...
3. Add your public key to Apache Pegasus's distribution repo.
➜ sudo apt install subversion
➜ svn co https://dist.apache.org/repos/dist/dev/incubator/pegasus/ dist-dev-pegasus # The pegasus repo
➜ cd dist-dev-pegasus
➜ gpg --list-sigs "wutao@apache.org" && gpg --armor --export "wutao@apache.org" >> KEYS # Keys contains all the public keys of Release Manager
➜ svn commit # Upload your changes
4. Sign your package (MOST IMPORTANT)
Suppose we have a package called "apache-pegasus-2.1.0-incubating-src.zip".
➜ export GPG_TTY=$(tty) # This can be added to your .bashrc/.zshrc
➜ gpg --local-user "wutao@apache.org" --armor --detach-sig apache-pegasus-2.1.0-incubating-src.zip # Create a digital signature
➜ gpg --verify apache-pegasus-2.1.0-RC1-source-release.zip.asc apache-pegasus-2.1.0-incubating-src.zip # Verify if all doing right.
gpg: Signature made 2020年09月07日 星期一 12时21分44秒 CST
gpg: using RSA key B29EB88AD60BB41EC9D82687B1DA1BBC34C617A9
gpg: issuer "wutao@apache.org"
gpg: Good signature from "Tao Wu <wutao@apache.org>" [ultimate] # Correct!