[DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

classic Classic list List threaded Threaded
82 messages Options
12345
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
Alex,

What do you mean by "staging" repository ? Let's wait for opinion from other PMC. I will try to go over signing instruction from Josh.

Let's make this release finally happen!

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

Alex Harui-2
If you look up past BlazeDS releases, which are Maven driven, I'm pretty
sure the artifacts are put in a staging repository for examination.
Somehow, testers will pull the artifacts from this place instead of the
final home on Maven Central.

At least, that's how I understood it, but I could certainly be wrong.

-Alex

On 6/16/17, 2:52 PM, "piotrz" <[hidden email]> wrote:

>Alex,
>
>What do you mean by "staging" repository ? Let's wait for opinion from
>other
>PMC. I will try to go over signing instruction from Josh.
>
>Let's make this release finally happen!
>
>Piotr
>
>
>
>-----
>Apache Flex PMC
>[hidden email]
>--
>View this message in context:
>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fle
>x-development.2333347.n4.nabble.com%2FDISCUSS-Discuss-Release-Apache-FlexJ
>S-0-8-0-RC1-tp62274p62434.html&data=02%7C01%7C%7Cd16e648ca71941af8b7708d4b
>5044518%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636332477340747670&sd
>ata=PfAoVjSWQ0XWtXvHvg6ePcgUG6Hb7F6yqKRSQ7xHCFg%3D&reserved=0
>Sent from the Apache Flex Development mailing list archive at Nabble.com.

Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
In reply to this post by Josh Tynjala
Hi,

I'm going through instruction of keys generation and last thing which I need to do is publish myfile.asc to home.apache.org. In order to have something like that [1]. I have instruction [2], but do not understand how can I connect and upload to public_home this as file - Any idea ?

[1] http://home.apache.org/~rdonkin/A6EE6908.asc
[2] https://www.apache.org/dev/openpgp.html#update

Thanks,
Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

Alex Harui-2
Hi Piotr,

SFTP is used to access home.apache.org.  Search for "home.apache.org" on
this page: https://www.apache.org/dev/committers.html

I'm not sure I did all of those steps.  The one remaining thing I think
you need to do is add your key to our KEYS file as described later in [2].

HTH,
-Alex

On 6/17/17, 5:28 AM, "piotrz" <[hidden email]> wrote:

>Hi,
>
>I'm going through instruction of keys generation and last thing which I
>need
>to do is publish myfile.asc to home.apache.org. In order to have something
>like that [1]. I have instruction [2], but do not understand how can I
>connect and upload to public_home this as file - Any idea ?
>
>[1]
>https://na01.safelinks.protection.outlook.com/?url=http:%2F%2Fhome.apache.
>org%2F~rdonkin%2FA6EE6908.asc&data=02%7C01%7C%7C36a7dd909bea4eaf30b808d4b5
>7e9b84%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636333002763014731&sda
>ta=G6aXecFfV7s4iv6WqBYEwVPMDn6vCmo%2BkksnAYXT4rw%3D&reserved=0
>[2]
>https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.apach
>e.org%2Fdev%2Fopenpgp.html%23update&data=02%7C01%7C%7C36a7dd909bea4eaf30b8
>08d4b57e9b84%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C6363330027630147
>31&sdata=j8yBvnoKoGaq3GkI1ypDtY2dxNf7mEIM7Zj2zYU74Pg%3D&reserved=0
>
>Thanks,
>Piotr
>
>
>
>-----
>Apache Flex PMC
>[hidden email]
>--
>View this message in context:
>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fle
>x-development.2333347.n4.nabble.com%2FDISCUSS-Discuss-Release-Apache-FlexJ
>S-0-8-0-RC1-tp62274p62437.html&data=02%7C01%7C%7C36a7dd909bea4eaf30b808d4b
>57e9b84%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636333002763014731&sd
>ata=ynL7w0tOcE6Pnv%2F9JhWyL1szC1Xw%2B%2F1GGACNUy4MFaU%3D&reserved=0
>Sent from the Apache Flex Development mailing list archive at Nabble.com.

Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
Hi Alex,

This instruction [1] is saying:

"To use key-based login, you need to generate the key on your local desktop (do not use a publicly accessible server for this) and then add your public key to LDAP using the self-service app at https://id.apache.org"

Is this the key which I've generated for signing process ? Is this the same ?

[1] https://www.apache.org/dev/new-committers-guide#ssh-setup

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
In reply to this post by Alex Harui-2
It look like I'm stuck with this one. :/

I did generate key and push it to the public serever [1], but if I correct understand you I still need to push it on my private space id.apache.org.

Maybe it's enough to sign artifacts ?

[1] http://p80.pool.sks-keyservers.net/pks/lookup?op=get&search=0x6B0A7EC905061FC8

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
In reply to this post by Alex Harui-2
I just dig into old BlazeDS release [1] and I see that Chris put it into some folder. I think if I run Maven "apache-release" profile I think I may be able to put them into some folder here [2].

We will see if someone help me with this keys for signing process.

[1] http://apache-flex-development.2333347.n4.nabble.com/VOTE-BlazeDS-Release-of-Apache-BlazeDS-4-7-0-RC2-td45328.html#a45344
[2] https://repository.apache.org/content/repositories/

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

Alex Harui-2
In reply to this post by piotrz
I think all you need to do now is append the key to the KEYS file in
flex-sdk repo.  And then use that file to update the KEYS file on
dist.apache.org/release/flex/KEYS.

IMO it is optional to update id.apache.org.

Thanks,
-Alex

On 6/17/17, 9:34 AM, "piotrz" <[hidden email]> wrote:

>It look like I'm stuck with this one. :/
>
>I did generate key and push it to the public serever [1], but if I correct
>understand you I still need to push it on my private space id.apache.org.
>
>Maybe it's enough to sign artifacts ?
>
>[1]
>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fp80.pool.s
>ks-keyservers.net%2Fpks%2Flookup%3Fop%3Dget%26search%3D0x6B0A7EC905061FC8&
>data=02%7C01%7C%7Cca1c005ab52e4dba124d08d4b5a10556%7Cfa7b1b5a7b34438794aed
>2c178decee1%7C0%7C0%7C636333150609193830&sdata=GnEqijhV70l2bmroOF%2FJzpwpu
>NQJDqXMxopbzy9Bdrk%3D&reserved=0
>
>Piotr
>
>
>
>-----
>Apache Flex PMC
>[hidden email]
>--
>View this message in context:
>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fle
>x-development.2333347.n4.nabble.com%2FDISCUSS-Discuss-Release-Apache-FlexJ
>S-0-8-0-RC1-tp62274p62442.html&data=02%7C01%7C%7Cca1c005ab52e4dba124d08d4b
>5a10556%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636333150609193830&sd
>ata=auTyoj917kVIeiPbCpRlqi1JilFZiGMstGw4dfylQko%3D&reserved=0
>Sent from the Apache Flex Development mailing list archive at Nabble.com.

Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
Alex,

I just update KEYS file in flex-sdk repo.

By this "And then use that file to update the KEYS file on
dist.apache.org/release/flex/KEYS" you mean that I need to do signing something like that [1] ?
 

[1] https://www.apache.org/dev/release-signing.html#sign-release

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
In reply to this post by Alex Harui-2
I will try to play with steps from Chris to see what Maven will ask me during that. I hope I will not break anything.

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
If I correct understand Chris's instruction [1] in order to cut next RC I need to do "mvn release:perform".

Anyone is understand it differently ?

Steps from 1-4 are done on our branch.

I just tried it on falcon repository and got fail [2]. There is also following file which seems to be generated when I was perform steps 1-4 [3]

[1] https://cwiki.apache.org/confluence/display/FLEX/Releasing+FlexJS+with+Maven
[2] https://paste.apache.org/Vs2o
[3] https://paste.apache.org/hPOP

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
I have assumption after digging into that farther that we will not be able to make the rest of steps from the instruction.

