FYI One of the verification commands has a typo (extra 'o') It should be
diff <(shasum -a512 apache-druid-25.0.0-hadoop3-bin.tar.gz | \ cut -d ' ' -f1) \ <(cat apache-druid-25.0.0-hadoop3-bin.tar.gz.sha512 ; echo) Just posting for anyone else who might be confused as I was. On 2022/12/20 07:12:08 Kashif Faraz wrote: > Hi > > I have created a build for Apache Druid 25.0.0, release candidate 1. > > Thanks to everyone who has helped contribute to the release! You can read > the proposed release notes here: > https://github.com/apache/druid/issues/13592 > > The release candidate has been tagged in GitHub as druid-25.0.0-rc1 > (644f70681dfbe44aab8f85473936c5a58e8dfac9), > available here: > https://github.com/apache/druid/releases/tag/druid-25.0.0-rc1 > > The artifacts to be voted on are located here: > https://dist.apache.org/repos/dist/dev/druid/25.0.0-rc1/ > > A staged Maven repository is available for review at: > https://repository.apache.org/content/repositories/orgapachedruid-1038/ > > A Docker image containing the binary of the release candidate can be > retrieved via: > docker pull apache/druid:25.0.0-rc1 > > Artifact checksums: > src: > 9a25ac68bf2cc6a4352b06306711b557e3def31387310d398392f17675259a27e3186158611782d8eaaf0a88e64c83e775fe7bb590f29a99e59c6f9e5b4a57c2 > bin: > 345933d64a8b7d818f2e16914af0d2f3d2b8b8de08784382b054e4f5fdaa0fff2d28bda44737b57282adc9f5bbf404880bfec7292aba97f31ff1cb8181ca7b4d > hadoop3-bin: > 94c5aaae22a24e423cfb0f7a9df5559b1b7dd3553b70c34c24b44b420c50734a8f88843cc16e3fa67e9550d96d15674f8a5d59eb4860ed2f377d88880a46c0a6 > docker: > b0feade0a47f2a2dc3687e410293bf8e3309fd9e8a3de10b101e2384902e76c2 > > Release artifacts are signed with the following key: > https://people.apache.org/keys/committer/kfaraz.asc > > This key and the key of other committers can also be found in the project's > KEYS file here: > https://dist.apache.org/repos/dist/release/druid/KEYS > > (If you are a committer, please feel free to add your own key to that file > by following the instructions in the file's header.) > > Verify checksums: > diff <(shasum -a512 apache-druid-25.0.0-src.tar.gz | \ > cut -d ' ' -f1) \ > <(cat apache-druid-25.0.0-src.tar.gz.sha512 ; echo) > diff <(shasum -a512 apache-druid-25.0.0-bin.tar.gz | \ > cut -d ' ' -f1) \ > <(cat apache-druid-25.0.0-bin.tar.gz.sha512 ; echo) > diff <(shasum -a512 apache-druid-25.0.0-hadooop3-bin.tar.gz | \ > cut -d ' ' -f1) \ > <(cat apache-druid-25.0.0-hadoop3-bin.tar.gz.sha512 ; echo) > > Verify signatures: > gpg --verify apache-druid-25.0.0-src.tar.gz.asc \ > apache-druid-25.0.0-src.tar.gz > gpg --verify apache-druid-25.0.0-bin.tar.gz.asc \ > apache-druid-25.0.0-bin.tar.gz > gpg --verify apache-druid-25.0.0-hadoop3-bin.tar.gz.asc \ > apache-druid-25.0.0-hadoop3-bin.tar.gz > > Please review the proposed artifacts and vote. Note that Apache has > specific requirements that must be met before +1 binding votes can be cast > by PMC members. Please refer to the policy at > http://www.apache.org/legal/release-policy.html#policy for more details. > > As part of the validation process, the release artifacts can be generated > from source by running: > mvn clean install -Papache-release,dist -Dgpg.skip > > The hadoop-3 based artifacts can be generated by running: > mvn clean install -Phadoop3,apache-release,dist -Dgpg.skip > > The RAT license check can be run from source by: > mvn apache-rat:check -Prat > > This vote will be open for at least 72 hours. The vote will pass if a > majority of at least three +1 PMC votes are cast. > > [ ] +1 Release this package as Apache Druid 25.0.0 > [ ] 0 I don't feel strongly about it, but I'm okay with the release > [ ] -1 Do not release this package because... > > Thanks > Kashif Faraz > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@druid.apache.org For additional commands, e-mail: dev-h...@druid.apache.org
