Page History

...

Once in the Ubuntu environment, example to build deb packagemd5 package (from source directory):

Note: If the pg_config file is not in the default location, we can specify it as a parameter in cmake using `-DPOSTGRESQL_11_PG_CONFIG=<pg_config location>`

...

Check that shasum, and gpg (or gpg2) are installed on your machine:

$ which gpg shasum md5
/usr/local/bin/gpg
/usr/bin/shasum
/sbin/md5

Install using Hombrew (on Mac OS) if needed e.g.:

...

    /usr/local/Cellar/gnupg/1.4.19: 53 files, 5.4M, built in 87 seconds
office-4-125:release_manager_stuff rraghu$ which gpg
/usr/local/bin/gpg

Prepare MD5, SHA256 and ASC files from the source tarball and binaries:

md5 <your release tarball or binary> > <your release tarball or binary>.md5
shasum -a 512 <your release tarball or binary> > <your release tarball or binary>.sha512
gpg --detach-sign -a <your release tarball or binary>

Example:

$ md5 apache-madlib-1.11-src.tar.gz > apache-madlib-1.11-src.tar.gz.md5
$ shasum -a 512 apache-madlib-1.11-src.tar.gz > apache-madlib-1.11-src.tar.gz.sha512
$ gpg --detach-sign -a apache-madlib-1.11-src.tar.gz

You need a passphrase to unlock the secret key for
user: "Rashmi Raghu (CODE SIGNING KEY) <rashmiraghu@apache.org>"
4096-bit RSA key, ID 28D2C789, created 2017-05-01 

$ ls -lagGnl


-rw-r--r--@ 1 rraghu staff 9961787 May 1 13:55 20 7975215 Mar 30 15:42 apache-madlib-1.1118.0-bin-Darwin.dmg

-rw-r--r-- 1 rraghu staff 819 May 1 14:29 20 833 Mar 31 12:36 apache-madlib-1.18.110-bin-Darwin.dmg.asc

-rw-r--r-- 1 rraghu staff 86 May 1 14:27 20 166 Mar 31 12:36 apache-madlib-1.1118.0-bin-Darwin.dmg.md5sha512

-rw-rrw--r-- 1 rraghu staff 175 May 1 14:28 20 10275892 Mar 30 17:01 apache-madlib-1.18.110-bin-Darwin.dmg.sha512Linux-CentOS6.rpm

-rw-r--r-- @ 1 rraghu staff 3868116 May 1 13:55 1 20 833 Mar 31 12:36 apache-madlib-1.1118.0-bin-Linux-GPDB5alpha1CentOS6.rpm.asc

-rw-r--r-- 1 rraghu staff 819 May 1 14:48 20 173 Mar 31 12:36 apache-madlib-1.1118.0-bin-Linux-GPDB5alpha1CentOS6.rpm.ascsha512

-rw-rrw--r-- 1 rraghu staff 97 May 1 14:46 20 10387968 Mar 30 17:23 apache-madlib-1.18.110-bin-Linux-GPDB5alpha1CentOS7.rpm.md5

-rw-r--r-- 1 rraghu staff 186 May 1 14:47 20 833 Mar 31 12:37 apache-madlib-1.1118.0-bin-Linux-GPDB5alpha1CentOS7.rpm.sha512asc

-rw-r--r-- @ 1 rraghu staff 18527053 May 1 13:55 1 20 173 Mar 31 12:37 apache-madlib-1.1118.0-bin-Linux-CentOS7.rpm.sha512

-rw-rrw--r-- 1 rraghu staff 819 May 1 14:43 20 10737982 Mar 30 18:23 apache-madlib-1.1118.0-bin-Linux-Ubuntu18.rpm.ascdeb

-rw-r--r-- 1 rraghu staff 85 May 1 14:41 20 833 Mar 31 12:37 apache-madlib-1.18.110-bin-Linux-Ubuntu18.rpmdeb.md5asc

-rw-r--r-- 1 rraghu staff 174 May 1 14:41 20 174 Mar 31 12:37 apache-madlib-1.1118.0-bin-Linux-Ubuntu18.rpmdeb.sha512

-rw-r--r-- @ 1 rraghu staff 2474217 May 1 13:56 1 20 3156110 Mar 31 11:52 apache-madlib-1.11-src.tar.gz
-rw-r--r-- 1 rraghu staff 819 May 1 14:45 apache-madlib-1.11-18.0-src.tar.gz.asc

-rw-r--r-- 1 rraghu staff 82 May 1 14:44 20 833 Mar 31 12:36 apache-madlib-1.18.110-src.tar.gz.md5asc

-rw-r--r-- 1 rraghu staff 171 May 1 14:45 20 162 Mar 31 12:36 apache-madlib-1.1118.0-src.tar.gz.sha512

Validate the Release Candidate 

...

$ brew install gpg coreutils

$ which gpg gsha512sum gmd5sum
/usr/local/bin/gpg
/usr/local/bin/gsha512sum
/usr/local/bin/gmd5sum

$ gpg --verify apache-madlib-1.11-bin-Linux.rpm.asc
gpg: assuming signed data in `apache-madlib-1.11-bin-Linux.rpm'
gpg: Signature made Mon May 1 14:42:16 2017 PDT using RSA key ID 28D2C789
gpg: Good signature from "Rashmi Raghu (CODE SIGNING KEY) <rashmiraghu@apache.org>"
$ gsha512sum --check apache-madlib-1.11-bin-Linux.rpm.sha512
apache-madlib-1.11-bin-Linux.rpm: OK
$ gmd5sum --check apache-madlib-1.11-bin-Linux.rpm.md5
apache-madlib-1.11-bin-Linux.rpm: OK

...