Release plugin used in maven build is assuming that on startup you have
1) Branch with Snapshot
2) You are creating from that branch another one - This one is for release (in most cases it is a Tag)

We have already branch.

I see following options:

1) Revert the changes by doing section from the instruction
"Now if the vote doesn't pass, the release process needs to be reverted. "
2) Build branch locally and deploy artifacts manually - how to do this ?

That's my thoughts.

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

Alex Harui-2
Yep, that's what I've been warning about.  Maven expects things a certain
way and it isn't clear you can/should alter the sequence.

Option 3 is to alter the Ant scripts to work from what Maven produces
Option 4 is to upgrade the Maven steps to produce everything Ant would
produce (including somehow testing Ant capability from Maven)

I would think we can manually upload the artifacts to Maven Central but
there is a lot of artifacts so could be painful.

-Alex

On 6/18/17, 11:29 AM, "piotrz" <[hidden email]> wrote:

>I have assumption after digging into that farther that we will not be
>able to
>make the rest of steps from the instruction.
>
>Release plugin used in maven build is assuming that on startup you have
>1) Branch with Snapshot
>2) You are creating from that branch another one - This one is for release
>(in most cases it is a Tag)
>
>We have already branch.
>
>I see following options:
>
>1) Revert the changes by doing section from the instruction
>"Now if the vote doesn't pass, the release process needs to be reverted. "
>2) Build branch locally and deploy artifacts manually - how to do this ?
>
>That's my thoughts.
>
>Piotr
>
>
>
>
>-----
>Apache Flex PMC
>[hidden email]
>--
>View this message in context:
>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fle
>x-development.2333347.n4.nabble.com%2FDISCUSS-Discuss-Release-Apache-FlexJ
>S-0-8-0-RC1-tp62274p62467.html&data=02%7C01%7C%7C3dcae69e2ab34ba419cf08d4b
>67a4400%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636334083655202362&sd
>ata=pvYZYtGA4O%2FU1ZFE%2BCFPD19SR9jpHYiVYVZwERtZkTQ%3D&reserved=0
>Sent from the Apache Flex Development mailing list archive at Nabble.com.

Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

Alex Harui-2
In reply to this post by piotrz
Hi Piotr,

No, I just meant to copy the KEYS file out to
https://dist.apache.org/repos/dist/dev/flex/sdk
I just went and did it and synced up our KEYS files.  There is also one at:
https://dist.apache.org/repos/dist/release/flex


Thanks,
-Alex

On 6/18/17, 2:31 AM, "piotrz" <[hidden email]> wrote:

>Alex,
>
>I just update KEYS file in flex-sdk repo.
>
>By this "And then use that file to update the KEYS file on
>dist.apache.org/release/flex/KEYS" you mean that I need to do signing
>something like that [1] ?
>
>
>[1]
>https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.apach
>e.org%2Fdev%2Frelease-signing.html%23sign-release&data=02%7C01%7C%7Cfd9d5e
>a897ee48deae9508d4b62f1876%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C63
>6333760772212378&sdata=5OcMTWCLe%2Bz6OgSd6908OMhH8hha5%2BBuxNMb6DZOwHA%3D&
>reserved=0
>
>Piotr
>
>
>
>-----
>Apache Flex PMC
>[hidden email]
>--
>View this message in context:
>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fle
>x-development.2333347.n4.nabble.com%2FDISCUSS-Discuss-Release-Apache-FlexJ
>S-0-8-0-RC1-tp62274p62449.html&data=02%7C01%7C%7Cfd9d5ea897ee48deae9508d4b
>62f1876%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636333760772212378&sd
>ata=mBPINL016c3ySG3jPvUDmM4Icb%2FY5QgsqPXS4Y4XmOk%3D&reserved=0
>Sent from the Apache Flex Development mailing list archive at Nabble.com.

Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
In reply to this post by Alex Harui-2
Alex,

Ok since I finally understand it - Let's wait a bit what others think.

I think option with reverting will not be so painful. Changing everything from 0.8.0 to 0.8.0-SNAPSHOT is almost automatic doing that:

mvn versions:set -DnewVersion=0.8.0-SNAPSHOT

As for the copy manually I think that would  be everything what option distribution produce in Maven. At least that is how I imagine.

