Hi Todd,

If the release managers log in to id.apache.org and put their
keys in their profile the kudu.asc will get generated automatically.

I grabbed the KEYS file and was able to verify the release, so +1
from me! 

Cheers,
Chris

LMC-053601:apache-kudu-0.9.1-RC1 mattmann$ curl -O 
https://dist.apache.org/repos/dist/release/incubator/kudu/KEYS
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 29484  100 29484    0     0  29514      0 --:--:-- --:--:-- --:--:-- 29513
LMC-053601:apache-kudu-0.9.1-RC1 mattmann$ gpg --import < KEYS
gpg: key 5EAF4B88: "Jean-Daniel Cryans (ASF key) <jdcry...@apache.org>" not 
changed
gpg: key AEC77EAF: duplicated user ID detected - merged
gpg: key AEC77EAF: public key "Todd Lipcon <t...@lipcon.org>" imported
gpg: Total number processed: 2
gpg:               imported: 1
gpg:              unchanged: 1
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
LMC-053601:apache-kudu-0.9.1-RC1 mattmann$ $HOME/verify_gpg_sigs
-bash: /Users/mattmann/verify_gpg_sigs: No such file or directory
LMC-053601:apache-kudu-0.9.1-RC1 mattmann$ $HOME/bin/verify_gpg_sigs
Verifying Signature for file apache-kudu-incubating-0.9.1.tar.gz.asc
gpg: assuming signed data in `apache-kudu-incubating-0.9.1.tar.gz'
gpg: Signature made Thu Jun 23 13:55:04 2016 PDT using DSA key ID AEC77EAF
gpg: Good signature from "Todd Lipcon <t...@lipcon.org>"
gpg:                 aka "Todd Lipcon <tlip...@toad.mercea.net>"
gpg:                 aka "Todd Lipcon <tlip...@mercea.net>"
gpg:                 aka "Todd Lipcon <t...@goldbarter.com>"
gpg:                 aka "Todd Lipcon <t...@cs.brown.edu>"
gpg:                 aka "Todd Lipcon <t...@cloudera.com>"
gpg:                 aka "Todd Lipcon <tlip...@gmail.com>"
gpg:                 aka "Todd Lipcon <t...@apache.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 1B5D 384B 734F 3680 5286  2EB5 5E43 CAB9 AEC7 7EAF
LMC-053601:apache-kudu-0.9.1-RC1 mattmann$ $HOME/bin/verify_md5_checksums
md5sum: stat '*.bz2': No such file or directory
md5sum: stat '*.zip': No such file or directory
md5sum: stat '*.tgz': No such file or directory
apache-kudu-incubating-0.9.1.tar.gz: OK
LMC-053601:apache-kudu-0.9.1-RC1 mattmann$ 




++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Chris Mattmann, Ph.D.
Chief Architect
Instrument Software and Science Data Systems Section (398)
NASA Jet Propulsion Laboratory Pasadena, CA 91109 USA
Office: 168-519, Mailstop: 168-527
Email: chris.a.mattm...@nasa.gov
WWW:  http://sunset.usc.edu/~mattmann/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Director, Information Retrieval and Data Science Group (IRDS)
Adjunct Associate Professor, Computer Science Department
University of Southern California, Los Angeles, CA 90089 USA
WWW: http://irds.usc.edu/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++









On 6/28/16, 11:22 AM, "Todd Lipcon" <t...@apache.org> wrote:

>On Tue, Jun 28, 2016 at 9:36 AM, Mattmann, Chris A (3980) <
>chris.a.mattm...@jpl.nasa.gov> wrote:
>
>> Hi All,
>>
>> minor nit first:
>>
>> there are no KEYS present in:
>>  <https://people.apache.org/keys/group/kudu.asc>
>>
>>
>> And, the Git WP repo doesn’t have a KEYS file.
>>
>> Can someone point me to the KEYS file?
>>
>>
>It's here:
>
>https://dist.apache.org/repos/dist/release/incubator/kudu/KEYS
>
>(how do we update the keys/group/kudu.asc file? In the TLPs I've been a
>part of, I only seem to recall the KEYS file in the dist/ dir)
>
>-Todd

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Reply via email to