On Fri, May 6, 2011 at 10:03 AM, sebb <seb...@gmail.com> wrote: > On 6 May 2011 14:41, Gary Gregory <garydgreg...@gmail.com> wrote: > > On Fri, May 6, 2011 at 5:06 AM, sebb <seb...@gmail.com> wrote: > > > >> On 6 May 2011 09:28, sebb <seb...@gmail.com> wrote: > >> > On 6 May 2011 03:06, Gary Gregory <garydgreg...@gmail.com> wrote: > >> >> On Thu, May 5, 2011 at 4:19 PM, Gary Gregory <garydgreg...@gmail.com > > > >> wrote: > >> >> > >> >>> On Thu, May 5, 2011 at 3:40 PM, sebb <seb...@gmail.com> wrote: > >> >>> > >> >>>> On 5 May 2011 20:21, Gary Gregory <garydgreg...@gmail.com> wrote: > >> >>>> > On Thu, May 5, 2011 at 3:04 PM, sebb <seb...@gmail.com> wrote: > >> >>>> > > >> >>>> >> On 5 May 2011 19:39, Gary Gregory <garydgreg...@gmail.com> > wrote: > >> >>>> >> > On Wed, May 4, 2011 at 7:42 PM, sebb <seb...@gmail.com> > wrote: > >> >>>> >> > > >> >>>> >> >> On 4 May 2011 16:28, Gary Gregory <garydgreg...@gmail.com> > >> wrote: > >> >>>> >> >> > On Wed, May 4, 2011 at 6:46 AM, sebb <seb...@gmail.com> > >> wrote: > >> >>>> >> >> > > >> >>>> >> >> >> On 4 May 2011 06:01, Gary Gregory <garydgreg...@gmail.com > > > >> >>>> wrote: > >> >>>> >> >> >> > On Tue, May 3, 2011 at 11:36 PM, sebb <seb...@gmail.com > > > >> >>>> wrote: > >> >>>> >> >> >> > > >> >>>> >> >> >> >> On 4 May 2011 03:42, Gary Gregory < > garydgreg...@gmail.com > >> > > >> >>>> wrote: > >> >>>> >> >> >> >> > Now that I've can see my monitor clearly (no more > >> fever!), I > >> >>>> >> >> >> understand > >> >>>> >> >> >> >> why > >> >>>> >> >> >> >> > this did not work. > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > Running a standard test build for [lang] as > documented > >> on > >> >>>> the > >> >>>> >> Wiki > >> >>>> >> >> >> using: > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > mvn clean deploy -Prelease -Ptest-deploy > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > does not produce a test jar. It does so for [codec] > >> because > >> >>>> this > >> >>>> >> is > >> >>>> >> >> in > >> >>>> >> >> >> >> the > >> >>>> >> >> >> >> > POM: > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > <plugin> > >> >>>> >> >> >> >> > <groupId>org.apache.maven.plugins</groupId> > >> >>>> >> >> >> >> > <artifactId>maven-jar-plugin</artifactId> > >> >>>> >> >> >> >> > <executions> > >> >>>> >> >> >> >> > <execution> > >> >>>> >> >> >> >> > <goals> > >> >>>> >> >> >> >> > <goal>test-jar</goal> > >> >>>> >> >> >> >> > </goals> > >> >>>> >> >> >> >> > </execution> > >> >>>> >> >> >> >> > </executions> > >> >>>> >> >> >> >> > </plugin> > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > But in common-parent, the crucial executions element > is > >> only > >> >>>> in > >> >>>> >> the > >> >>>> >> >> >> >> > "apache-release" profile. > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > This was what we agreed upon a couple of weeks ago > but > >> it I > >> >>>> did > >> >>>> >> not > >> >>>> >> >> >> >> > understand the Maven magic enough to see what that > >> meant. > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > My goal is to generate the test jar for all commons > >> >>>> releases, > >> >>>> >> which > >> >>>> >> >> >> will > >> >>>> >> >> >> >> not > >> >>>> >> >> >> >> > happen since no one uses this "apache-release" > profile. > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > My questions then are: > >> >>>> >> >> >> >> > > >> >>>> >> >> >> >> > (1) Are there objections to include the Maven magic > in > >> the > >> >>>> right > >> >>>> >> >> place > >> >>>> >> >> >> to > >> >>>> >> >> >> >> > generate a test jar? > >> >>>> >> >> >> >> > (2) What is the point of the apache-release profile? > >> >>>> >> >> >> >> > >> >>>> >> >> >> >> > >> http://maven.apache.org/asf-pom/#The_apache-release_Profile > >> >>>> >> >> >> >> > >> >>>> >> >> >> >> This was introduced in version 6 (according to the POM > >> >>>> comments); > >> >>>> >> >> >> >> commons parent 13 was the first to include Apache POM > 6+ > >> (in > >> >>>> fact > >> >>>> >> 7). > >> >>>> >> >> >> >> > >> >>>> >> >> >> >> Commons Parent has included a "release" profile since > >> version > >> >>>> 1. > >> >>>> >> >> >> >> > >> >>>> >> >> >> >> AIUI this is has much the same purpose as the > >> "apache-release" > >> >>>> >> >> profile > >> >>>> >> >> >> >> so at some point we could switch to using that. > >> >>>> >> >> >> >> > >> >>>> >> >> >> > > >> >>>> >> >> >> > When I run: > >> >>>> >> >> >> > > >> >>>> >> >> >> > mvn clean deploy -Papache-release -Ptest-deploy > >> >>>> >> >> >> > > >> >>>> >> >> >> > the build hangs in maven-gpg-plugin > >> >>>> >> >> >> > > >> >>>> >> >> >> > ugh... > >> >>>> >> >> >> > > >> >>>> >> >> >> > My set up: > >> >>>> >> >> >> > > >> >>>> >> >> >> > Apache Maven 3.0.3 (r1075438; 2011-02-28 12:31:09-0500) > >> >>>> >> >> >> > Maven home: C:\Java\apache-maven-3.0.3\bin\.. > >> >>>> >> >> >> > Java version: 1.6.0_24, vendor: Sun Microsystems Inc. > >> >>>> >> >> >> > Java home: C:\Program Files\Java\jdk1.6.0_24\jre > >> >>>> >> >> >> > Default locale: en_US, platform encoding: Cp1252 > >> >>>> >> >> >> > OS name: "windows 7", version: "6.1", arch: "amd64", > >> family: > >> >>>> >> "windows" > >> >>>> >> >> >> > >> >>>> >> >> >> What gpg version do you use? > >> >>>> >> >> >> > >> >>>> >> >> > > >> >>>> >> >> >>gpg --version > >> >>>> >> >> > gpg (GnuPG) 1.4.11 > >> >>>> >> >> > Copyright (C) 2010 Free Software Foundation, Inc. > >> >>>> >> >> > License GPLv3+: GNU GPL version 3 or later < > >> >>>> >> >> http://gnu.org/licenses/gpl.html > >> >>>> >> >> >> > >> >>>> >> >> > This is free software: you are free to change and > redistribute > >> it. > >> >>>> >> >> > There is NO WARRANTY, to the extent permitted by law. > >> >>>> >> >> > > >> >>>> >> >> > Home: C:/Users/ggregory/AppData/Roaming/gnupg > >> >>>> >> >> > Supported algorithms: > >> >>>> >> >> > Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA > >> >>>> >> >> > Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, > TWOFISH, > >> >>>> >> CAMELLIA128, > >> >>>> >> >> > CAMELLIA192, CAMELLIA256 > >> >>>> >> >> > Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 > >> >>>> >> >> > Compression: Uncompressed, ZIP, ZLIB, BZIP2 > >> >>>> >> >> > > >> >>>> >> >> > > >> >>>> >> >> >> > >> >>>> >> >> >> Does "nmvn package gpg:sig" work? > >> >>>> >> >> >> > >> >>>> >> >> > > >> >>>> >> >> > Nope: > >> >>>> >> >> > >> >>>> >> >> I thought I wrote: > >> >>>> >> >> > >> >>>> >> >> >> Does "mvn package gpg:sign" work? > >> >>>> >> >> > >> >>>> >> > > >> >>>> >> > You did, and now it works. Go figure. > >> >>>> >> > > >> >>>> >> > When I try "mvn deploy -Papache-release -Ptest-deploy", it > hangs > >> >>>> here: > >> >>>> >> > > >> >>>> >> > [INFO] --- maven-gpg-plugin:1.2:sign (default) @ commons-lang3 > >> ---" > >> >>>> >> > >> >>>> >> Are you using M2 or M3? > >> >>>> >> > >> >>>> > > >> >>>> > Apache Maven 3.0.3 (r1075438; 2011-02-28 12:31:09-0500) > >> >>>> > Maven home: C:\Java\apache-maven-3.0.3\bin\.. > >> >>>> > Java version: 1.6.0_24, vendor: Sun Microsystems Inc. > >> >>>> > Java home: C:\Program