Hi, It seems that the signed key isn't in https://dist.apache.org/repos/dist/dev/arrow/KEYS . We must publish the signed key in the KEYS file. Could you append the signed key to the following files:
* https://dist.apache.org/repos/dist/dev/arrow/KEYS * https://dist.apache.org/repos/dist/release/arrow/KEYS See also: https://infra.apache.org/release-distribution.html#sigs-and-sums > Signing keys used at Apache must be published in the KEYS > file and should be made available through the global > public keyserver network. Signing keys should be linked > into a strong web of trust. See the comment in KEYS how to append a new key to KEYS. Thanks, -- kou In <CAFhtnRyqJJmyAL8jD+uFkHhryVdO3HUTLC0yN=9meuabza7...@mail.gmail.com> "[RUST] Request for Comment / Check proposed release process" on Mon, 17 May 2021 09:56:44 -0400, Andrew Lamb <al...@influxdata.com> wrote: > I need help verifying the proposed source tarball format for the Arrow Rust > releases; > > Specifically, can someone please: > 1. Download the example files and ensure they can successfully validate the > signatures > 2. Ensure that the contents of this tarball could be used to publish to > crates.io > > Background: I have been working on the new release process for > arrow-rs (updates in [2]). The contents and changelog in this example > release tarball are from [3] and were created using the scripts / > instructions in [1]. > > [1] https://github.com/apache/arrow-rs/pull/299 > [2] https://github.com/apache/arrow-rs/issues/292 > [3] https://github.com/apache/arrow-rs/pull/305 > > Here is an example output (including Vote Email) generated by script in [1]: > > ``` > cd /Users/alamb/Software/arrow-rs/ && ./dev/release/create-tarball.sh 0.0.3 > Attempting to create > /Users/alamb/Software/arrow-rs/dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz > from tag 0.0.3 > Draft email for dev@arrow.apache.org mailing list > > --------------------------------------------------------- > To: dev@arrow.apache.org > Subject: [VOTE][RUST] Release Apache Arrow > > Hi, > > I would like to propose a release of Apache Arrow Rust > Implementation, version 0.0.3. > > This release candidate is based on commit: > f3959f59a6119dab23818e6eef87e0d7b58c820e [1] > > The proposed release tarball and signatures are hosted at [2]. > The changelog is located at [3]. > > Please download, verify checksums and signatures, run the unit tests, > and vote on the release. > > The vote will be open for at least 72 hours. > > [ ] +1 Release this as Apache Arrow Rust > [ ] +0 > [ ] -1 Do not release this as Apache Arrow Rust because... > > [1]: > https://github.com/apache/arrow-rs/tree/f3959f59a6119dab23818e6eef87e0d7b58c820e > [2]: https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-0.0.3 > [3]: > https://github.com/apache/arrow-rs/blob/f3959f59a6119dab23818e6eef87e0d7b58c820e/CHANGELOG.md > --------------------------------------------------------- > Running rat license checker on > /Users/alamb/Software/arrow-rs/dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz > OK > No unapproved licenses > Signing tarball and creating checksums > Uploading to apache dist/dev to > https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-0.0.3 > Checked out revision 47764. > A dev/dist/apache-arrow-rs-0.0.3 > A (bin) > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz > A > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha512 > A > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.asc > A > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha256 > Adding dev/dist/apache-arrow-rs-0.0.3 > Adding (bin) > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz > Adding > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.asc > Adding > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha256 > Adding > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha512 > Transmitting file data ....done > Committing transaction... > Committed revision 47765. > > ```
