nddipiazza opened a new pull request, #1:
URL: https://github.com/apache/tika-grpc-docker/pull/1

   ## Summary
   
   This PR prepares tika-grpc-docker for the future release of Tika 4.0.0 by 
implementing GPG signed release verification, aligning with the tika-docker 
repository's approach.
   
   ## Background
   
   **tika-grpc has not been officially released yet** - it only exists in Tika 
4.0.0-SNAPSHOT. This PR prepares the repository to handle both:
   - Current development builds (from source)
   - Future production builds (from GPG-signed releases)
   
   ## Changes
   
   ### Added Files
   - **republish-images.sh** - Script to rebuild all versions from GPG-signed 
Apache releases (ready for when 4.0.0 releases)
   
   ### Modified Files
   - **README.md** - Major updates:
     - Added pre-release status warning at the top
     - Documented current build method (`build-from-branch.sh` for development)
     - Documented future build method (`docker-tool.sh` with GPG verification)
     - Explained relationship between tika repo Maven builds and this repo
     - Clarified when to use each build approach
   
   - **minimal/Dockerfile** - Added comment explaining it requires official 
Apache releases (Tika 4.0.0+)
   - **full/Dockerfile** - Same note as minimal/Dockerfile
   
   ## How It Works
   
   ### Current State (Pre-Release)
   Build from source using:
   ```bash
   ./build-from-branch.sh -b main
   ```
   
   ### Future State (Post Tika 4.0.0 Release)
   Build from GPG-signed releases:
   ```bash
   ./docker-tool.sh build 4.0.0 4.0.0
   ```
   
   This will:
   1. Download `tika-server-grpc-4.0.0.jar` from Apache distribution mirrors
   2. Download the `.asc` GPG signature file
   3. Import Apache KEYS
   4. Verify the GPG signature
   5. Build Docker image with verified JAR
   
   ## Alignment with tika-docker
   
   This PR ensures tika-grpc-docker follows the EXACT same pattern as 
tika-docker:
   
   - ✅ Downloads from Apache mirrors
   - ✅ Verifies GPG signatures
   - ✅ Multi-stage builds
   - ✅ docker-tool.sh for building
   - ✅ republish-images.sh for batch rebuilds
   - ✅ build-from-branch.sh for development
   
   ## Testing
   
   The Dockerfiles already contain the GPG verification logic (inherited from 
tika-docker). They will work automatically once `tika-server-grpc-4.0.0.jar` is 
published to Apache distribution mirrors.
   
   Development builds can be tested now with:
   ```bash
   ./build-from-branch.sh -b main
   ```
   
   ## Related
   
   This complements the work in apache/tika PR #2462 (TIKA-4578) which adds 
Maven-based Docker builds to the tika repository for development purposes.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to