Files\Java\jdk1.6.0_24\jre > >> >>>> > Default locale: en_US, platform encoding: Cp1252 > >> >>>> > OS name: "windows 7", version: "6.1", arch: "amd64", family: > >> "windows" > >> >>>> > > >> >>>> > > >> >>>> >> > >> >>>> >> Try adding -X to generate debug output. > >> >>>> >> > >> >>>> >> Try "mvn package deploy -Papache-release -Ptest-deploy" also. > >> >>>> >> > >> >>>> > > >> >>>> > It hangs, adding -X, I get: > >> >>>> > > >> >>>> > [INFO] --- maven-gpg-plugin:1.2:sign (default) @ commons-lang3 > --- > >> >>>> > [DEBUG] org.apache.maven.plugins:maven-gpg-plugin:jar:1.2: > >> >>>> > [DEBUG] org.apache.maven:maven-plugin-api:jar:2.0.6:compile > >> >>>> > [DEBUG] org.apache.maven:maven-project:jar:2.0.6:compile > >> >>>> > [DEBUG] org.apache.maven:maven-settings:jar:2.0.6:compile > >> >>>> > [DEBUG] org.apache.maven:maven-profile:jar:2.0.6:compile > >> >>>> > [DEBUG] > >> org.apache.maven:maven-artifact-manager:jar:2.0.6:compile > >> >>>> > [DEBUG] > >> >>>> > org.apache.maven:maven-repository-metadata:jar:2.0.6:compile > >> >>>> > [DEBUG] > >> org.apache.maven:maven-plugin-registry:jar:2.0.6:compile > >> >>>> > [DEBUG] org.apache.maven:maven-artifact:jar:2.0.6:compile > >> >>>> > [DEBUG] org.apache.maven:maven-model:jar:2.0.6:compile > >> >>>> > [DEBUG] org.codehaus.plexus:plexus-utils:jar:2.0.5:compile > >> >>>> > [DEBUG] Created new class realm > >> >>>> > plugin>org.apache.maven.plugins:maven-gpg-plugin:1.2 > >> >>>> > [DEBUG] Importing foreign packages into class realm > >> >>>> > plugin>org.apache.maven.plugins:maven-gpg-plugin:1.2 > >> >>>> > [DEBUG] Imported: < maven.api > >> >>>> > [DEBUG] Populating class realm > >> >>>> > plugin>org.apache.maven.plugins:maven-gpg-plugin:1.2 > >> >>>> > [DEBUG] Included: > >> org.apache.maven.plugins:maven-gpg-plugin:jar:1.2 > >> >>>> > [DEBUG] Included: org.codehaus.plexus:plexus-utils:jar:2.0.5 > >> >>>> > [DEBUG] Excluded: org.apache.maven:maven-plugin-api:jar:2.0.6 > >> >>>> > [DEBUG] Excluded: org.apache.maven:maven-project:jar:2.0.6 > >> >>>> > [DEBUG] Excluded: org.apache.maven:maven-settings:jar:2.0.6 > >> >>>> > [DEBUG] Excluded: org.apache.maven:maven-profile:jar:2.0.6 > >> >>>> > [DEBUG] Excluded: > >> org.apache.maven:maven-artifact-manager:jar:2.0.6 > >> >>>> > [DEBUG] Excluded: > >> org.apache.maven:maven-repository-metadata:jar:2.0.6 > >> >>>> > [DEBUG] Excluded: > org.apache.maven:maven-plugin-registry:jar:2.0.6 > >> >>>> > [DEBUG] Excluded: org.apache.maven:maven-artifact:jar:2.0.6 > >> >>>> > [DEBUG] Excluded: org.apache.maven:maven-model:jar:2.0.6 > >> >>>> > [DEBUG] Configuring mojo > >> >>>> org.apache.maven.plugins:maven-gpg-plugin:1.2:sign > >> >>>> > from plugin realm > >> >>>> > ClassRealm[plugin>org.apache.maven.plugins:maven-gpg-plugin:1.2, > p > >> >>>> > arent: sun.misc.Launcher$AppClassLoader@77cde100] > >> >>>> > [DEBUG] Configuring mojo > >> >>>> > 'org.apache.maven.plugins:maven-gpg-plugin:1.2:sign' with basic > >> >>>> configurator > >> >>>> > --> > >> >>>> > [DEBUG] (f) ascDirectory = > >> >>>> > C:\svn\org\apache\commons\trunks-proper\lang\target\gpg > >> >>>> > [DEBUG] (f) defaultKeyring = true > >> >>>> > [DEBUG] (f) interactive = true > >> >>>> > [DEBUG] (f) project = MavenProject: > >> >>>> org.apache.commons:commons-lang3:3.0 @ > >> >>>> > C:\svn\org\apache\commons\trunks-proper\lang\pom.xml > >> >>>> > [DEBUG] (f) skip = false > >> >>>> > [DEBUG] (f) useAgent = true > >> >>>> > [DEBUG] -- end configuration -- > >> >>>> > [DEBUG] Generating signature for > >> >>>> > > >> >>>> > >> > C:\svn\org\apache\commons\trunks-proper\lang\target\commons-lang3-3.0.jar > >> >>>> > >> >>>> Perhaps try comparing that with the gpg:sign output. > >> >>>> > >> >>> > >> >>> I'll have to dig into that later... > >> >>> > >> >> > >> >> If I say: "mvn package gpg:sign" it works. > >> >> If I say: "mvn package gpg:sign -Papache-release" it hangs. > >> > > >> > What about "mvn package gpg:sign -Prelease" ? > >> > > >> > Does it also hang if you try the same on NET (trunk) say? > >> > > >> > It's not yet clear whether this is an apache-release issue or an issue > >> > with your gpg installation. > >> > >> Just realised it's probably due to: > >> > >> https://issues.apache.org/jira/browse/MPOM-9 > >> > >> Since you are using GPG 1, the use agent setting does not apply, and > >> causes the code not to prompt. > >> > > > > I installed Gpg4win 2.1.0 which comes with gpg (GnuPG) 2.0.17: > > > >>gpg2 --version > > gpg (GnuPG) 2.0.17 (Gpg4win 2.1.0) > > libgcrypt 1.4.6 > > Copyright (C) 2011 Free Software Foundation, Inc. > > License GPLv3+: GNU GPL version 3 or later < > http://gnu.org/licenses/gpl.html > >> > > This is free software: you are free to change and redistribute it. > > There is NO WARRANTY, to the extent permitted by law. > > > > Home: C:/Users/ggregory/AppData/Roaming/gnupg > > Supported algorithms: > > Pubkey: RSA, ELG, DSA > > Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128, > > CAMELLIA192, CAMELLIA256 > > Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 > > Compression: Uncompressed, ZIP, ZLIB, BZIP2 > > > > But that did not give me different results. It looks like the installer > > installed gpg2 over gpg sp I have gpg2.exe in the same directory as > gpg.exe. > > > Maven defaults to gpg.exe - what does > > gpg --version > > show? >
>gpg --version gpg (GnuPG) 1.4.11 Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Home: C:/Users/ggregory/AppData/Roaming/gnupg Supported algorithms: Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128, CAMELLIA192, CAMELLIA256 Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 Compression: Uncompressed, ZIP, ZLIB, BZIP2 >gpg2 --version gpg (GnuPG) 2.0.17 (Gpg4win 2.1.0) libgcrypt 1.4.6 Copyright (C) 2011 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Home: C:/Users/ggregory/AppData/Roaming/gnupg Supported algorithms: Pubkey: RSA, ELG, DSA Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128, CAMELLIA192, CAMELLIA256 Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 Compression: Uncompressed, ZIP, ZLIB, BZIP2 Gary > You can override the gpg version (and password - not recommended > except for test keys) in settings.xml: > > For example: > > <profile> > <id>keyTest</id> > <properties> > <gpg.keyname>Deploy Test User</gpg.keyname> > <gpg.passphrase>Deploy Test User</gpg.passphrase> > <gpg.useagent>false</gpg.useagent> > <gpg.executable>gpg1</gpg.executable> > </properties> > </profile> > > For settings that always apply to your installation, use a profile > that is marked active. > > > > >> Try specifying the passphrase on the command-line: > >> > >> mvn package gpg:sign -Papache-release -Dgpg.passphrase=xxxx > >> > > > > That works. > > > > Thank you, > > Gary > > > >> > >> >> > >> >> At this point, I'd rather change the "release" profile in > commons-parent > >> to > >> >> generate the test-jar instead of fiddling with this profile no uses > in > >> >> commons for releases. > >> >> > >> >> Gary > >> >> > >> >> > >> >>> > >> >>> > >> >>>> > >> >>>> Can you try with M2? > >> >>>> > >> >>> > >> >>> Same problem with M2: > >> >>> > >> >>> main: > >> >>> [INFO] Executed tasks > >> >>> [INFO] [source:test-jar {execution: attach-test-sources}] > >> >>> [INFO] [javadoc:jar {execution: attach-javadocs}] > >> >>> [INFO] Building jar: > >> >>> > >> > C:\svn\org\apache\commons\trunks-proper\lang\target\commons-lang3-3.0-javadoc.jar > >> >>> [INFO] [jar:test-jar {execution: default}] > >> >>> [INFO] [gpg:sign {execution: default}] > >> >>> > >> >>> My M2 --version: > >> >>> > >> >>> Apache Maven 2.2.1 (r801777; 2009-08-06 15:16:01-0400) > >> >>> > >> >>> Java version: 1.6.0_24 > >> >>> Java home: C:\Program Files\Java\jdk1.6.0_24\jre > >> >>> Default locale: en_US, platform encoding: Cp1252 > >> >>> OS name: "windows 7" version: "6.1" arch: "amd64" Family: "windows" > >> >>> > >> >>> Uhg, > >> >>> Gary > >> >>> > >> >>>> > >> >>>> > Gary > >> >>>> > > >> >>>> >> > >> >>>> >> > > >> >>>> >> > Gary > >> >>>> >> > > >> >>>> >> > > >> >>>> >> >> > [ERROR] Could not find goal 'sig' in plugin > >> >>>> >> >> > org.apache.maven.plugins:maven-gpg-plugin:1.2 among > available > >> >>>> goals > >> >>>> >> >> > sign-and-deploy-file, sign, help -> [Help 1] > >> >>>> >> >> > > >> >>>> >> >> > >> >>>> >> >> > >> >>>> > --------------------------------------------------------------------- > >> >>>> >> >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > >> >>>> >> >> For additional commands, e-mail: dev-h...@commons.apache.org > >> >>>> >> >> > >> >>>> >> >> > >> >>>> >> > > >> >>>> >> > > >> >>>> >> > -- > >> >>>> >> > Thank you, > >> >>>> >> > Gary > >> >>>> >> > > >> >>>> >> > http://garygregory.wordpress.com/ > >> >>>> >> > http://garygregory.com/ > >> >>>> >> > http://people.apache.org/~ggregory/ > >> >>>> >> > http://twitter.com/GaryGregory > >> >>>> >> > > >> >>>> >> > >> >>>> >> > >> --------------------------------------------------------------------- > >> >>>> >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > >> >>>> >> For additional commands, e-mail: dev-h...@commons.apache.org > >> >>>> >> > >> >>>> >> > >> >>>> > > >> >>>> > > >> >>>> > -- > >> >>>> > Thank you, > >> >>>> > Gary > >> >>>> > > >> >>>> > http://garygregory.wordpress.com/ > >> >>>> > http://garygregory.com/ > >> >>>> > http://people.apache.org/~ggregory/ > >> >>>> > http://twitter.com/GaryGregory > >> >>>> > > >> >>>> > >> >>>> > --------------------------------------------------------------------- > >> >>>> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > >> >>>> For additional commands, e-mail: dev-h...@commons.apache.org > >> >>>> > >> >>>> > >> >>> > >> >>> > >> >>> -- > >> >>> Thank you, > >> >>> Gary > >> >>> > >> >>> http://garygregory.wordpress.com/ > >> >>> http://garygregory.com/ > >> >>> http://people.apache.org/~ggregory/ > >> >>> http://twitter.com/GaryGregory > >> >>> > >> >> > >> >> > >> >> > >> >> -- > >> >> Thank you, > >> >> Gary > >> >> > >> >> http://garygregory.wordpress.com/ > >> >> http://garygregory.com/ > >> >> http://people.apache.org/~ggregory/ > >> >> http://twitter.com/GaryGregory > >> >> > >> > > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > >> For additional commands, e-mail: dev-h...@commons.apache.org > >> > >> > > > > > > -- > > Thank you, > > Gary > > > > http://garygregory.wordpress.com/ > > http://garygregory.com/ > > http://people.apache.org/~ggregory/ > > http://twitter.com/GaryGregory > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > > -- Thank you, Gary http://garygregory.wordpress.com/ http://garygregory.com/ http://people.apache.org/~ggregory/ http://twitter.com/GaryGregory