On 16 August 2018 at 12:56, Jun Liu <liu...@apache.org> wrote: >> Better to get the key from the KEYS file. > > I think that would be: > 1. download and import the KEYS from > https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYS > <https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYS> > 2. gpg2 --verify dubbo-incubating-2.6.2-source-release.zip.asc > dubbo-incubating-2.6.2-source-release.zip > > Is that right?
Looks OK. I use a temporary file as the keyring to ensure that the key is actually present in the file, e.g. RING=/tmp/keyring.$$ gpg2 --keyring $RING --no-default-keyring --import KEYS gpg2 --keyring $RING --no-default-keyring --verify ... > What is the exact command to specify the key to use when have multiple keys > locally? I don't know if it's possible to specify the key to be used. But by starting with an empty keyring one can check that the right key is in the KEYS file. > Best regards, > Jun > >> On 15 Aug 2018, at 20:52, sebb <seb...@gmail.com> wrote: >> >> On 15 August 2018 at 03:56, Jun Liu <liu...@apache.org >> <mailto:liu...@apache.org>> wrote: >>> Here're some tips of how to verify the RC: >>> >>> 1. Check signatures and hashes are good >>> sha512 dubbo-incubating-${release_version}-bin-release.zip.sha512 >>> sha512 dubbo-incubating-${release_version}-source-release.zip.sha512 >>> gpg2 --keyserver pgpkeys.mit.edu <http://pgpkeys.mit.edu/> >>> --recv-key 208B0AB1D63011C7 >> >> Better to get the key from the KEYS file. >> >>> gpg2 --verify dubbo-incubating-2.6.2-source-release.zip.asc >>> dubbo-incubating-2.6.2-source-release.zip >>> >>> 2. Unzip dubbo-incubating-${release_version}-source-release.zip to the >>> default directory and check the following: >>> • Directory with 'incubating' in name >>> dubbo-incubating-${release_version}-bin-release >>> • DISCLAIMER exists >>> • LICENSE and NOTICE exists and contents are good >>> • All files and no binary files exist >>> • All files has standard ASF License header >>> • Can compile from source >>> • All unit tests can pass >>> mvn clean test # This will run all unit tests >>> mvn clean install -Drat.skip=false -Dcheckstyle.skip=false # >>> Open rat and style plugin to check if every file meets requirements. >>> • Release candidates match with corresponding tags, you can find tag >>> link and hash in vote email. >>> >>> 3. Unzip dubbo-incubating-${release_version}-bin-release.zip and check: >>> * 'incubating' in name >>> * LICENSE and NOTICE exists and contents are good >>> >>> Best regards, >>> Jun >>> >>>> On 12 Aug 2018, at 15:12, Jun Liu <liu...@apache.org> wrote: >>>> >>>> Hello All, >>>> >>>> This is a call for vote to release Apache Dubbo (Incubating) version 2.6.3. >>>> >>>> The Apache Dubbo community has voted on and approved a proposal to release >>>> Apache Dubbo (Incubating) version 2.6.3. >>>> >>>> We now kindly request the Incubator PMC members review and vote on this >>>> incubator release. >>>> >>>> Apache Dubbo™ (incubating) is a high-performance, java based, open source >>>> RPC framework. Dubbo offers three key functionalities, which include >>>> interface based remote call, fault tolerance & load balancing, and >>>> automatic service registration & discovery. >>>> >>>> Dubbo community vote thread: >>>> https://lists.apache.org/thread.html/9e692f525dfbd004e98707ecac33ab10d07741500433a24370e64c67@%3Cdev.dubbo.apache.org%3E >>>> >>>> Dubbo community vote result thread: >>>> https://lists.apache.org/thread.html/630d7ed97ca06a341a7c6626c34af52eab42515439f76e0810504533@%3Cdev.dubbo.apache.org%3E >>>> >>>> The release candidates: >>>> https://dist.apache.org/repos/dist/dev/incubator/dubbo/2.6.3 >>>> >>>> Git tag for the release: >>>> https://github.com/apache/incubator-dubbo/tree/dubbo-2.6.3 >>>> >>>> Hash for the release tag: >>>> 22899a4b395411496ebf03c514e7674e8073e0c3 >>>> >>>> Release Notes: >>>> https://github.com/apache/incubator-dubbo/blob/dubbo-2.6.3/CHANGES.md >>>> >>>> The artifacts have been signed with Key : 28681CB1, which can be found in >>>> the keys file: >>>> https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYS >>>> >>>> The vote will be open for at least 72 hours or until necessary number of >>>> votes are reached. >>>> >>>> Please vote accordingly: >>>> [ ] +1 approve >>>> [ ] +0 no opinion >>>> [ ] -1 disapprove with the reason >>>> >>>> Thanks. >>>> Jun Liu, >>>> The Apache Dubbo (Incubating) Team >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >>>> For additional commands, e-mail: general-h...@incubator.apache.org >>>> >>> >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >>> <mailto:general-unsubscr...@incubator.apache.org> >>> For additional commands, e-mail: general-h...@incubator.apache.org >>> <mailto:general-h...@incubator.apache.org> >>> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >> <mailto:general-unsubscr...@incubator.apache.org> >> For additional commands, e-mail: general-h...@incubator.apache.org >> <mailto:general-h...@incubator.apache.org> --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
