Re: [Urgent] Question about Nexus repo and Hadoop release

Anyone else getting timeout errors with the MIT keypool? The ubuntu keypool seems ok On Tue, Jan 22, 2019 at 1:28 AM Wangda Tan wrote: > It seems there's no useful information from the log :(. Maybe I should > change my key and try again. In the meantime, Sunil will help me to create > release

Re: [Urgent] Question about Nexus repo and Hadoop release

It seems there's no useful information from the log :(. Maybe I should change my key and try again. In the meantime, Sunil will help me to create release and get 3.1.2 out. Thanks everybody for helping with this, really appreciate it! Best, Wangda On Mon, Jan 21, 2019 at 9:55 PM Chris Lambertus

Re: [Urgent] Question about Nexus repo and Hadoop release

2019-01-22 05:40:41 INFO [99598137-805273] - com.sonatype.nexus.staging.internal.DefaultStagingManager - Dropping staging repositories [orgapachehadoop-1201] 2019-01-22 05:40:42 INFO [ool-1-thread-14] - com.sonatype.nexus.staging.internal.task.StagingBackgroundTask - STARTED Dropping staging

Re: [Urgent] Question about Nexus repo and Hadoop release

Hi Chris, Thanks for helping the issue, Now the issue still exists but the process becomes much faster: failureMessage Failed to validate the pgp signature of '/org/apache/hadoop/hadoop-project/3.1.2/hadoop-project-3.1.2.pom', check the logs. failureMessage Failed to validate the pgp signature

Re: [Urgent] Question about Nexus repo and Hadoop release

It looks like there are timeouts from some of the keyservers. I’ve trimmed the list again to only servers known to be working (ubuntu and sks-keyservers.net ). Can you give it a try again? Brian, there are also a number of timeout errors related to central, but I

Re: [Urgent] Question about Nexus repo and Hadoop release

They keys file is irrelevant to Nexus. The only thing that matters is it’s in the mit pgp key ring. --Brian (mobile) > On Jan 21, 2019, at 3:34 PM, Wangda Tan wrote: > > I just checked on KEYS file, it doesn't show sig part. I updated KEYS file on > Apache

Re: [Urgent] Question about Nexus repo and Hadoop release

I just checked on KEYS file, it doesn't show sig part. I updated KEYS file on Apache https://dist.apache.org/repos/dist/release/hadoop/common/KEYS and made it be ultimately trusted. pub rsa4096 2018-03-20 [SC] 4C899853CDDA4E40C60212B5B3FA653D57300D45 uid [ultimate] Wangda tan

Re: [Urgent] Question about Nexus repo and Hadoop release

Hi David, Thanks for helping check this, I can see signatures on my key: pub 4096R/57300D45 2018-03-20 Fingerprint=4C89 9853 CDDA 4E40 C602 12B5 B3FA 653D 5730 0D45 uid Wangda tan sig sig3 57300D45

Re: [Urgent] Question about Nexus repo and Hadoop release

I wonder if it's because there are no signatures on your key. --David On Mon, Jan 21, 2019 at 11:57 AM Wangda Tan wrote: > > Hi Brian, > > Here're links to my key: > > http://pool.sks-keyservers.net:11371/key/0xB3FA653D57300D45 > > http://pgp.mit.edu/pks/lookup?op=get=0xB3FA653D57300D45 > > On

Re: [Urgent] Question about Nexus repo and Hadoop release

Hi Brian, Here're links to my key: http://pool.sks-keyservers.net:11371/key/0xB3FA653D57300D45 http://pgp.mit.edu/pks/lookup?op=get=0xB3FA653D57300D45 On Apache SVN: https://dist.apache.org/repos/dist/release/hadoop/common/KEYS Thanks, Wangda On Mon, Jan 21, 2019 at 6:51 AM Brian Demers

Re: [Urgent] Question about Nexus repo and Hadoop release

Can you share the link to your key? -Brian > On Jan 20, 2019, at 11:21 PM, Wangda Tan wrote: > > Still couldn't figure out without locating the log on the Nexus machine. With > help from several committers and PMCs, we didn't see anything wrong with my > signing key. > > I don't want to

Re: [Urgent] Question about Nexus repo and Hadoop release

Still couldn't figure out without locating the log on the Nexus machine. With help from several committers and PMCs, we didn't see anything wrong with my signing key. I don't want to delay 3.1.2 more because of this. Is it allowed for me to publish artifacts (like tarball, source package, etc.)

