Re: [Urgent] Question about Nexus repo and Hadoop release

2019-01-21 Thread Chris Lambertus 
1202
2019-01-22 05:41:18 INFO  [99598137-805274] - 
com.sonatype.nexus.staging.internal.DefaultStagingManager - Closing staging 
repositories [orgapachehadoop-1202]
2019-01-22 05:41:18 INFO  [pool-1-thread-7] - 
com.sonatype.nexus.staging.internal.task.StagingBackgroundTask - STARTED 
Closing staging repositories: [orgapachehadoop-1202]
2019-01-22 05:41:18 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:18 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:18 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:20 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:22 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:22 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:22 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:22 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:22 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:22 INFO  [pool-1-thread-7] - 
org.sonatype.nexus.configuration.ModelUtils - Saving model 
/x1/nexus-work/conf/staging.xml
2019-01-22 05:41:22 WARN  [pool-1-thread-7] - 
com.sonatype.nexus.staging.internal.task.RepositoryCloseTask - One or more 
operations failed; aborting: 
com.sonatype.nexus.staging.StagingRulesFailedException: One or more rules have 
failed
2019-01-22 05:41:22 INFO  [pool-1-thread-7] - 
com.sonatype.nexus.staging.internal.task.StagingBackgroundTask - FINISHED 
Closing staging repositories: [orgapachehadoop-1202]




> On Jan 21, 2019, at 9:42 PM, Wangda Tan  wrote:
> 
> Hi Chris,
> 
> Thanks for helping the issue, 
> 
> Now the issue still exists but the process becomes much faster: 
> 
> failureMessageFailed to validate the pgp signature of 
> '/org/apache/hadoop/hadoop-project/3.1.2/hadoop-project-3.1.2.pom', check the 
> logs.
> failureMessageFailed to validate the pgp signature of 
> '/org/apache/hadoop/hadoop-main/3.1.2/hadoop-main-3.1.2.pom', check the logs.
> failureMessageFailed to validate the pgp signature of 
> '/org/apache/hadoop/hadoop-build-tools/3.1.2/hadoop-build-tools-3.1.2.jar', 
> check the logs.
> failureMessageFailed to validate the pgp signature of 
> '/org/apache/hadoop/hadoop-build-tools/3.1.2/hadoop-build-tools-3.1.2.pom', 
> check the logs.
> 
> Above is the error message, is it possible to get the actual failure message 
> from Nexus server? 
> 
> Thanks,
> Wangda
> 
> On Mon, Jan 21, 2019 at 5:18 PM Chris Lambertus  <mailto:c...@apache.org>> wrote:
> It looks like there are timeouts from some of the keyservers. I’ve trimmed 
> the list again to only servers known to be working (ubuntu and 
> sks-keyservers.net <http://sks-keyservers.net/> <http://sks-keyservers.net/ 
> <http://sks-keyservers.net/>>). Can you give it a try again?
> 
> Brian, there are also a number of timeout errors related to central, but I 
> think they are unrelated.
> 
> com.sonatype.central.secure.

Re: [Urgent] Question about Nexus repo and Hadoop release

2019-01-21 Thread Chris Lambertus 
It looks like there are timeouts from some of the keyservers. I’ve trimmed the 
list again to only servers known to be working (ubuntu and sks-keyservers.net 
). Can you give it a try again?

Brian, there are also a number of timeout errors related to central, but I 
think they are unrelated.

com.sonatype.central.secure.nexus.plugin.internal.AuthtokenFetcherImpl - Failed 
to fetch authtoken: org.apache.http.conn.ConnectTimeoutException: Connect to 
secure.central.sonatype.com:443 [secure.central.sonatype.com/207.223.241.90] 
failed: connect timed out

