To make this easier for everyone else, here are the commands you need to run to verify the release tarball:
curl https://dist.apache.org/repos/dist/dev/iceberg/KEYS -o KEYS gpg --import KEYS gpg --verify apache-iceberg-0.12.0.tar.gz.asc apache-iceberg-0.12.0.tar.gz And here's what I see when I run the verify command: gpg --verify apache-iceberg-0.12.0.tar.gz.asc apache-iceberg-0.12.0.tar.gz gpg: Signature made Tue Aug 3 17:16:32 2021 PDT gpg: using RSA key 160F51BE45616B94103ED24D5A5C7F6EB9542945 gpg: Good signature from "Carl W. Steinbach (CODE SIGNING KEY) < c...@apache.org>" [ultimate] - Carl On Wed, Aug 4, 2021 at 11:53 AM Ryan Blue <b...@tabular.io> wrote: > Ryan, did you re-import the KEYS file? Carl's code signing key is in the > linked KEYS file. > > On Wed, Aug 4, 2021 at 11:12 AM Ryan Murray <rym...@gmail.com> wrote: > >> Hi all, >> >> Unfortunately I have to give -1 >> >> I had trouble w/ the keys: >> >> gpg: assuming signed data in 'apache-iceberg-0.12.0.tar.gz' >> gpg: Signature made Mon 02 Aug 2021 03:36:30 CEST >> gpg: using RSA key FAFEB6EAA60C95E2BB5E26F01FF0803CB78D539F >> gpg: Can't check signature: No public key >> >> And I have discovered a bug in NessieCatalog. It is unclear what is wrong >> but the NessieCatalog doesn't play nice w/ Spark3.1. I will raise a patch >> ASAP to fix it. Very sorry for the inconvenience. >> >> Best, >> Ryan >> >> On Wed, Aug 4, 2021 at 3:20 AM Carl Steinbach <c...@apache.org> wrote: >> >>> Hi everyone, >>> >>> I propose that we release RC2 as the official Apache Iceberg 0.12.0 >>> release. Please note that RC0 and RC1 were DOA. >>> >>> The commit id for RC2 is 7c2fcfd893ab71bee41242b46e894e6187340070 >>> * This corresponds to the tag: apache-iceberg-0.12.0-rc2 >>> * https://github.com/apache/iceberg/commits/apache-iceberg-0.12.0-rc2 >>> * >>> https://github.com/apache/iceberg/tree/7c2fcfd893ab71bee41242b46e894e6187340070 >>> >>> The release tarball, signature, and checksums are here: >>> * >>> https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-0.12.0-rc2/ >>> >>> You can find the KEYS file here: >>> * https://dist.apache.org/repos/dist/dev/iceberg/KEYS >>> >>> Convenience binary artifacts are staged in Nexus. The Maven repository >>> URL is: >>> * >>> https://repository.apache.org/content/repositories/orgapacheiceberg-1017/ >>> >>> Please download, verify, and test. >>> >>> Please vote in the next 72 hours. >>> >>> [ ] +1 Release this as Apache Iceberg 0.12.0 >>> [ ] +0 >>> [ ] -1 Do not release this because... >>> >> > > -- > Ryan Blue > Tabular >
