Hi, We'd appreciate some input on this to continue the release process. We can make a set of scripts to download the third-party source tarballs if that's needed.
Matei On Apr 10, 2012, at 8:34 AM, Matei Zaharia wrote: > Hi Sebb, > > The third party libraries we included were actually all source code, just > compressed in tar.gz files to save space. There were no JARs or binaries. Is > distributing their source code okay, or is it still better to get people to > download them elsewhere? > > Matei > > > On Apr 10, 2012, at 6:03 AM, sebb wrote: > >> On 8 April 2012 23:48, Benjamin Hindman <b...@berkeley.edu> wrote: >>> Hi Sebb, >>> >>> Thanks so much for taking a look! Responses inline. >>> >>> On Sun, Apr 8, 2012 at 2:22 PM, sebb <seb...@gmail.com> wrote: >>> >>>> On 7 April 2012 02:59, Benjamin Hindman <b...@berkeley.edu> wrote: >>>>> Please vote on releasing the following candidate as Apache Mesos >>>>> (incubating) version 0.9.0. This will be the first incubator release for >>>>> Mesos in Apache, but the fifth release candidate. >>>>> >>>>> Vote thread on mesos-...@incubator.apache.org: >>>>> >>>>> >>>> http://mail-archives.apache.org/mod_mbox/incubator-mesos-dev/201203.mbox/%3CCAFeOQnW7jk-VcTFpUP-_VonL99JCnggKeNPW%2BGx-Ozdy1U8sjg%40mail.gmail.com%3E >>>>> >>>>> The candidate for Mesos 0.9.0-incubating release is available at: >>>>> >>>>> >>>> http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz >>>>> >>>>> The tag to be voted on: >>>>> >>>>> >>>> https://svn.apache.org/repos/asf/incubator/mesos/tags/release-0.9.0-incubating-RC4 >>>> >>>> The NOTICE file is incomplete; the product name and copyright year(s) >>>> are missing. >>>> >>> >>> Thanks, I'll add that. >>> >>> >>>> The LICENSE file includes references to several 3rd party items. >>>> It looks like glog and utilities.cc and others may require mention in >>>> NOTICE. >>>> >>> >>> Is there a document somewhere which describes when something needs to go >>> into NOTICE in addition to LICENSE? I had read previously read the section >>> titled "What Are Required Third-Party Notices?" from >>> http://apache.org/legal/resolved.html#required-third-party-notices but I >>> still was unclear whether or not anything needed to be done. >> >> AFAIK, it depends on what the license says. >> >>> >>>> There's no DISCLAIMER file in SVN root. >>>> >>> >>> Right, I'll add that. >>> >>> >>>> There are several 3rd party libraries in SVN under >>>> >>>> >>>> https://svn.apache.org/repos/asf/incubator/mesos/tags/release-0.9.0-incubating-RC4/third_party/ >>> >>> >>> This was deliberate, so as to make it easier to use for both developers >>> (who check out the repository) and users (who download a distribution). Is >>> there a policy against this? I saw this as analogous to distributing JARs. >>> >> >> AIUI, there must be a source-only release. >> This should have N&L files that relate to the source only. >> >> A binary release may also be provided, in which case its N&L files >> need to correspond with what is in the binary release. >> >> For building from source, the dependencies need to be provided somehow. >> Various options are possible: >> - written instructions how to get the dependencies and where to put them >> - separate script to download the dependencies >> - build process automatically downloads the dependencies. >> >> Depending on the licenses of 3rd party jars you may need to provide a >> combination of methods. >> There are some types of dependencies that can only be included if the >> user makes a deliberate choice of downloading them, see the cited doc. >> >> If all the dependencies are binary-distributable, it's probably also >> OK to provide an archive containing just the dependencies. >> This must have the relevant N&L files. >> >>> >>> Is the correct next step to cancel this vote, >> >> IMO, yes. >> >>> create a RC5, and start a new vote thread for that? >> >> Once the issues have been resolved, yes. >> >>> Or modify RC4? >> >> No, RCs should be immutable. Otherwise how can one tell what one is voting >> on? >> >>> Thank you very much! >>> >>> Ben. >>> >>> >>> >>>>> The MD5 checksum of the tarball can be found at: >>>>> >>>>> >>>> http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz.md5 >>>>> >>>>> The signature of the tarball can be found at: >>>>> >>>>> >>>> http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz.asc >>>>> >>>>> Mesos' KEYS file, containing the PGP keys used to sign the release: >>>>> http://svn.apache.org/repos/asf/incubator/mesos/dist/KEYS >>>>> >>>>> Please vote on releasing this package as Apache Mesos 0.9.0-incubating! >>>>> >>>>> The vote is open until Tuesday, April 10th at 8 pm (a bit more than 72 >>>>> hours since it's over the weekend) and passes if a majority of at least 3 >>>>> +1 IPMC votes are cast. >>>>> >>>>> [ ] +1 Release this package as Apache Mesos 0.9.0-incubating >>>>> [ ] -1 Do not release this package because ... >>>>> >>>>> To learn more about Apache Mesos, please see >>>>> http://incubator.apache.org/mesos. >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >>>> For additional commands, e-mail: general-h...@incubator.apache.org >>>> >>>> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >> For additional commands, e-mail: general-h...@incubator.apache.org >> > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
