Re: [VOTE] Apache Geode release - 1.4.0 RC1

2018-01-25 Thread Swapnil Bawaskar 
This vote is now cancelled. I will send a vote thread for RC2 when this
issue is resolved.

On Thu, Jan 25, 2018 at 7:40 AM Bruce Schuchardt 
wrote:

> -1 based on Dan's findings
>
>
> On 1/24/18 8:08 AM, Anthony Baker wrote:
> > Here’s a better URL for release notes that doesn’t require logging in:
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420=12341842
> <
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420=12341842
> >
> >
> > Let’s start crowd-sourcing a condensed version here:
> >
> https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0
> <
> https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0
> >
> >
> >
> > Thanks,
> > Anthony
> >
> >
> >> On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar 
> wrote:
> >>
> >> This is the first release candidate for Apache Geode, version 1.4.0.
> >> Thanks to all the community members for their contributions to this
> >> release!
> >>
> >> *** Please download, test and vote by Friday, January 26, 1200 hrs
> >> US Pacific. ***
> >>
> >> It fixes 277 issues. release notes can be found at:
> >> https://issues.apache.org/jira/projects/GEODE/versions/12341842
> >>
> >> Note that we are voting upon the source tags: rel/v1.4.0.RC1
> >> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> >> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
> >>
> >> Commit ID:
> >> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> >> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
> >>
> >> Source and binary files:
> >> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
> >>
> >> Maven staging repo:
> >> https://repository.apache.org/content/repositories/orgapachegeode-1036
> >>
> >>
> >> Geode's KEYS file containing PGP keys we use to sign the release:
> >> https://github.com/apache/geode/blob/develop/KEYS
> >>
> >> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> >> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB
> >
>
>

Re: [VOTE] Apache Geode release - 1.4.0 RC1

2018-01-25 Thread Bruce Schuchardt 

-1 based on Dan's findings


On 1/24/18 8:08 AM, Anthony Baker wrote:

Here’s a better URL for release notes that doesn’t require logging in:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420=12341842
 


Let’s start crowd-sourcing a condensed version here:
https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0 



Thanks,
Anthony



On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar  wrote:

This is the first release candidate for Apache Geode, version 1.4.0.
Thanks to all the community members for their contributions to this
release!

*** Please download, test and vote by Friday, January 26, 1200 hrs
US Pacific. ***

It fixes 277 issues. release notes can be found at:
https://issues.apache.org/jira/projects/GEODE/versions/12341842

Note that we are voting upon the source tags: rel/v1.4.0.RC1
https://github.com/apache/geode/tree/rel/v1.4.0.RC1
https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1

Commit ID:
7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)

Source and binary files:
https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1

Maven staging repo:
https://repository.apache.org/content/repositories/orgapachegeode-1036


Geode's KEYS file containing PGP keys we use to sign the release:
https://github.com/apache/geode/blob/develop/KEYS

Release Signed with Key: pub 4096R/18F902DB 2016-04-07
Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB

Re: [VOTE] Apache Geode release - 1.4.0 RC1

2018-01-24 Thread Anthony Baker 
Reviewed:

- tags
- maven repo
- builds from source, also geode-examples
- checked for binaries

The pom added this dependency:

 
   org.slf4j
   slf4j-api
   1.7.24
   runtime
 


and then this exclusion for the the log4j-slf4j-impl dependency:


  org.apache.logging.log4j
  log4j-slf4j-impl
  2.8.2
  runtime
  

  slf4j-api
  *

  
  true



Is that correct?  See 
https://github.com/apache/geode/commit/61ba3b69b3ec3093ae0610f428de62c57499b123.


Anthony
 

> On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar  wrote:
> 
> This is the first release candidate for Apache Geode, version 1.4.0.
> Thanks to all the community members for their contributions to this
> release!
> 
> *** Please download, test and vote by Friday, January 26, 1200 hrs
> US Pacific. ***
> 
> It fixes 277 issues. release notes can be found at:
> https://issues.apache.org/jira/projects/GEODE/versions/12341842
> 
> Note that we are voting upon the source tags: rel/v1.4.0.RC1
> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
> 
> Commit ID:
> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
> 
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
> 
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachegeode-1036
> 
> 
> Geode's KEYS file containing PGP keys we use to sign the release:
> https://github.com/apache/geode/blob/develop/KEYS
> 
> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB

Re: [VOTE] Apache Geode release - 1.4.0 RC1

2018-01-24 Thread Dan Smith 
-1 due to to the security risks introduced by GEODE-4131 (using rmi-io for
deploying jars).

