Page History

...

NOTE: If you are using GitHub two-factor authentication and haven’t configure HTTPS access, please follow the guide to configure command line access.

One-time

...

Setup Instructions

You need to have a GPG key to sign the release artifacts. Please be aware of the ASF-wide release signing guidelines. If you don’t have a GPG key associated with your Apache account, please follow the section below.

For Linux users

There are 2 ways to configure your GPG key for release, either using release automation script(which is recommended), or running all commands manually. If using Mac, please see below to handle known issues.

...

• Configure git to use this key when signing code by giving it your key ID, as follows:

• git config --global user.signingkey CD4C59FD, or git config --global user.signingkey 623E08E06DB376684FB9599A3F5953147903948A

• You may drop the --global option if you’d prefer to use this key for the current repository only.
• Start GPG agent in order to unlock your GPG key

• eval $(gpg-agent --daemon --no-grab --write-env-file $HOME/.gpg-agent-info)

• export GPG_TTY=$(tty)

• export GPG_AGENT_INFO

...

For Mac users

• apt-get is not available . So install gpg using  https://gpgtools.org/ 
• Create gpg key with your apache emailId and publish to key server (refer to the section "Submit your GPG public key into MIT PGP Public Key Server"  below)
• The KEYS file is in https://dist.apache.org/repos/dist/

...

• • To

...

• • checkout you

...

• • need subversion

...

• • . If subversion is not available in Mac you might have to first install it using `brew install subversion`.

...

Access to Apache Nexus repository

...

<settings>
   <servers>
     <server>
       <id>apache.releases.https</id>
       <username>TOKEN_NAME</username>
       <password>TOKEN_PASSWORD</password>
     </server>
     <server>
       <id>apache.snapshots.https</id>
       <username>TOKEN_NAME</username>
       <password>TOKEN_PASSWORD</password>
     </server>
   </servers>
 </settings>

...

Submit your GPG public key into MIT PGP Public Key Server

...