Apache download mirrors [was Re: Apache Account Setup]

2019-12-18 Thread Justin Mclean
Hi, > Will the release artifacts go into SVN at dist.apache.org? Or are git-based > projects released differently? They need to be placed their, putting them there means they get distributed to Apache mirrors sites [1] allowing easy access from allover the world. It usually take about 24

Re: Apache Account Setup

2019-12-18 Thread Nathan Hartman
On Wed, Dec 18, 2019 at 4:21 PM Justin Mclean wrote: > Hi, > > Forgive me for top posting. > > Some things that may help: > - Unusually release are only signed by the RM (but you can have others > sign it as well) > - It’s best to use your apache email address (but it’s not required) > - A key

Re: Apache Account Setup

2019-12-18 Thread Justin Mclean
Hi, Forgive me for top posting. Some things that may help: - Unusually release are only signed by the RM (but you can have others sign it as well) - It’s best to use your apache email address (but it’s not required) - A key signing party is a good idea - Emails don’t have to be signed

Re: Apache Account Setup

2019-12-18 Thread Nathan Hartman
On Wed, Dec 18, 2019 at 11:25 AM Gregory Nutt wrote: > > > > I don't think there's a need to sign emails. > > > > We just sign the release tarballs and those signatures go into a .sig > > file that people can download and use to verify the tarballs. > > Thanks... I obviously don't know what I am

Re: Apache Account Setup

2019-12-18 Thread Gregory Nutt
I don't think there's a need to sign emails. We just sign the release tarballs and those signatures go into a .sig file that people can download and use to verify the tarballs. Thanks... I obviously don't know what I am going.  Just following through Apache checklists as I run across them.

Re: Apache Account Setup

2019-12-18 Thread Nathan Hartman
On Wed, Dec 18, 2019 at 10:35 AM Gregory Nutt wrote: > These are Windows computers. My key was created by gpg from the Cygwin > command line. Do I need to copy this into Windows application data for > use by a mailer? I use Thunderbird and I am not sure where that would go. I don't think

Re: Apache Account Setup

2019-12-18 Thread Gregory Nutt
Anotherdumb  question... I have multiple computers and do (work other than just testing) on two:  A desktop and a laptop.  I presume that these should have the same key and that I can just copy .gnupg to that they have the same signing key. These are Windows computers.  My key was created by

Re: Apache Account Setup

2019-12-18 Thread Nathan Hartman
On Wed, Dec 18, 2019 at 9:39 AM Abdelatif Guettouche < abdelatif.guettou...@gmail.com> wrote: > Yes they recommend the key to be with an @apache.org email. > But we can add an email to an existing key. > > gpg --edit-key > > We then can add an new email through the gpg cli and upload it when

Re: Apache Account Setup

2019-12-18 Thread Abdelatif Guettouche
Yes they recommend the key to be with an @apache.org email. But we can add an email to an existing key. gpg --edit-key We then can add an new email through the gpg cli and upload it when we're done. On Wed, Dec 18, 2019 at 2:12 PM Gregory Nutt wrote: > > > >> I saw the option to send the SSH

Re: Apache Account Setup

2019-12-18 Thread Gregory Nutt
I saw the option to send the SSH keys, so I suppose we will need to fill it later (for those who didn't it yet). Also if you do not have your PGP keys yet, you should do that soon. These are needed for cryptographically signing releases. Several people need to sign each release in order to

Re: Apache Account Setup

2019-12-18 Thread Alan Carvalho de Assis
Hi Nathan, On 12/18/19, Nathan Hartman wrote: > On Wed, Dec 18, 2019 at 5:24 AM Alan Carvalho de Assis > wrote: > > Thank you Greg! >> >> I saw the option to send the SSH keys, so I suppose we will need to fill >> it >> later (for those who didn't it yet). > > > Also if you do not have your PGP

Re: Apache Account Setup

2019-12-18 Thread Nathan Hartman
On Wed, Dec 18, 2019 at 5:24 AM Alan Carvalho de Assis wrote: Thank you Greg! > > I saw the option to send the SSH keys, so I suppose we will need to fill it > later (for those who didn't it yet). Also if you do not have your PGP keys yet, you should do that soon. These are needed for

Re: Apache Account Setup

2019-12-18 Thread Alan Carvalho de Assis
Thank you Greg! I saw the option to send the SSH keys, so I suppose we will need to fill it later (for those who didn't it yet). BR, Alan On Tuesday, December 17, 2019, Gregory Nutt wrote: > PPMC members have Apache email addresses. Mine is gn...@apache.org for example. I stumbled across

Apache Account Setup

2019-12-17 Thread Gregory Nutt
PPMC members have Apache email addresses.  Mine is gn...@apache.org for example.  I stumbled across this account configuration utility: https://id.apache.org/  You can use that to setup your forwarding address (and your github name) . I see some PPMC people already know this.  There is