-Dan

On Wed, Jan 24, 2018 at 8:08 AM, Anthony Baker  wrote:

> Here’s a better URL for release notes that doesn’t require logging in:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?
> projectId=12318420=12341842  jira/secure/ReleaseNote.jspa?projectId=12318420=12341842>
>
> Let’s start crowd-sourcing a condensed version here:
> https://cwiki.apache.org/confluence/display/GEODE/
> Release+Notes#ReleaseNotes-1.4.0  confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0>
>
>
> Thanks,
> Anthony
>
>
> > On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar 
> wrote:
> >
> > This is the first release candidate for Apache Geode, version 1.4.0.
> > Thanks to all the community members for their contributions to this
> > release!
> >
> > *** Please download, test and vote by Friday, January 26, 1200 hrs
> > US Pacific. ***
> >
> > It fixes 277 issues. release notes can be found at:
> > https://issues.apache.org/jira/projects/GEODE/versions/12341842
> >
> > Note that we are voting upon the source tags: rel/v1.4.0.RC1
> > https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> > https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
> >
> > Commit ID:
> > 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> > ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
> >
> > Source and binary files:
> > https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
> >
> > Maven staging repo:
> > https://repository.apache.org/content/repositories/orgapachegeode-1036
> >
> >
> > Geode's KEYS file containing PGP keys we use to sign the release:
> > https://github.com/apache/geode/blob/develop/KEYS
> >
> > Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> > Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB
>
>

Re: [VOTE] Apache Geode release - 1.4.0 RC1

2018-01-24 Thread Anthony Baker 
Here’s a better URL for release notes that doesn’t require logging in:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420=12341842
 


Let’s start crowd-sourcing a condensed version here:
https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0
 



Thanks,
Anthony


> On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar  wrote:
> 
> This is the first release candidate for Apache Geode, version 1.4.0.
> Thanks to all the community members for their contributions to this
> release!
> 
> *** Please download, test and vote by Friday, January 26, 1200 hrs
> US Pacific. ***
> 
> It fixes 277 issues. release notes can be found at:
> https://issues.apache.org/jira/projects/GEODE/versions/12341842
> 
> Note that we are voting upon the source tags: rel/v1.4.0.RC1
> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
> 
> Commit ID:
> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
> 
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
> 
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachegeode-1036
> 
> 
> Geode's KEYS file containing PGP keys we use to sign the release:
> https://github.com/apache/geode/blob/develop/KEYS
> 
> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB

Re: [VOTE] Apache Geode release - 1.4.0 RC1

2018-01-23 Thread Dan Smith 
This release candidate does have the rmi-io changes. I think we need to
sort out if we are creating insecure sockets due to those changes - if so
we need to fix that before releasing.

-Dan

On Tue, Jan 23, 2018 at 2:32 PM, Swapnil Bawaskar 
wrote:

> This is the first release candidate for Apache Geode, version 1.4.0.
> Thanks to all the community members for their contributions to this
> release!
>
> *** Please download, test and vote by Friday, January 26, 1200 hrs
> US Pacific. ***
>
> It fixes 277 issues. release notes can be found at:
> https://issues.apache.org/jira/projects/GEODE/versions/12341842
>
> Note that we are voting upon the source tags: rel/v1.4.0.RC1
> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
>
> Commit ID:
> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
>
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachegeode-1036
>
>
> Geode's KEYS file containing PGP keys we use to sign the release:
> https://github.com/apache/geode/blob/develop/KEYS
>
> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB
>

[VOTE] Apache Geode release - 1.4.0 RC1

2018-01-23 Thread Swapnil Bawaskar 
This is the first release candidate for Apache Geode, version 1.4.0.
Thanks to all the community members for their contributions to this
release!

*** Please download, test and vote by Friday, January 26, 1200 hrs
US Pacific. ***

It fixes 277 issues. release notes can be found at:
https://issues.apache.org/jira/projects/GEODE/versions/12341842

Note that we are voting upon the source tags: rel/v1.4.0.RC1
https://github.com/apache/geode/tree/rel/v1.4.0.RC1
https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1

Commit ID:
7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)

Source and binary files:
https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1

Maven staging repo:
https://repository.apache.org/content/repositories/orgapachegeode-1036


Geode's KEYS file containing PGP keys we use to sign the release:
https://github.com/apache/geode/blob/develop/KEYS

Release Signed with Key: pub 4096R/18F902DB 2016-04-07
Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB