[GitHub] [storm] bipinprasad commented on pull request #3556: Missing dependency prevents Storm from being built, fixes #3940

2023-08-01 Thread via GitHub


bipinprasad commented on PR #3556:
URL: https://github.com/apache/storm/pull/3556#issuecomment-1660768551

   storm builds on all pull requests under github actions currently. However, I 
think it is better to consistent in excluding this dependency.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@storm.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [GitHub] [storm] rzo1 commented on pull request #3556: Missing dependency prevents Storm from being built, fixes #3940

2023-08-01 Thread Bipin Prasad
I think it may be safe to exclude this dependency. However, we know that 
currently storm builds with github actions.

On 2023/08/01 16:14:08 "rzo1 (via GitHub)" wrote:
> 
> rzo1 commented on PR #3556:
> URL: https://github.com/apache/storm/pull/3556#issuecomment-1660648311
> 
>> This artifact is available on maven central. Is there a need to exclude 
> it? 
> https://mvnrepository.com/artifact/org.pentaho/pentaho-aggdesigner-algorithm/5.1.5-jhyde
>
>I think, that the actual problem is, that hive 2.3.9 declares the (dead) 
> conjars repo in 
> https://github.com/apache/hive/blob/rel/release-2.3.9/pom.xml#L225 
>
>Thus, Maven tries to use this repository (because it is declared on a 
> transient dependency) to download the repo and fails. Given that it is 
> already excluded in `storm-sql-runtime`, `storm-hive` and in 
> `storm-autocreds`, the changes by @jnioche just apply the excludes 
> systematically. If we run the GH actions, we will see, if the dependency is 
> required at runtime.
> 
> 
> -- 
> This is an automated message from the Apache Git Service.
> To respond to the message, please log on to GitHub and use the
> URL above to go to the specific comment.
> 
> To unsubscribe, e-mail: dev-unsubscr...@storm.apache.org
> 
> For queries about this service, please contact Infrastructure at:
> us...@infra.apache.org
> 
> 


[GitHub] [storm] rzo1 commented on pull request #3556: Missing dependency prevents Storm from being built, fixes #3940

2023-08-01 Thread via GitHub


rzo1 commented on PR #3556:
URL: https://github.com/apache/storm/pull/3556#issuecomment-1660648311

   > This artifact is available on maven central. Is there a need to exclude 
it? 
https://mvnrepository.com/artifact/org.pentaho/pentaho-aggdesigner-algorithm/5.1.5-jhyde
   
   I think, that the actual problem is, that hive 2.3.9 declares the (dead) 
conjars repo in 
https://github.com/apache/hive/blob/rel/release-2.3.9/pom.xml#L225 
   
   Thus, Maven tries to use this repository (because it is declared on a 
transient dependency) to download the repo and fails. Given that it is already 
excluded in `storm-sql-runtime`, `storm-hive` and in `storm-autocreds`, the 
changes by @jnioche just apply the excludes systematically. If we run the GH 
actions, we will see, if the dependency is required at runtime.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@storm.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: Storm 2.5.0 Release Candidate Vote

2023-08-01 Thread Richard Zowalla
On a clean, vanilla system without a custom maven mirror in place, I am
hitting the same issue.

The problem is, that Hive 2.3.9 declares the conjars.org repo:
https://github.com/apache/hive/blob/rel/release-2.3.9/pom.xml#L225

This is the reason imho, why it gets pulled into our Maven build.

Gruß
Richard


Am Dienstag, dem 01.08.2023 um 15:44 + schrieb Bipin Prasad:
> The failure in your build
>  >
> http://conjars.org/repo/org/pentaho/pentaho-aggdesigner-algorithm/5.1.5-jhyde/pentaho-aggdesigner-algorithm-5.1.5-jhyde.pom
>  connection timeout
> 
> conjars.org does not exist anymore. If this exists in your
> ~/.m2/settings.xml, please remove and retry.
> 
> On 2023/07/28 04:52:21 Derek Dagit wrote:
> > I downloaded the release files:
> > 
> > ∴ wget -r -np
> > 'https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.5.0-rc
> > 2/'
> > 
> > I checked signatures:
> > 
> > ∴ ls *.asc|xargs -n1 gpg --verify
> > gpg: assuming signed data in 'apache-storm-2.5.0.pom'
> > gpg: Signature made Tue 25 Jul 2023 09:33:30 AM CDT
> > gpg:    using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > gpg: assuming signed data in 'apache-storm-2.5.0-src.tar.gz'
> > gpg: Signature made Tue 25 Jul 2023 09:34:52 AM CDT
> > gpg:    using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > gpg: assuming signed data in 'apache-storm-2.5.0-src.zip'
> > gpg: Signature made Tue 25 Jul 2023 09:34:52 AM CDT
> > gpg:    using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > gpg: assuming signed data in 'apache-storm-2.5.0.tar.gz'
> > gpg: Signature made Tue 25 Jul 2023 09:33:39 AM CDT
> > gpg:    using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > gpg: assuming signed data in 'apache-storm-2.5.0.zip'
> > gpg: Signature made Tue 25 Jul 2023 09:33:39 AM CDT
> > gpg:    using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > gpg: assuming signed data in 'RELEASE_NOTES.html'
> > gpg: Signature made Tue 25 Jul 2023 09:47:54 AM CDT
> > gpg:    using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > 
> > 
> > 
> > I checked checksums:
> > 
> > ∴ ls *.sha512|while read f; do gpg --print-md SHA512
> > "${f%%.sha512}" | diff -s - "$f"; done
> > 
> > Each one of these failed because the format does not match what
> > results from
> > following the instructions at
> > https://github.com/apache/storm/blob/master/RELEASING.md#setting-up-a-vote
> > .
> > 
> > I retried this way:
> > 
> > ∴ ls *.sha512|while read f; do sha512sum "${f%%.sha512}" | diff -s
> > - "$f"; done
> > Files - and apache-storm-2.5.0.pom.asc.sha512 are identical
> > Files - and apache-storm-2.5.0.pom.sha512 are identical
> > Files - and apache-storm-2.5.0-src.tar.gz.asc.sha512 are identical
> > Files - and apache-storm-2.5.0-src.tar.gz.sha512 are identical
> > Files - and apache-storm-2.5.0-src.zip.asc.sha512 are identical
> > Files - and apache-storm-2.5.0-src.zip.sha512 are identical
> > Files - and apache-storm-2.5.0.tar.gz.asc.sha512 are identical
> > Files - and apache-storm-2.5.0.tar.gz.sha512 are identical
> > Files - and apache-storm-2.5.0.zip.asc.sha512 are identical
> > Files - and apache-storm-2.5.0.zip.sha512 are identical
> > Files - and RELEASE_NOTES.html.asc.sha512 are identical
> > Files - and RELEASE_NOTES.html.sha512 are identical
> > 
> > Looks OK.
> > 
> > 
> > 
> > Unzipped the source, built and ran tests with `mvn clean && mvn
> > install`
> > 
> > I needed to use the trick at
> > https://stackoverflow.com/a/70673228 to avoid the "Blocked mirror
> > for repositories" error maven throws when trying to download with
> > plain HTTP.
> > 
> > Eventually, the project failed to build because conjars.org was
> > down:
> > 
> > [ERROR] Failed to execute goal on project storm-autocreds: Could
> > not resolve dependencies for project org.apache.storm:storm-
> > autocreds:jar:2.5.0: Failed to collect dependencies at
> > org.apache.hive.hcatalog:hive-webhcat-java-client:jar:2.3.9 ->
> > org.apache.hive.hcatalog:hive-hcatalog-core:jar:2.3.9 ->
> > org.apache.hive:hive-cli:jar:2.3.9 -> org.apache.hive:hive-
> > service:jar:2.3.9 -> org.apache.hive:hive-exec:jar:2.3.9 ->
> > org.pentaho:pentaho-aggdesigner-algorithm:jar:5.1.5-jhyde: Failed
> > to read artifact descriptor for org.pentaho:pentaho-aggdesigner-
> > algorithm:jar:5.1.5-jhyde: Could not transfer artifact
> > 

Re: Storm 2.5.0 Release Candidate Vote

2023-08-01 Thread Bipin Prasad
The failure in your build
 > http://conjars.org/repo/org/pentaho/pentaho-aggdesigner-algorithm/5.1.5-jhyde/pentaho-aggdesigner-algorithm-5.1.5-jhyde.pom
 >  connection timeout

conjars.org does not exist anymore. If this exists in your ~/.m2/settings.xml, 
please remove and retry.

