accumulo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher <ctubb...@apache.org>
Subject Re: [VOTE] Accumulo 1.5.4-rc1
Date Thu, 10 Sep 2015 19:00:45 GMT
I'm not suggesting ignoring the issues. I was suggesting prioritizing them
after careful consideration, like we would any other problem.

On Thu, Sep 10, 2015 at 2:49 PM John Vines <vines@apache.org> wrote:

> -1
>
> I'm with Sean on this one. Ignoring now known licensing issues because we
> hadn't handled them in the past is not a valid excuse.
>
> On Thu, Sep 10, 2015 at 2:27 PM Sean Busbey <busbey@cloudera.com> wrote:
>
> > As members of the PMC, we're required to verify all releases we approve
> of
> > meet ASF licensing policy[1], so I don't consider the issues "minor".
> >
> > Mistakenly violating policy in the past is a different kind of problem
> than
> > moving forward to knowingly violate it.
> >
> > In particular, not all of the bundled works have copyrights that are
> > covered under a donation to the Foundation. If we distribute e.g. the
> > accumulo-core binary jar in its current state the foundation will be
> > committing willful copyright infringement. The binary tarball (and I'd
> > imagine the rpm/deb files) have similar problems because we'd be
> violating
> > the terms of the included works' respective licenses.
> >
> >
> > [1]:
> > http://www.apache.org/dev/release.html#what-must-every-release-contain
> >
> > On Thu, Sep 10, 2015 at 11:51 AM, Billie Rinaldi <
> billie.rinaldi@gmail.com
> > >
> > wrote:
> >
> > > Agreed.
> > >
> > > On Thu, Sep 10, 2015 at 9:47 AM, Christopher <ctubbsii@apache.org>
> > wrote:
> > >
> > > > I think the license issues are relatively small compared to the
> > bugfixes,
> > > > especially since we're really trying to close out 1.5.x development.
> > So,
> > > > given the options, I'd prefer to pass RC1, and make the license fixes
> > in
> > > > 1.6.x and later, as applicable.
> > > >
> > > > On Thu, Sep 10, 2015 at 12:28 PM Josh Elser <elserj@apache.org>
> wrote:
> > > >
> > > > > Thanks again for taking the time to inspect things so thoroughly,
> > Sean.
> > > > >
> > > > > Others who have already voted, I'd ask for your opinion on whether
> we
> > > > > should sink this release (instead of me blindly going by majority
> > > rule).
> > > > >
> > > > > Personally, I'm presently of the opinion that, given the severity
> of
> > > the
> > > > > bug(s) fixed in this release already, RC1 should pass. Considering
> > that
> > > > > we've been making releases like this for quite some time w/o issue
> > and
> > > > > 1.5 is all but dead, let's push this release out, (again) table 1.5
> > and
> > > > > then make these improvements to 1.6 before we cut an RC there there
> > > when
> > > > > we have time to thoroughly vet the changes (instead of the 11th
> hour
> > of
> > > > > a vote).
> > > > >
> > > > > If there's a need for lengthy discussion, let's break this off the
> > VOTE
> > > > > thread (I leave this message here for visibility).
> > > > >
> > > > > - Josh
> > > > >
> > > > > Sean Busbey wrote:
> > > > > > -1
> > > > > >
> > > > > > * signatures check out
> > > > > > * checksums match
> > > > > > * licensing errors noted in ACCUMULO-3988
> > > > > >
> > > > > > On Sat, Sep 5, 2015 at 4:27 PM, Josh Elser<elserj@apache.org>
> > > wrote:
> > > > > >
> > > > > >> Accumulo Developers,
> > > > > >>
> > > > > >> Please consider the following candidate for Accumulo 1.5.4.
> > > > > >>
> > > > > >> Git Commit:
> > > > > >>      12a1041dcbb7f3b10543c305f27ece4b0d65ab9c
> > > > > >> Branch:
> > > > > >>      1.5.4-rc1
> > > > > >>
> > > > > >> If this vote passes, a gpg-signed tag will be created using:
> > > > > >>      git tag -f -m 'Apache Accumulo 1.5.4' -s 1.5.4
> > > > > >> 12a1041dcbb7f3b10543c305f27ece4b0d65ab9c
> > > > > >>
> > > > > >> Staging repo:
> > > > > >>
> > > > >
> > > >
> > >
> >
> https://repository.apache.org/content/repositories/orgapacheaccumulo-1039
> > > > > >> Source (official release artifact):
> > > > > >>
> > > > >
> > > >
> > >
> >
> https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/org/apache/accumulo/accumulo/1.5.4/accumulo-1.5.4-src.tar.gz
> > > > > >> Binary:
> > > > > >>
> > > > >
> > > >
> > >
> >
> https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/org/apache/accumulo/accumulo/1.5.4/accumulo-1.5.4-bin.tar.gz
> > > > > >> (Append ".sha1", ".md5", or ".asc" to download the
> signature/hash
> > > for
> > > > a
> > > > > >> given artifact.)
> > > > > >>
> > > > > >> All artifacts were built and staged with:
> > > > > >>      mvn release:prepare&&  mvn release:perform
> > > > > >>
> > > > > >> Signing keys are available at
> > > > https://www.apache.org/dist/accumulo/KEYS
> > > > > >> (Expected fingerprint: ABC8914C675FAD3FA74F39B2D146D62CAB471AE9)
> > > > > >>
> > > > > >> Release notes (in progress) can be found at
> > > > > >> https://accumulo.apache.org/release_notes/1.5.4
> > > > > >>
> > > > > >> Please vote one of:
> > > > > >> [ ] +1 - I have verified and accept...
> > > > > >> [ ] +0 - I have reservations, but not strong enough to vote
> > > against...
> > > > > >> [ ] -1 - Because..., I do not accept...
> > > > > >> ... these artifacts as the 1.5.4 release of Apache Accumulo.
> > > > > >>
> > > > > >> This vote will end on Thurs Sep  10 23:00:00 UTC 2015
> > > > > >> (Thurs Sep  10 20:00:00 EDT 2015 / Thurs Sep  10 17:00:00
PDT
> > 2015)
> > > > > >>
> > > > > >> Thanks!
> > > > > >>
> > > > > >> P.S. Hint: download the whole staging repo with
> > > > > >>      wget -erobots=off -r -l inf -np -nH \
> > > > > >>
> > > > > >>
> > > > >
> > > >
> > >
> >
> https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/
> > > > > >>      # note the trailing slash is needed
> > > > > >>
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
> >
> >
> > --
> > Sean
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message