On Tue, May 18, 2021 at 10:31 AM Sutou Kouhei <k...@clear-code.com> wrote:
>
> Hi,
>
> It seems that the signed key isn't in
> https://dist.apache.org/repos/dist/dev/arrow/KEYS .
> We must publish the signed key in the KEYS file. Could you
> append the signed key to the following files:
>
> * https://dist.apache.org/repos/dist/dev/arrow/KEYS
> * https://dist.apache.org/repos/dist/release/arrow/KEYS
>
> See also: https://infra.apache.org/release-distribution.html#sigs-and-sums
>
> > Signing keys used at Apache must be published in the KEYS
> > file and should be made available through the global
> > public keyserver network. Signing keys should be linked
> > into a strong web of trust.
>
> See the comment in KEYS how to append a new key to KEYS.
We have both Jorge and Andrew in the web-of-trust now, the KEYS files
should be updated soon.
>
>
> Thanks,
> --
> kou
>
> In <CAFhtnRyqJJmyAL8jD+uFkHhryVdO3HUTLC0yN=9meuabza7...@mail.gmail.com>
> "[RUST] Request for Comment / Check proposed release process" on Mon, 17
> May 2021 09:56:44 -0400,
> Andrew Lamb <al...@influxdata.com> wrote:
>
> > I need help verifying the proposed source tarball format for the Arrow Rust
> > releases;
> >
> > Specifically, can someone please:
> > 1. Download the example files and ensure they can successfully validate the
> > signatures
> > 2. Ensure that the contents of this tarball could be used to publish to
> > crates.io
> >
> > Background: I have been working on the new release process for
> > arrow-rs (updates in [2]). The contents and changelog in this example
> > release tarball are from [3] and were created using the scripts /
> > instructions in [1].
> >
> > [1] https://github.com/apache/arrow-rs/pull/299
> > [2] https://github.com/apache/arrow-rs/issues/292
> > [3] https://github.com/apache/arrow-rs/pull/305
> >
> > Here is an example output (including Vote Email) generated by script in [1]:
> >
> > ```
> > cd /Users/alamb/Software/arrow-rs/ && ./dev/release/create-tarball.sh 0.0.3
> > Attempting to create
> > /Users/alamb/Software/arrow-rs/dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz
> > from tag 0.0.3
> > Draft email for dev@arrow.apache.org mailing list
> >
> > ---------------------------------------------------------
> > To: dev@arrow.apache.org
> > Subject: [VOTE][RUST] Release Apache Arrow
> >
> > Hi,
> >
> > I would like to propose a release of Apache Arrow Rust
> > Implementation, version 0.0.3.
> >
> > This release candidate is based on commit:
> > f3959f59a6119dab23818e6eef87e0d7b58c820e [1]
> >
> > The proposed release tarball and signatures are hosted at [2].
> > The changelog is located at [3].
> >
> > Please download, verify checksums and signatures, run the unit tests,
> > and vote on the release.
> >
> > The vote will be open for at least 72 hours.
> >
> > [ ] +1 Release this as Apache Arrow Rust
> > [ ] +0
> > [ ] -1 Do not release this as Apache Arrow Rust because...
> >
> > [1]:
> > https://github.com/apache/arrow-rs/tree/f3959f59a6119dab23818e6eef87e0d7b58c820e
> > [2]: https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-0.0.3
> > [3]:
> > https://github.com/apache/arrow-rs/blob/f3959f59a6119dab23818e6eef87e0d7b58c820e/CHANGELOG.md
> > ---------------------------------------------------------
> > Running rat license checker on
> > /Users/alamb/Software/arrow-rs/dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz
> > OK
> > No unapproved licenses
> > Signing tarball and creating checksums
> > Uploading to apache dist/dev to
> > https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-0.0.3
> > Checked out revision 47764.
> > A dev/dist/apache-arrow-rs-0.0.3
> > A (bin)
> > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz
> > A
> > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha512
> > A
> > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.asc
> > A
> > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha256
> > Adding dev/dist/apache-arrow-rs-0.0.3
> > Adding (bin)
> > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz
> > Adding
> > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.asc
> > Adding
> > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha256
> > Adding
> > dev/dist/apache-arrow-rs-0.0.3/apache-arrow-rs-0.0.3-f3959f59a.tar.gz.sha512
> > Transmitting file data ....done
> > Committing transaction...
> > Committed revision 47765.
> >
> > ```