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
While I'm waiting for some feedback from others I would like to ask how actually login to nexus where Apache releases are holds ?

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

Alex Harui-2
I found that I can login with my Apache credentials here:
        https://repository.apache.org/

And this:
http://www.apache.org/dev/publishing-maven-artifacts.html

HTH,
-Alex

On 6/19/17, 5:19 AM, "piotrz" <[hidden email]> wrote:

>While I'm waiting for some feedback from others I would like to ask how
>actually login to nexus where Apache releases are holds ?
>
>Piotr
>
>
>
>-----
>Apache Flex PMC
>[hidden email]
>--
>View this message in context:
>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fle
>x-development.2333347.n4.nabble.com%2FDISCUSS-Discuss-Release-Apache-FlexJ
>S-0-8-0-RC1-tp62274p62476.html&data=02%7C01%7C%7C60ae7aa95f4248c7858108d4b
>70fd4a3%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636334725998034309&sd
>ata=IuSJyn6NSsLiBFrYgxZhpI1kqjCvYqtId3NFcmI7Y94%3D&reserved=0
>Sent from the Apache Flex Development mailing list archive at Nabble.com.

Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

piotrz
Hi Alex,

I will study it tomorrow and try something. I think I will try to revert my changes in poms, but still waiting for some idea from others.

Piotr
Apache Flex PMC
piotrzarzycki21@gmail.com
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

Alex Harui-2
Hi Piotr,

I noticed that there appears to be an option to create a release from an
SCM tag.  So that might be another option that needs researching.

-Alex

On 6/19/17, 4:02 PM, "piotrz" <[hidden email]> wrote:

>Hi Alex,
>
>I will study it tomorrow and try something. I think I will try to revert
>my
>changes in poms, but still waiting for some idea from others.
>
>Piotr
>
>
>
>-----
>Apache Flex PMC
>[hidden email]
>--
>View this message in context:
>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fle
>x-development.2333347.n4.nabble.com%2FDISCUSS-Discuss-Release-Apache-FlexJ
>S-0-8-0-RC1-tp62274p62478.html&data=02%7C01%7C%7C40949900c55a4a06f9ba08d4b
>769984c%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636335111531783345&sd
>ata=0wgdTo9zvuRUbWzx7sx21U8aTF%2FrpeQIiFF%2BWMIb6K4%3D&reserved=0
>Sent from the Apache Flex Development mailing list archive at Nabble.com.

Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Discuss Release Apache FlexJS 0.8.0 RC1

Alex Harui-2
In reading more about Maven, it appears that we might be able to run "mvn
deploy" against the current Git release0.8.0 branch.  I might try that
tomorrow to see what it does.

Thoughts?
-Alex

On 6/19/17, 4:21 PM, "Alex Harui" <[hidden email]> wrote:

>Hi Piotr,
>
>I noticed that there appears to be an option to create a release from an
>SCM tag.  So that might be another option that needs researching.
>
>-Alex
>
>On 6/19/17, 4:02 PM, "piotrz" <[hidden email]> wrote:
>
>>Hi Alex,
>>
>>I will study it tomorrow and try something. I think I will try to revert
>>my
>>changes in poms, but still waiting for some idea from others.
>>
>>Piotr
>>
>>
>>
>>-----
>>Apache Flex PMC
>>[hidden email]
>>--
>>View this message in context:
>>https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-fl
>>e
>>x-development.2333347.n4.nabble.com%2FDISCUSS-Discuss-Release-Apache-Flex
>>J
>>S-0-8-0-RC1-tp62274p62478.html&data=02%7C01%7C%7C40949900c55a4a06f9ba08d4
>>b
>>769984c%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636335111531783345&s
>>d
>>ata=0wgdTo9zvuRUbWzx7sx21U8aTF%2FrpeQIiFF%2BWMIb6K4%3D&reserved=0
>>Sent from the Apache Flex Development mailing list archive at Nabble.com.
>

12345