On Fri, Aug 28, 2009 at 6:27 PM, Sandro Martini<sandro.mart...@gmail.com> wrote:
>> automatically syncs with the central repo. To do that on >> people.apache.org copy them to >> /x1/www/people.apache.org/repo/m2-ibiblio-rsync-repository. All >> committers should have access to do that. > Todd, you are our man for publishing to people.apache.org (and related > things), can you do it, or can you tell me how to do (many thanks) ? > From what you tell me, i think it's better to wait after our upcoming > 1.3 release has been released. I suggest that we only do 1.3+ to avoid confusion... > But I've tried to look inside some of jars published under > org/apache/... , and the aren't signed (or signed in this case means > have sha1 files ?) and some doesn't contains LICENSE, NOTICE, > DISCLAIMER files under a META-INF folder ... is it right ? > So the real question: currently our jars doesn't have those files > inside, so would it be better to have ? Signed in Apache jargong only means ".asc" files. Those are so called detached PGP signatures, and from that it is possible to verify authenticity of artifacts published. See http://www.apache.org/info/verification.html for more info, and perhaps you are interested in http://www.apache.org/dev/release-signing.html as well in case you end up cutting the releases. Once the troubled server (Minotaur?) is back up and working properly again, you will also find interesting data at http://www.apache.org/~henkp/trust/apache.html (or there about). > One last thing: the related pom file, we have to make it and publish, right ? > But so do you think it's better to put also pom files inside the > sources of the release ? Yes, Maven wants the POMs to be present, but succeeds even without them. Maven also have deployment tools, so once the release is properly cut, the publishing to Maven central will go via a "mvn deploy:deploy-file" which if it is not given a POM will create a skeletal one, which I think for our usage is good enough (we don't have dependencies). Cheers -- Niclas Hedhman, Software Developer http://www.qi4j.org - New Energy for Java I live here; http://tinyurl.com/2qq9er I work here; http://tinyurl.com/2ymelc I relax here; http://tinyurl.com/2cgsug
