Mailing-List: contact general-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: general@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of sebbaz@gmail.com designates
 74.125.82.170 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAAS6=7jtG100kZT4+t9HL-O_2iBGOFmpf0OGDvKyw5qdf35VwQ@mail.gmail.com>
References: 
 <CAAS6=7jtG100kZT4+t9HL-O_2iBGOFmpf0OGDvKyw5qdf35VwQ@mail.gmail.com>
Date: Wed, 25 Sep 2013 01:25:32 +0100
Message-ID: 
 <CAOGo0VbLQwoL9Mt8TyFh_cXaD4xddpPrnMsT_P=cmSnuabk5RA@mail.gmail.com>
Subject: Re: KEYS files within source archives
From: sebb <sebbaz@gmail.com>
To: general@incubator.apache.org
Content-Type: text/plain; charset=ISO-8859-1

On 23 September 2013 21:57, Marvin Humphrey <marvin@rectangular.com> wrote:
>> On Wed, Sep 18, 2013 at 8:25 PM, Dave Brondsema <dave@brondsema.net> wrote:
>>
>>> Do you have a KEYS file posted somewhere besides within the release?
>
> Thanks for a good spot and thoughtful observation, Dave.  This is worth
> discussing.
>
> MHO: supplying a KEYS file within the source archive is worthless at best.

+1

> On Wed, Sep 18, 2013 at 9:50 PM, Ted Dunning <ted.dunning@gmail.com> wrote:
>> It is in version control as per custom.  Drill uses git so it might not be
>> quite as obvious if you are used to SVN.
>>
>> See, for instance,
>>
>> https://git-wip-us.apache.org/repos/asf?p=incubator-drill.git;a=blob;f=KEYS;h=205469b84b8bda60fcb87486182d4fb7caf0485d;hb=HEAD
>
> There may be precedent but it seems to me that including a KEYS file within
> a source archive shouldn't be considered a best practice.  (For the record,
> so long as the KEYS file is available from somewhere else safe, I don't think
> the issue blocks Drill's release candidate.)

The canonical place for KEYS files is the distribution area.
This is automatically archived, so the KEYS file is available for use
with archives as well.

> Now that changes to our distribution area are captured via version control
> (dist.apache.org), is there any reason to maintain KEYS in the master branch
> any more?

+1

> There was talk a while back of transitioning to an LDAP-centric key scheme,
> but there are flaws with that approach: former RMs who leave the community
> suddenly causing the key needed for an old release to become unavailable, etc.

Indeed.

> Marvin Humphrey
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> For additional commands, e-mail: general-help@incubator.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org