuanwo >>> > > -- > Xuanwo -- Xuanwo
