Podling Report Reminder - September 2018

2018-08-31 Thread jmclean 
Dear podling,

This email was sent by an automated system on behalf of the Apache
Incubator PMC. It is an initial reminder to give you plenty of time to
prepare your quarterly board report.

The board meeting is scheduled for Wed, 19 September 2018, 10:30 am PDT.
The report for your podling will form a part of the Incubator PMC
report. The Incubator PMC requires your report to be submitted 2 weeks
before the board meeting, to allow sufficient time for review and
submission (Wed, September 05).

Please submit your report with sufficient time to allow the Incubator
PMC, and subsequently board members to review and digest. Again, the
very latest you should submit your report is 2 weeks prior to the board
meeting.

Candidate names should not be made public before people are actually
elected, so please do not include the names of potential committers or
PPMC members in your report.

Thanks,

The Apache Incubator PMC

Submitting your Report

--

Your report should contain the following:

*   Your project name
*   A brief description of your project, which assumes no knowledge of
the project or necessarily of its field
*   A list of the three most important issues to address in the move
towards graduation.
*   Any issues that the Incubator PMC or ASF Board might wish/need to be
aware of
*   How has the community developed since the last report
*   How has the project developed since the last report.
*   How does the podling rate their own maturity.

This should be appended to the Incubator Wiki page at:

https://wiki.apache.org/incubator/September2018

Note: This is manually populated. You may need to wait a little before
this page is created from a template.

Mentors
---

Mentors should review reports for their project(s) and sign them off on
the Incubator wiki page. Signing off reports shows that you are
following the project - projects that are not signed may raise alarms
for the Incubator PMC.

Incubator PMC

Re: [VOTE] Release Apache SkyWalking (incubating) version 5.0.0-RC (round-2)

2018-08-31 Thread xin zhang 
Hi all:

+1 (binding)

Here is my check list:
1. all artifacts in staging repository are published with .asc, .md5 files
2. source code and distribution package are in 
https://dist.apache.prg/repos/dist/dev/incubator/skywalking 

3. source code build successfully
4. LICENSE and NOTICE are in source code and distribution package
5. check .md5 and .sha512
6. Apache RAT checked
7. DISCLAIMER existed

Regards

Xin


> On Aug 31, 2018, at 23:28, 吴晟 Sheng Wu  wrote:
> 
> Hi All,
> This is a call for vote to release Apache SkyWalking (Incubating) version 
> 5.0.0-RC(round-2)
> 
> 
> Round-1[1] vote is canceled, read it to know what happened. The result is:
> 1. Update pom to version 21(from 19), only change from round-1 to round-2
> 2. Maven central doesn't support sha512 yet. So inside maven central, still 
> sha1 and md5
> 3. tar/zip/source in dist had sha512 already(from alpha release), did through 
> our release script.
> 
> 
> 
> 
> Release notes:
> 
> 
> * https://github.com/apache/incubator-skywalking/blob/master/CHANGES.md#500-rc
> 
> 
> Release Candidate:
> 
> 
>   https://dist.apache.org/repos/dist/dev/incubator/skywalking/5.0.0-RC/
> * sha512 checksums
>   - 
> dc985463c4681efb0b3d4f05b38ea5fb75007281314a911b98330dc2395467964d21d8636d7fb9dc3dbb10e4d1be0466f81e2c333b04603dc53e2e1c74e164b1
>   apache-skywalking-apm-incubating-5.0.0-RC-src.tgz
>   - 
> b8a75bff90faa75e365eb70953b25df790b6eec99f82b5ad9d1ba4f9aa26847b40c0aef1eab6d7eeda2cec75d407556886ec38ff6157f312b9630837b8bd7e9c
>   apache-skywalking-apm-incubating-5.0.0-RC.tar.gz
>   - 
> 2f8fbe30bf0a5c769037a59a7f0d249abad9e14cb9772fc62cbd3f2e2845660523b3cb63d461ba1c6bcd069d0d54fe0498813feee6efdace6b6c0936a5160f12
>   apache-skywalking-apm-incubating-5.0.0-RC.zip
> 
> 
> Maven 2 staging repository:
> 
> 
> * 
> https://repository.apache.org/content/repositories/orgapacheskywalking-1018/org/apache/skywalking/
> 
> 
> Release Tag :
> 
> 
> * (GitHub Tag) https://github.com/apache/incubator-skywalking/tree/v5.0.0-RC
> 
> 
> Release CommitID :
> 
> 
> * 
> https://github.com/apache/incubator-skywalking/tree/281ba3edaf4706059078d4e730520f1379fcef96
> * Git submodule
>   * skywalking-ui: 
> https://github.com/apache/incubator-skywalking-ui/tree/ad3ee45dbadfae35d77238bdd7a1df593158f109
>   * apm-protocol/apm-network/src/main/proto: 
> https://github.com/apache/incubator-skywalking-data-collect-protocol/tree/c02c12af12116121e25155d1f3fca0fadee5f2e9
> 
> 
> Keys to verify the Release Candidate :
> 
> 
> * https://dist.apache.org/repos/dist/release/incubator/skywalking/KEYS 
> corresponding to wush...@apache.org
> 
> 
> Guide to build the release from source :
> 
> 
> * 
> https://github.com/apache/incubator-skywalking/blob/master/docs/en/How-to-build.md
> 
> 
> Voting will start now (2018/8/29 date) and will remain open for at least 72 
> hours, Request all PPMC members to give their vote.
> [ ] +1 Release this package.
> [ ] +0 No opinion.
> [ ] -1 Do not release this package because
> 
> 
> 
> [1] 
> https://lists.apache.org/thread.html/0b038e4c8a638e7d8e2cd6fbed12592f8810c99e5cf3dbf122ae4eee@%3Cdev.skywalking.apache.org%3E
> 
> 
> --
> Sheng Wu
> Apache SkyWalking

