Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Now make sure the log commit is the same of the tag you are sending out and that you checked out

  • cd
  • mkdir kafka-0.8.2-src
  • cd kafka-0.8.2-src
  • cp -r ~/apache/kafka/* .
  • git status

fatal: Not a git repository (or any of the parent directories): .git

  • if you did not get this you messed up somewhere please go back.

Now prepare the source (after getting your keys local to the box)

  • cd ..
  • tar -zcvf kafka-0.8.2-src.tgz kafka-0.8.2-src/
  • /vagrant/scripts/sign.sh kafka-0.8.2-src.tgz
    ( gpg --armor --output $1.asc --detach-sig $1

      gpg --print-md MD5 $1 > $1.md5

      gpg --print-md SHA1 $1 > $1.sha1

      gpg --print-md SHA512 $1 > $1.sha2 )

  • upload the artifacts to where you are staging them
  • check they are there
  • exit
  • vagrant destroy

Setup another clean room

  • vagrant up
  • vagrant ssh
  • download the files you signed and uploaded
  • gpg kafka-0.8.1-src.tgz.asc 
  • /vagrant/scripts/verify.sh kafka-0.8.1-src.tgz

You should see valid signatures and no errors, if errors go back

...

gpg --import KEYS (KEYS can be obtained from httpshttp://svnkafka.apache.org/repos/asf/kafkaKEYS)
gpg --verify foo-1.0.tar.gz.asc foo-1.0.tar.gz

...