On 2023/07/28 04:52:21 Derek Dagit wrote:
> I downloaded the release files:
> 
> ∴ wget -r -np 
> 'https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.5.0-rc2/'
> 
> I checked signatures:
> 
> ∴ ls *.asc|xargs -n1 gpg --verify
> gpg: assuming signed data in 'apache-storm-2.5.0.pom'
> gpg: Signature made Tue 25 Jul 2023 09:33:30 AM CDT
> gpg:using RSA key 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> gpg: Good signature from "Bipin Prasad (For Signing Apache Storm release) 
> " [full]
> gpg: assuming signed data in 'apache-storm-2.5.0-src.tar.gz'
> gpg: Signature made Tue 25 Jul 2023 09:34:52 AM CDT
> gpg:using RSA key 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> gpg: Good signature from "Bipin Prasad (For Signing Apache Storm release) 
> " [full]
> gpg: assuming signed data in 'apache-storm-2.5.0-src.zip'
> gpg: Signature made Tue 25 Jul 2023 09:34:52 AM CDT
> gpg:using RSA key 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> gpg: Good signature from "Bipin Prasad (For Signing Apache Storm release) 
> " [full]
> gpg: assuming signed data in 'apache-storm-2.5.0.tar.gz'
> gpg: Signature made Tue 25 Jul 2023 09:33:39 AM CDT
> gpg:using RSA key 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> gpg: Good signature from "Bipin Prasad (For Signing Apache Storm release) 
> " [full]
> gpg: assuming signed data in 'apache-storm-2.5.0.zip'
> gpg: Signature made Tue 25 Jul 2023 09:33:39 AM CDT
> gpg:using RSA key 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> gpg: Good signature from "Bipin Prasad (For Signing Apache Storm release) 
> " [full]
> gpg: assuming signed data in 'RELEASE_NOTES.html'
> gpg: Signature made Tue 25 Jul 2023 09:47:54 AM CDT
> gpg:using RSA key 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> gpg: Good signature from "Bipin Prasad (For Signing Apache Storm release) 
> " [full]
> 
> 
> 
> I checked checksums:
> 
> ∴ ls *.sha512|while read f; do gpg --print-md SHA512 "${f%%.sha512}" | diff 
> -s - "$f"; done
> 
> Each one of these failed because the format does not match what results from
> following the instructions at
> https://github.com/apache/storm/blob/master/RELEASING.md#setting-up-a-vote.
> 
> I retried this way:
> 
> ∴ ls *.sha512|while read f; do sha512sum "${f%%.sha512}" | diff -s - "$f"; 
> done
> Files - and apache-storm-2.5.0.pom.asc.sha512 are identical
> Files - and apache-storm-2.5.0.pom.sha512 are identical
> Files - and apache-storm-2.5.0-src.tar.gz.asc.sha512 are identical
> Files - and apache-storm-2.5.0-src.tar.gz.sha512 are identical
> Files - and apache-storm-2.5.0-src.zip.asc.sha512 are identical
> Files - and apache-storm-2.5.0-src.zip.sha512 are identical
> Files - and apache-storm-2.5.0.tar.gz.asc.sha512 are identical
> Files - and apache-storm-2.5.0.tar.gz.sha512 are identical
> Files - and apache-storm-2.5.0.zip.asc.sha512 are identical
> Files - and apache-storm-2.5.0.zip.sha512 are identical
> Files - and RELEASE_NOTES.html.asc.sha512 are identical
> Files - and RELEASE_NOTES.html.sha512 are identical
> 
> Looks OK.
> 
> 
> 
> Unzipped the source, built and ran tests with `mvn clean && mvn install`
> 
> I needed to use the trick at https://stackoverflow.com/a/70673228 to avoid 
> the "Blocked mirror for repositories" error maven throws when trying to 
> download with plain HTTP.
> 
> Eventually, the project failed to build because conjars.org was down:
> 
> [ERROR] Failed to execute goal on project storm-autocreds: Could not resolve 
> dependencies for project org.apache.storm:storm-autocreds:jar:2.5.0: Failed 
> to collect dependencies at 
> org.apache.hive.hcatalog:hive-webhcat-java-client:jar:2.3.9 -> 
> org.apache.hive.hcatalog:hive-hcatalog-core:jar:2.3.9 -> 
> org.apache.hive:hive-cli:jar:2.3.9 -> org.apache.hive:hive-service:jar:2.3.9 
> -> org.apache.hive:hive-exec:jar:2.3.9 -> 
> org.pentaho:pentaho-aggdesigner-algorithm:jar:5.1.5-jhyde: Failed to read 
> artifact descriptor for 
> org.pentaho:pentaho-aggdesigner-algorithm:jar:5.1.5-jhyde: Could not transfer 
> artifact org.pentaho:pentaho-aggdesigner-algorithm:pom:5.1.5-jhyde from/to 
> conjars (http://conjars.org/repo): transfer failed for 
> http://conjars.org/repo/org/pentaho/pentaho-aggdesigner-algorithm/5.1.5-jhyde/pentaho-aggdesigner-algorithm-5.1.5-jhyde.pom:
>  Connect to conjars.org:80 [conjars.org/54.235.127.59] failed: Connection 
> timed out (Connection timed out) -> [Help 1]
> 
> 
> I gave up and couldn't run the automated tests.
> 
> 
> 
> Unzipped the distribution, started nimbus, supervisor, logviewer, ui, 
> dev-zookeeper, and launched the WordCountTopology build from the source 
> directory.
> 
> This topology started OK, but none of 

[GitHub] [storm] bipinprasad commented on pull request #3556: Missing dependency prevents Storm from being built, fixes #3940

2023-08-01 Thread via GitHub


bipinprasad commented on PR #3556:
URL: https://github.com/apache/storm/pull/3556#issuecomment-1660419649

   This artifact is available on maven central. Is there a need to exclude it? 
https://mvnrepository.com/artifact/org.pentaho/pentaho-aggdesigner-algorithm/5.1.5-jhyde


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@storm.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: Storm 2.5.0 Release Candidate Vote

2023-08-01 Thread Alexandre Vermeerbergen
Hello,

Regarding my tests with Apache Storm 2.5.0 RC2 on a pre-production
cluster at scale, with 10+ topologies, running on RockyLinux 8 with
IBM Semeru 17.0.7 (based on OpenJ9 JVM) on Linux x64, I have detected
no functional regression, not any noticeable performance changes.

On side node, our topologies's Java source code is still compiled with
JDK11, and soon we will try compiling it with JDK17.
(with Java 21 LTS coming soon - end of September this year, it's time
to upgrade ;)

I still need to test compiling Storm from sources, my previous attempt
with RC1 was broken, and I have read some feedbacks that RC2 isn't
perfect on this side, so if an RC3 is planned, then I'd like to know
it so as to organize myself for Storm compiling tests.

