Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 04071200BA2 for ; Sun, 2 Oct 2016 00:24:59 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 02778160AE7; Sat, 1 Oct 2016 22:24:59 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 15189160AD7 for ; Sun, 2 Oct 2016 00:24:57 +0200 (CEST) Received: (qmail 20492 invoked by uid 500); 1 Oct 2016 22:24:51 -0000 Mailing-List: contact dev-help@community.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@community.apache.org Delivered-To: mailing list dev@community.apache.org Received: (qmail 20476 invoked by uid 99); 1 Oct 2016 22:24:51 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 01 Oct 2016 22:24:51 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 3B24D1A04B1 for ; Sat, 1 Oct 2016 22:24:51 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.379 X-Spam-Level: X-Spam-Status: No, score=0.379 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id 0hprU9CuBHjy for ; Sat, 1 Oct 2016 22:24:50 +0000 (UTC) Received: from mail-pa0-f41.google.com (mail-pa0-f41.google.com [209.85.220.41]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 893385F30B for ; Sat, 1 Oct 2016 22:24:49 +0000 (UTC) Received: by mail-pa0-f41.google.com with SMTP id cd13so46069024pac.0 for ; Sat, 01 Oct 2016 15:24:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=IC/6USYiHIiEMPBS0733QANVTRChGRzxYp03DD80BpM=; b=wFeLC+pha9oc0QndgKVMD3zA6yhtrumzNzmWDMcY0I69eWk92Bq3lgE4zEU9mlda9p zVHvBk6IGM3Qn9ykWInVImDsW0KpnUQK9uhQGlumvQ0ZU04WahjM3b5w2/xHSbLBopKH 2pKj+a9Nk91Zl7EHQkOr74F+Gbaj3pqggXrPdI2Ny7IphD5T0zmIfunqwSanbOqN6keg 3WPTjffWpg5a8psqB1nNUMtpQmzcySwIIlR25Xwqq+ZUWZ8xuqu8QOEb+xxKiljxCY/n xO+rtyFDKSto1zicfJHJfh/l7PAC7FLKsqdUbxqSO8CBMzmTiPMzUUeNh6C+0sWjLoJ2 Ol1g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=IC/6USYiHIiEMPBS0733QANVTRChGRzxYp03DD80BpM=; b=KOS/LJf3roaPs9fqmWJqJiOEWtWqAMdCfrftU20/0HEL2gZoKOOxAaa0epeLlRYkqg uGNNCoyqLmYKVuGOhXwpwy/ZqlXLvi/xisbQA9669Pd3aEg5053kdo0CB3mbxD8/mNo9 tCwOT5qPb8tFKekNtPuygG92FFDyhkYz4UjbQOjsK8z7ZZXlh/P2TqZw1o/Ef0hPFzNj 7eQ0wKn9Wf0XDhvQeijg0PbyCR0AnaEc3iJA43EaNDoQ0A8nkcHMez8r3WYiIXXxB3pk VV93fweQCZngMGMEX9Uq/oArsiccj9LJ6rP4iukVEBruj4YDOafr/alU2Nev+0M1ySkI 4n8g== X-Gm-Message-State: AA6/9RkT7WfYQ2NmnirMJmF72dbCKggq7b6SiSZ0eAHzrGEzKBR7/N6v8aSbr8Y4CZ+t1g== X-Received: by 10.66.176.141 with SMTP id ci13mr24110489pac.85.1475360682129; Sat, 01 Oct 2016 15:24:42 -0700 (PDT) Received: from psteitz-mbp.local (97-117-226-89.phnx.qwest.net. [97.117.226.89]) by smtp.googlemail.com with ESMTPSA id vo3sm21837092pab.26.2016.10.01.15.24.41 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 01 Oct 2016 15:24:41 -0700 (PDT) Subject: Re: Addition to the project maturity model To: dev@community.apache.org References: <10d3a222-0bd0-c232-69b1-fd678ca21df6@apache.org> From: Phil Steitz Message-ID: Date: Sat, 1 Oct 2016 15:24:40 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable archived-at: Sat, 01 Oct 2016 22:24:59 -0000 On 9/29/16 6:25 AM, William A Rowe Jr wrote: > On Wed, Sep 28, 2016 at 3:33 AM, Mark Thomas wrote: > >> All, >> >> After a discussion on the general@incubator.a.o mailing list [1], I'd >> like to propose the following addition to the project maturity model. >> >> RE50 >> The release process is documented and repeatable to the extent that >> someone new to the project is able to independently generate a release= >> build. >> > Release 'build'? That sounds very .jar'ish to me :) > > In non-JVM environments, we may have radically different ways of buildi= ng, > even on linux a project may have autoconf vs cmake as parallel options.= > No single release manager is expected to try all alternatives across so= me > broad array of target platforms. > > The project must also demonstrate that they have documented how-to > for users/consumers to generate a binary build from the release package= =2E > In terms of maturity, that might start out as windows-only or unix-only= > or java-only, but as the project evolves more supported build platforms= , > they will have the template for adding more build how-to documentation.= > > Since binaries are not releases, is it enough to say 'release package' > to capture the essence of tarball, .zip, or whatever the sources includ= e? > If a project wants to include the .jar file as a side effect of creatin= g the > release sources, I think 'release package' covers that to. I agree with your points on limiting RM responsibility. I draw the line at the stock binaries that the PMC publishes directly. I think our policy [1] implies that binaries that are published by the PMC are releases. When PMCs push stock binaries to the ASF mirrors, these binaries are in fact part of the release. What I think we need to capture as a maturity objective is that someone new to the project can figure out how to build both source and binary distributions (here, binary means what ends up VOTEd on and pushed to the ASF mirrors [2]). Building (and verifying at VOTE time [3]) binary distributions published by the project includes verifying that anyone with the required build tools can reproduce them from the source distribution. I think that what Mark is trying to capture is just the idea that there is not a ridiculously high bar or special access / tools required for someone new to the project to step up to RM a release.=20 Packaging stock binaries is part of that. The ability to recreate the stock binaries from the source distribution is covered by release policy. Phil [1] http://www.apache.org/dev/release.html#what [2] There is a corner case for Java projects - "publishing" to maven central - those artifacts are also IMO released by the PMC [3] http://www.apache.org/dev/release.html#approving-a-release > > Otherwise, strongly +1 to this suggestion. > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@community.apache.org For additional commands, e-mail: dev-help@community.apache.org