[VOTE] Release Apache SkyWalking (incubating) version 5.0.0-RC (round-2)

2018-08-31 Thread ???? Sheng Wu 
Hi All,
This is a call for vote to release Apache SkyWalking (Incubating) version 
5.0.0-RC(round-2)


Round-1[1] vote is canceled, read it to know what happened. The result is:
1. Update pom to version 21(from 19), only change from round-1 to round-2
2. Maven central doesn't support sha512 yet. So inside maven central, still 
sha1 and md5
3. tar/zip/source in dist had sha512 already(from alpha release), did through 
our release script.




Release notes:


 * https://github.com/apache/incubator-skywalking/blob/master/CHANGES.md#500-rc


Release Candidate:


   https://dist.apache.org/repos/dist/dev/incubator/skywalking/5.0.0-RC/
 * sha512 checksums
   - 
dc985463c4681efb0b3d4f05b38ea5fb75007281314a911b98330dc2395467964d21d8636d7fb9dc3dbb10e4d1be0466f81e2c333b04603dc53e2e1c74e164b1
  apache-skywalking-apm-incubating-5.0.0-RC-src.tgz
   - 
b8a75bff90faa75e365eb70953b25df790b6eec99f82b5ad9d1ba4f9aa26847b40c0aef1eab6d7eeda2cec75d407556886ec38ff6157f312b9630837b8bd7e9c
  apache-skywalking-apm-incubating-5.0.0-RC.tar.gz
   - 
2f8fbe30bf0a5c769037a59a7f0d249abad9e14cb9772fc62cbd3f2e2845660523b3cb63d461ba1c6bcd069d0d54fe0498813feee6efdace6b6c0936a5160f12
  apache-skywalking-apm-incubating-5.0.0-RC.zip


Maven 2 staging repository:


 * 
https://repository.apache.org/content/repositories/orgapacheskywalking-1018/org/apache/skywalking/


Release Tag :


 * (GitHub Tag) https://github.com/apache/incubator-skywalking/tree/v5.0.0-RC


Release CommitID :


 * 
https://github.com/apache/incubator-skywalking/tree/281ba3edaf4706059078d4e730520f1379fcef96
 * Git submodule
   * skywalking-ui: 
https://github.com/apache/incubator-skywalking-ui/tree/ad3ee45dbadfae35d77238bdd7a1df593158f109
   * apm-protocol/apm-network/src/main/proto: 
https://github.com/apache/incubator-skywalking-data-collect-protocol/tree/c02c12af12116121e25155d1f3fca0fadee5f2e9


Keys to verify the Release Candidate :


 * https://dist.apache.org/repos/dist/release/incubator/skywalking/KEYS 
corresponding to wush...@apache.org


Guide to build the release from source :


 * 
https://github.com/apache/incubator-skywalking/blob/master/docs/en/How-to-build.md


Voting will start now (2018/8/29 date) and will remain open for at least 72 
hours, Request all PPMC members to give their vote.
[ ] +1 Release this package.
[ ] +0 No opinion.
[ ] -1 Do not release this package because



[1] 
https://lists.apache.org/thread.html/0b038e4c8a638e7d8e2cd6fbed12592f8810c99e5cf3dbf122ae4eee@%3Cdev.skywalking.apache.org%3E


--
Sheng Wu
Apache SkyWalking

Re: [VOTE] Release Apache SkyWalking (incubating) version 5.0.0-RC

2018-08-31 Thread ???? Sheng Wu 
Thanks very much for rechecking this. Now we can be sure, we are right.


Let me do the release again, and start a new vote. :)


I think this vote thread should stay in closed, the repo and tag have been 
released, source codes have been updated. 


--
Sheng Wu
Apache SkyWalking 


 




-- Original --
From:  "mck";
Date:  Fri, Aug 31, 2018 08:51 PM
To:  "dev";

Subject:  Re:  [VOTE] Release Apache SkyWalking (incubating) version 5.0.0-RC




> And I read the pom release announcement[4] again, they said
> > It includes generating sha512 checksums for the source-release (not the 
> artifacts going to maven central where sha1 and md5 are pretty built-in).
> 
> 
> I am not 100% sure about the meanings, but look like maven central 
> requires sha1 and m5.