Kind regards,
Alexandre

Le mar. 1 août 2023 à 10:49, Julien Nioche
 a écrit :
>
> Hi,
>
> Have experienced the same problems as Derek when trying to build. This is
> due to the dependency *pentaho-aggdesigner-algorithm *not being available.
> This dependency is excluded in some places of the poms but not
> systematically, I will open an issue and submit a PR shortly.
>
> Otherwise, I managed to run a StormCrawler topology with the 2.5 RC both in
> local and deployed mode.
>
> It would be good to fix the build before releasing IMHO.
>
> Julien
>
> On Mon, 31 Jul 2023 at 16:35, Bipin Prasad  wrote:
>
> > Hello Derek,
> > Looks like some shared libraries may be missing from the jdk11
> > install. Could be similar to this issue
> > https://github.com/pytorch/serve/issues/1352
> >
> > --Bipin
> >
> > On 2023/07/28 04:52:21 Derek Dagit wrote:
> > > I downloaded the release files:
> > >
> > > ∴ wget -r -np '
> > https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.5.0-rc2/'
> > >
> > > I checked signatures:
> > >
> > > ∴ ls *.asc|xargs -n1 gpg --verify
> > > gpg: assuming signed data in 'apache-storm-2.5.0.pom'
> > > gpg: Signature made Tue 25 Jul 2023 09:33:30 AM CDT
> > > gpg:using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > > gpg: assuming signed data in 'apache-storm-2.5.0-src.tar.gz'
> > > gpg: Signature made Tue 25 Jul 2023 09:34:52 AM CDT
> > > gpg:using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > > gpg: assuming signed data in 'apache-storm-2.5.0-src.zip'
> > > gpg: Signature made Tue 25 Jul 2023 09:34:52 AM CDT
> > > gpg:using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > > gpg: assuming signed data in 'apache-storm-2.5.0.tar.gz'
> > > gpg: Signature made Tue 25 Jul 2023 09:33:39 AM CDT
> > > gpg:using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > > gpg: assuming signed data in 'apache-storm-2.5.0.zip'
> > > gpg: Signature made Tue 25 Jul 2023 09:33:39 AM CDT
> > > gpg:using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > > gpg: assuming signed data in 'RELEASE_NOTES.html'
> > > gpg: Signature made Tue 25 Jul 2023 09:47:54 AM CDT
> > > gpg:using RSA key
> > 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> > release) " [full]
> > >
> > >
> > >
> > > I checked checksums:
> > >
> > > ∴ ls *.sha512|while read f; do gpg --print-md SHA512 "${f%%.sha512}" |
> > diff -s - "$f"; done
> > >
> > > Each one of these failed because the format does not match what results
> > from
> > > following the instructions at
> > >
> > https://github.com/apache/storm/blob/master/RELEASING.md#setting-up-a-vote
> > .
> > >
> > > I retried this way:
> > >
> > > ∴ ls *.sha512|while read f; do sha512sum "${f%%.sha512}" | diff -s -
> > "$f"; done
> > > Files - and apache-storm-2.5.0.pom.asc.sha512 are identical
> > > Files - and apache-storm-2.5.0.pom.sha512 are identical
> > > Files - and apache-storm-2.5.0-src.tar.gz.asc.sha512 are identical
> > > Files - and apache-storm-2.5.0-src.tar.gz.sha512 are identical
> > > Files - and apache-storm-2.5.0-src.zip.asc.sha512 are identical
> > > Files - and apache-storm-2.5.0-src.zip.sha512 are identical
> > > Files - and apache-storm-2.5.0.tar.gz.asc.sha512 are identical
> > > Files - and apache-storm-2.5.0.tar.gz.sha512 are identical
> > > Files - and apache-storm-2.5.0.zip.asc.sha512 are identical
> > > Files - and apache-storm-2.5.0.zip.sha512 are identical
> > > Files - and RELEASE_NOTES.html.asc.sha512 are identical
> > > Files - and RELEASE_NOTES.html.sha512 are identical
> > >
> > > Looks OK.
> > >
> > >
> > >
> > > Unzipped the source, built and ran tests with `mvn 

[GitHub] [storm] jnioche opened a new pull request, #3556: Missing dependency prevents Storm from being built, fixes #3940

2023-08-01 Thread via GitHub


jnioche opened a new pull request, #3556:
URL: https://github.com/apache/storm/pull/3556

   ## What is the purpose of the change
   
   Storm can't be built because the dependency pentaho-aggdesigner-algorithm is 
not available. 
   
   This dependency is excluded in some places of the poms but not 
systematically, excluding it everywhere allows the code to be built.
   
   ## How was the change tested
   
   `mvn clean install -DskipTests`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@storm.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: Storm 2.5.0 Release Candidate Vote

2023-08-01 Thread Julien Nioche
Hi,

Have experienced the same problems as Derek when trying to build. This is
due to the dependency *pentaho-aggdesigner-algorithm *not being available.
This dependency is excluded in some places of the poms but not
systematically, I will open an issue and submit a PR shortly.

Otherwise, I managed to run a StormCrawler topology with the 2.5 RC both in
local and deployed mode.

It would be good to fix the build before releasing IMHO.

Julien

On Mon, 31 Jul 2023 at 16:35, Bipin Prasad  wrote:

> Hello Derek,
> Looks like some shared libraries may be missing from the jdk11
> install. Could be similar to this issue
> https://github.com/pytorch/serve/issues/1352
>
> --Bipin
>
> On 2023/07/28 04:52:21 Derek Dagit wrote:
> > I downloaded the release files:
> >
> > ∴ wget -r -np '
> https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.5.0-rc2/'
> >
> > I checked signatures:
> >
> > ∴ ls *.asc|xargs -n1 gpg --verify
> > gpg: assuming signed data in 'apache-storm-2.5.0.pom'
> > gpg: Signature made Tue 25 Jul 2023 09:33:30 AM CDT
> > gpg:using RSA key
> 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> release) " [full]
> > gpg: assuming signed data in 'apache-storm-2.5.0-src.tar.gz'
> > gpg: Signature made Tue 25 Jul 2023 09:34:52 AM CDT
> > gpg:using RSA key
> 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> release) " [full]
> > gpg: assuming signed data in 'apache-storm-2.5.0-src.zip'
> > gpg: Signature made Tue 25 Jul 2023 09:34:52 AM CDT
> > gpg:using RSA key
> 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> release) " [full]
> > gpg: assuming signed data in 'apache-storm-2.5.0.tar.gz'
> > gpg: Signature made Tue 25 Jul 2023 09:33:39 AM CDT
> > gpg:using RSA key
> 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> release) " [full]
> > gpg: assuming signed data in 'apache-storm-2.5.0.zip'
> > gpg: Signature made Tue 25 Jul 2023 09:33:39 AM CDT
> > gpg:using RSA key
> 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> release) " [full]
> > gpg: assuming signed data in 'RELEASE_NOTES.html'
> > gpg: Signature made Tue 25 Jul 2023 09:47:54 AM CDT
> > gpg:using RSA key
> 51379DA8A7AE5B02674EF15C134716AF768D9B6E
> > gpg: Good signature from "Bipin Prasad (For Signing Apache Storm
> release) " [full]
> >
> >
> >
> > I checked checksums:
> >
> > ∴ ls *.sha512|while read f; do gpg --print-md SHA512 "${f%%.sha512}" |
> diff -s - "$f"; done
> >
> > Each one of these failed because the format does not match what results
> from
> > following the instructions at
> >
> https://github.com/apache/storm/blob/master/RELEASING.md#setting-up-a-vote
> .
> >
> > I retried this way:
> >
> > ∴ ls *.sha512|while read f; do sha512sum "${f%%.sha512}" | diff -s -
> "$f"; done
> > Files - and apache-storm-2.5.0.pom.asc.sha512 are identical
> > Files - and apache-storm-2.5.0.pom.sha512 are identical
> > Files - and apache-storm-2.5.0-src.tar.gz.asc.sha512 are identical
> > Files - and apache-storm-2.5.0-src.tar.gz.sha512 are identical
> > Files - and apache-storm-2.5.0-src.zip.asc.sha512 are identical
> > Files - and apache-storm-2.5.0-src.zip.sha512 are identical
> > Files - and apache-storm-2.5.0.tar.gz.asc.sha512 are identical
> > Files - and apache-storm-2.5.0.tar.gz.sha512 are identical
> > Files - and apache-storm-2.5.0.zip.asc.sha512 are identical
> > Files - and apache-storm-2.5.0.zip.sha512 are identical
> > Files - and RELEASE_NOTES.html.asc.sha512 are identical
> > Files - and RELEASE_NOTES.html.sha512 are identical
> >
> > Looks OK.
> >
> >
> >
> > Unzipped the source, built and ran tests with `mvn clean && mvn install`
> >
> > I needed to use the trick at https://stackoverflow.com/a/70673228 to
> avoid the "Blocked mirror for repositories" error maven throws when trying
> to download with plain HTTP.
> >
> > Eventually, the project failed to build because conjars.org was down:
> >
> > [ERROR] Failed to execute goal on project storm-autocreds: Could not
> resolve dependencies for project
> org.apache.storm:storm-autocreds:jar:2.5.0: Failed to collect dependencies
> at org.apache.hive.hcatalog:hive-webhcat-java-client:jar:2.3.9 ->
> org.apache.hive.hcatalog:hive-hcatalog-core:jar:2.3.9 ->
> org.apache.hive:hive-cli:jar:2.3.9 ->
> org.apache.hive:hive-service:jar:2.3.9 ->
> org.apache.hive:hive-exec:jar:2.3.9 ->
> org.pentaho:pentaho-aggdesigner-algorithm:jar:5.1.5-jhyde: Failed to read
> artifact descriptor for
> org.pentaho:pentaho-aggdesigner-algorithm:jar:5.1.5-jhyde: Could not
> transfer artifact org.pentaho:pentaho-aggdesigner-algorithm:pom:5.1.5-jhyde
> from/to conjars (http://conjars.org/repo): transfer failed