-Chris


> On Jan 21, 2019, at 2:39 PM, Brian Fox  wrote:
> 
> They keys file is irrelevant to Nexus. The only thing that matters is it’s in 
> the mit pgp key ring.
> 
> --Brian (mobile)
> 
> 
> On Jan 21, 2019, at 3:34 PM, Wangda Tan  > wrote:
> 
>> I just checked on KEYS file, it doesn't show sig part. I updated KEYS file 
>> on Apache https://dist.apache.org/repos/dist/release/hadoop/common/KEYS 
>>  and made it 
>> be ultimately trusted. 
>> 
>> pub   rsa4096 2018-03-20 [SC]
>>   4C899853CDDA4E40C60212B5B3FA653D57300D45
>> uid   [ultimate] Wangda tan > >
>> sig 3B3FA653D57300D45 2018-03-20  Wangda tan > >
>> sub   rsa4096 2018-03-20 [E]
>> sig  B3FA653D57300D45 2018-03-20  Wangda tan > >
>> But the error still remains same while closing repo, not sure how to get it 
>> resolved ..
>> 
>> 
>> On Mon, Jan 21, 2019 at 9:14 AM Wangda Tan > > wrote:
>> Hi David,
>> 
>> Thanks for helping check this, 
>> 
>> I can see signatures on my key: 
>> 
>> pub  4096R/57300D45 
>>  2018-03-20 
>>
>>   Fingerprint=4C89 9853 CDDA 4E40 C602  12B5 B3FA 653D 5730 0D45 
>> 
>> uid Wangda tan mailto:wan...@apache.org>>
>> sig  sig3  57300D45 
>>  2018-03-20 
>> __ __ [selfsig] 
>> 
>> sig  sig   C36C5F0F 
>>  2018-04-05 
>> __ __ Vinod Kumar Vavilapalli (I am also known as 
>> @tshooter.)  
>> 
>> sig  sig   F9CBBD4C 
>>  2018-11-08 
>> __ __ shikong  
>> 
>> 
>> sub  4096R/D0C16F12 2018-03-20
>> sig sbind  57300D45 
>>  2018-03-20 
>> __ __ [] 
>> 
>> And gpg --edit-key also shows: 
>> 
>> gpg --edit-key 4C899853CDDA4E40C60212B5B3FA653D57300D45
>> gpg (GnuPG) 2.2.5; Copyright (C) 2018 Free Software Foundation, Inc.
>> This is free software: you are free to change and redistribute it.
>> There is NO WARRANTY, to the extent permitted by law.
>> 
>> Secret key is available.
>> 
>> sec  rsa4096/B3FA653D57300D45
>>  created: 2018-03-20  expires: never   usage: SC
>>  trust: unknown   validity: unknown
>> ssb  rsa4096/79CD893FD0C16F12
>>  created: 2018-03-20  expires: never   usage: E
>> [ unknown] (1). Wangda tan mailto:wan...@apache.org>>
>> 
>> Thanks,
>> Wangda
>> 
>> On Mon, Jan 21, 2019 at 9:08 AM David Nalley > > wrote:
>> I wonder if it's because there are no signatures on your key.
>> 
>> --David
>> 
>> On Mon, Jan 21, 2019 at 11:57 AM Wangda Tan > > wrote:
>> >
>> > Hi Brian,
>> >
>> > Here're links to my key:
>> >
>> > http://pool.sks-keyservers.net:11371/key/0xB3FA653D57300D45 
>> > 
>> >
>> > http://pgp.mit.edu/pks/lookup?op=get=0xB3FA653D57300D45 
>> > 
>> >
>> > On Apache SVN: 
>> > https://dist.apache.org/repos/dist/release/hadoop/common/KEYS 
>> > 
>> >
>> > Thanks,
>> > Wangda
>> >
>> > On Mon, Jan 21, 2019 at 6:51 AM Brian Demers > > > wrote:
>> >>
>> >> Can you share the link to your key?
>> >>
>> >> -Brian
>> >>
>> >> On Jan 20, 2019, at 11:21 PM, Wangda Tan > >> > wrote:
>> >>
>> >> Still couldn't figure out without locating the log on the Nexus machine. 
>> >> With help from several committers and PMCs, we didn't see anything wrong 
>> >> with my signing key.
>> >>
>> >> I don't want to delay 3.1.2 more because of this. Is it allowed for me to 
>> >> publish artifacts (like tarball,