You are correct Sheng, my bad.

The release doc says 
 "For every artifact distributed to the public through Apache channels"
and that threw me.

But indeed maven does not yet support sha256 or sha512 checksums, and even if 
you do upload them will treat them incorrectly as separate artefacts in the 
repository. This is described a bit more in 
https://issues.apache.org/jira/browse/MPOM-205

I'm +1 on the release now.

regards,
Mick

Re: [VOTE] Release Apache SkyWalking (incubating) version 5.0.0-RC

2018-08-31 Thread mck 


> And I read the pom release announcement[4] again, they said
> > It includes generating sha512 checksums for the source-release (not the 
> artifacts going to maven central where sha1 and md5 are pretty built-in).
> 
> 
> I am not 100% sure about the meanings, but look like maven central 
> requires sha1 and m5.


You are correct Sheng, my bad.

The release doc says 
 "For every artifact distributed to the public through Apache channels"
and that threw me.

But indeed maven does not yet support sha256 or sha512 checksums, and even if 
you do upload them will treat them incorrectly as separate artefacts in the 
repository. This is described a bit more in 
https://issues.apache.org/jira/browse/MPOM-205

I'm +1 on the release now.

regards,
Mick

Re: [VOTE] Release Apache SkyWalking (incubating) version 5.0.0-RC

2018-08-31 Thread ???? Sheng Wu 
Hi Mick


I already closed the vote mail, because try apache 21 pom makes me have to 
delete existed tag, which may cause unknown issues about checked.


But after I upgraded the pom to 21[1], and did a release again[2]. Still no 
sha512 found in staging repo, such as our distribution package[3].
I think they haven't provided a way to do this.


And I read the pom release announcement[4] again, they said
> It includes generating sha512 checksums for the source-release (not the 
artifacts going to maven central where sha1 and md5 are pretty built-in).


I am not 100% sure about the meanings, but look like maven central requires 
sha1 and m5.


So, any one have more opinions about this? Do I need to start a new vote?(Keep 
no sha512 in nexus repo)




[1] 
https://repository.apache.org/content/repositories/orgapacheskywalking-1018/org/apache/skywalking/apm/5.0.0-RC/apm-5.0.0-RC.pom
[2] https://repository.apache.org/content/repositories/orgapacheskywalking-1018
[3] 
https://repository.apache.org/content/repositories/orgapacheskywalking-1018/org/apache/skywalking/apache-skywalking-apm-incubating/5.0.0-RC/
[4] 
https://lists.apache.org/thread.html/ab0838d16033a54e039cf3dbe3344c7e63b340f0dbc14ad14211ff1d@%3Cannounce.maven.apache.org%3E


--
Sheng Wu
Apache SkyWalking 


 




-- Original --
From:  "mck";
Date:  Fri, Aug 31, 2018 09:35 AM
To:  "dev";

Subject:  Re: [VOTE] Release Apache SkyWalking (incubating) version 5.0.0-RC




> Voting will start now (2018/8/29 date) and will remain open for at least 
> 72 hours, Request all PPMC members to give their vote.
> [ ] +1 Release this package.
> [ ] +0 No opinion.
> [ ] -1 Do not release this package because


-1  The digests on the maven artefacts don't meet the new ASF release 
requirements.

The distribution artefacts are good, only asc signatures and sha512 digests, as 
seen in
 https://dist.apache.org/repos/dist/dev/incubator/skywalking/5.0.0-RC/

But the artefacts in the maven staging repository don't have sha512 digests, 
and have the now forbidden md5 and sha1 digests.
As seen in
 
https://repository.apache.org/content/repositories/orgapacheskywalking-1017/org/apache/skywalking/agent-grpc-provider/5.0.0-RC/

The relevant ASF documentation is in 
 https://www.apache.org/dev/release-distribution#sigs-and-sums
specifically??

> For every artifact distributed to the public through Apache channels, the PMC
>
>  - MUST supply a valid OpenPGP-compatible ASCII-armored detached signature 
> file
>  - MUST supply at least one checksum file
>  - SHOULD supply a SHA-256 and/or SHA-512 checksum file
>  - SHOULD NOT supply a MD5 or SHA-1 checksum file (because these are 
> deprecated)
>
> For new releases, PMCs MUST supply SHA-256 and/or SHA-512; and SHOULD NOT 
> supply MD5 or SHA-1. Existing releases do not need to be changed.

Upgrading to apache pom 21 should fix this.
https://lists.apache.org/thread.html/ab0838d16033a54e039cf3dbe3344c7e63b340f0dbc14ad14211ff1d@%3Cannounce.maven.apache.org%3E

regards,
Mick