Re: [Urgent] Question about Nexus repo and Hadoop release

Spent several more hours trying to figure out the issue, still no luck. I just filed https://issues.sonatype.org/browse/OSSRH-45646, really appreciate if anybody could add some suggestions. Thanks, Wangda On Tue, Jan 15, 2019 at 9:48 AM Wangda Tan wrote: > It seems the problem still exists

Re: [Urgent] Question about Nexus repo and Hadoop release

It seems the problem still exists for me: Now the error message only contains: failureMessage Failed to validate the pgp signature of '/org/apache/hadoop/hadoop-client-check-invariants/3.1.2/hadoop-client-check-invariants-3.1.2.pom', check the logs. failureMessage Failed to validate the pgp

Re: [Urgent] Question about Nexus repo and Hadoop release

Good to know. The pool has occasionally had sync issues, but we're talking 3 times in the last 8-9 years. On Tue, Jan 15, 2019 at 10:39 AM Elek, Marton wrote: > My key was pushed to the server with pgp about 1 year ago, and it worked > well with the last Ratis release. So it should be synced

Re: [Urgent] Question about Nexus repo and Hadoop release

My key was pushed to the server with pgp about 1 year ago, and it worked well with the last Ratis release. So it should be synced between the key servers. But it seems that the INFRA solved the problem with shuffling the key server order (or it was an intermittent issue): see INFRA-17649 Seems

Re: [Urgent] Question about Nexus repo and Hadoop release

HI Brain, Thanks for responding, could u share how to push to keys to Apache pgp pool? Best, Wangda On Mon, Jan 14, 2019 at 10:44 AM Brian Fox wrote: > Did you push your key up to the pgp pool? That's what Nexus is validating > against. It might take time to propagate if you just pushed it. >

Re: [Urgent] Question about Nexus repo and Hadoop release

Did you push your key up to the pgp pool? That's what Nexus is validating against. It might take time to propagate if you just pushed it. On Mon, Jan 14, 2019 at 9:59 AM Elek, Marton wrote: > Seems to be an INFRA issue for me: > > 1. I downloaded a sample jar file [1] + the signature from the >

Re: [Urgent] Question about Nexus repo and Hadoop release

Seems to be an INFRA issue for me: 1. I downloaded a sample jar file [1] + the signature from the repository and it was ok, locally I verified it. 2. I tested it with an other Apache project (Ratis) and my key. I got the same problem even if it worked at last year during the 0.3.0 release. (I

Re: [Urgent] Question about Nexus repo and Hadoop release

Uploaded sample file and signature. On Sat, Jan 12, 2019 at 9:18 PM Wangda Tan wrote: > Actually, among the hundreds of failed messages, the "No public key" > issues still occurred several times: > > failureMessage No public key: Key with id: (b3fa653d57300d45) was not > able to be located

Re: [Urgent] Question about Nexus repo and Hadoop release

Actually, among the hundreds of failed messages, the "No public key" issues still occurred several times: failureMessage No public key: Key with id: (b3fa653d57300d45) was not able to be located on http://gpg-keyserver.de/. Upload your public key and try the operation again. failureMessage No

Re: [Urgent] Question about Nexus repo and Hadoop release

Thanks David for the quick response! I just retried, now the "No public key" issue is gone. However, the issue: failureMessage Failed to validate the pgp signature of '/org/apache/hadoop/hadoop-mapreduce-client-jobclient/3.1.2/hadoop-mapreduce-client-jobclient-3.1.2-tests.jar', check the logs.

Re: [Urgent] Question about Nexus repo and Hadoop release

On Sat, Jan 12, 2019 at 9:09 PM Wangda Tan wrote: > > Hi Devs, > > I'm currently rolling Hadoop 3.1.2 release candidate, however, I saw an issue > when I try to close repo in Nexus. > > Logs of https://repository.apache.org/#stagingRepositories > (orgapachehadoop-1183) shows hundreds of lines