...

1. Make sure the tar and the rc match 

   Code Block
   cd /tmp/sentry-release-preparations tar -xvf apache-sentry-1.2.0-incubating-src.tar.gz #Do a fresh clone of the tag git clone https://git-wip-us.apache.org/repos/asf/incubator-sentry.git cd incubator-sentry/ git checkout tags/release-1.2.0 cd .. diff -r incubator-sentry apache-sentry-1.2.0-incubating-src

2. Make sure code compiles and tests pass on the untared src.

   Code Block
   cd apache-sentry-1.2.0-incubating-src mvn clean install -DskipTests mvn test mvn verify -DskipTests (to do the rat check)

Signatures and Checksums

All artifacts must be signed and checksummed. In order to sign a release you will need a PGP key. You should get your key signed by a few other people. You will also need to recv their keys from a public key server. See the Apache release signing page for more details. If you add your PGP key fingerprint to your Apache profile, your key should automatically be added to https://people.apache.org/keys/group/sentry.asc

...

ssh people.apache.org "mkdir -p ~/public_html/sentry-1.2.0-rc0"
scp * people.apache.org:~/public_html/sentry-1.2.0-rc0

Update KEYS file

If your PGP key is not yet in the project's KEYS file, you need to first add that in. To do this, checkout the KEYS file and update it using the following commands:

Once this file has been updated, you need to publish it in the appropriate dist directory for the project on http://www.apache.org/dist. To do this, you must copy the file as follows:

This will take some time to propagate in which you can continue with the other steps of the release process.

Some more things to verify before sending out an email

...

To: dev@sentry.incubator.apache.org
Subject: [VOTE] Release Sentry incubating version 1.2.0
This is the first incubator release of Apache Sentry, version 1.2.0-incubating. 
It fixes the following issues: http://s.apache.org/VlU

Source files : http://people.apache.org/~shreepadma/sentry-1.2.0/

Tag to be voted on (rc0): https://git-wip-us.apache.org/repos/asf/incubator-sentry/?p=incubator-sentry.git;a=commit;h=<commit-hash-of-the-tag>

Sentry's KEYS containing the PGP key we used to sign the release:
https://people.apache.org/keys/group/sentry.asc/sentry.asc (or http://www.apache.org/dist/incubator/sentry/KEYS for non committers)

Note that this is a source only release and we are voting on the source (tag).


Vote will be open for 72 hours.

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)


Thanks,
$RM
 $RM 

Need 3 +1 votes from PPMC members. Additionally need 3 +1 votes from IPMC members. The vote has to be called first on the dev list. Upon receiving 3 +1s from the PPMC, the vote should be called on general@incubator.

...

svn co https://dist.apache.org/repos/dist/release/incubator/sentry/ sentry-release
cd sentry-release
mkdir 1.2.0-incubating/
cp $source_to_your_artifacts 1.2.0-incubating/
svn add 1.2.0-incubating
# Optionally change KEYS file in case that you've added your key for
the first time
svn commit -m "Release 1.2.0 incubating"

Wait for 24 Hours

It may take up to 24 hours for all mirrors to sync up.

...