Return-Path: Mailing-List: contact commons-dev-help@jakarta.apache.org; run by ezmlm Delivered-To: mailing list commons-dev@jakarta.apache.org Received: (qmail 76004 invoked from network); 2 Sep 2003 03:05:53 -0000 Received: from unknown (HELO ms-smtp-01.southeast.rr.com) (24.93.67.82) by daedalus.apache.org with SMTP; 2 Sep 2003 03:05:53 -0000 Received: from noel770 (cae88-16-024.sc.rr.com [24.88.16.24]) by ms-smtp-01.southeast.rr.com (8.12.5/8.12.2) with SMTP id h822wj4R028733 for ; Mon, 1 Sep 2003 22:58:46 -0400 (EDT) From: "Noel J. Bergman" To: "Jakarta Commons Developers List" Subject: RE: [doc] how to release - feedback Date: Mon, 1 Sep 2003 23:05:35 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 In-Reply-To: Importance: Normal X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N > > However, I do not believe that signing should be done on minotaur. It > > should be done on the Release Manager's personal system where (s)he has > > control over the private key. I don't like the idea of having private keys > > on minotaur. > To be argumentative, shouldn't Apache have control over the keys though? Why? In the case of C/C++ programs, the builds are generally done on multiple platforms. And that may also be why they post releases and THEN vote on them, rather than just voting based upon the CVS. It gives people a chance to make sure that the build was done properly. I recently pointed out that a very large percentage of an Avalon release candidate consisted of many replicated dozens of copies of the Apache License file. I would not have been able to point that out if there weren't an actual Release Candidate to evaluate. > One plus reason for not using Apache servers: some kind of version change > or something has happened on minotaur as I get errors when running certain > commands. Which ones? If something needs to be corrected, infrastructure needs to know. --- Noel