Mailing-List: contact java-dev-help@lucene.apache.org; run by ezmlm
Precedence: bulk
Reply-To: java-dev@lucene.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Message-Id: <CD36E49C-4C78-47FF-B1C5-ABEE9192A48E@mikemccandless.com>
From: Michael McCandless <lucene@mikemccandless.com>
To: java-dev@lucene.apache.org
In-Reply-To: <1A3724EF-286B-46F3-A3A4-806349BE44D2@hibnet.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Apple Message framework v929.2)
Subject: Re: 2.4 release candidate 1
Date: Sun, 21 Sep 2008 15:31:33 -0400
References: <B69CD585-98CE-420C-8C0A-DC017A491962@mikemccandless.com>
 <9857BCAC-C225-4F32-A3CD-55FC9A2F373B@apache.org>
 <D56C00AB-759F-4DAF-BF6A-4A444C70972B@mikemccandless.com>
 <8C69E617-DC12-48F3-A77D-A66D0CC8DE0F@apache.org>
 <1A3724EF-286B-46F3-A3A4-806349BE44D2@hibnet.org>


OK so I wrote yet another way to do the signing, in Python (which I'll =20=

happily find any excuse to use ;) -- it prompts for your passphrase =20
and then recurses through the dist directory looking for artifacts to =20=

sign:

import sys
import os
import subprocess
import getpass

def signFile(pwd, fileName):

   print '\nSIGN %s' % fileName

   command =3D 'gpg --passphrase-fd 0 --batch --armor --detach-sig %s' % =
=20
fileName
   print '  command %s' % command

   ascFileName =3D fileName + '.asc'
   if os.path.exists(ascFileName):
     os.remove(ascFileName)

   p =3D subprocess.Popen(command, shell=3DTrue, stdin=3Dsubprocess.PIPE)
   p.stdin.write(pwd)
   p.stdin.close()
   result =3D p.wait()
   if result !=3D 0:
     raise RuntimeError('command failed: exit code %s' % result)

def isArtifact(fileName):
   for suffix in ('.tar.gz', '.jar', '.zip', '.pom'):
     if fileName.endswith(suffix):
       return True
   else:
     return False

def main(argv):

   if len(argv) !=3D 2:
     print '\nUsage: python %s distRootDirName\n' % argv[0]
     return

   pwd =3D getpass.unix_getpass(prompt=3D'\nPlease enter your GPG =
private =20
key passphrase:')

   for dirPath, dirNames, fileNames in os.walk(argv[1]):
     for fileName in fileNames:
       if isArtifact(fileName):
         signFile(pwd, os.path.join(dirPath, fileName))

if __name__ =3D=3D '__main__':
   main(sys.argv)

Mike

Nicolas Lalev=E9e wrote:

>
> Le 19 sept. 08 =E0 15:21, Grant Ingersoll a =E9crit :
>
>> FWIW, here's a simple bash function to do it too:
>>
>> function sign-artifacts()
>> {
>>    gpg --armor --output $1-$2.pom.asc --detach-sig $1-$2.pom
>>    if [ -f $1-$2-javadoc.jar ]; then
>>        gpg --armor --output $1-$2-javadoc.jar.asc --detach-sig $1-=20
>> $2-javadoc.jar
>>    fi
>>    if [ -f $1-$2-sources.jar ]; then
>>        gpg --armor --output $1-$2-sources.jar.asc --detach-sig $1-=20
>> $2-sources.jar
>>    fi
>>    if [ -f $1-$2.jar ]; then
>>        gpg --armor --output $1-$2.jar.asc --detach-sig $1-$2.jar
>>    fi
>> }
>>
>> I call it as sign-artifacts <artifact id> <version number>
>>
>> i.e. sign-artifacts solr-common 1.3.0
>>
>> I suppose it could be put into a loop that recurses through sub-dirs.
>
> You might also interested into the "read" function which avoid enter =20=

> the pass phrase for every artifact:
> https://svn.apache.org/repos/asf/ant/ivy/ivyde/trunk/signArtifacts.sh
>
> Nicolas
>
>>
>>
>> -Grant
>>
>> On Sep 18, 2008, at 7:16 PM, Michael McCandless wrote:
>>
>>>
>>> Yeah I was afraid of this :)
>>>
>>> I'll look at SOLR-776.  Thanks for the pointer!
>>>
>>> Mike
>>>
>>> Grant Ingersoll wrote:
>>>
>>>> FYI, MIke, you might be interested in =
https://issues.apache.org/jira/browse/SOLR-776=20
>>>>  for signing the Maven artifacts (what a PITA).  I know Michael =20
>>>> B. has a batch script, but this does it in a Ant friendly way and =20=

>>>> is available for all RMs.
>>>>
>>>> Cheers,
>>>> Grant
>>>> On Sep 18, 2008, at 2:29 PM, Michael McCandless wrote:
>>>>
>>>>>
>>>>> Hi,
>>>>>
>>>>> I just created the first release candidate for 2.4, here:
>>>>>
>>>>> http://people.apache.org/~mikemccand/staging-area/lucene2.4rc1
>>>>>
>>>>> Please download the release candidate, kick the tires and report =20=

>>>>> back
>>>>> on any issues you encounter.
>>>>>
>>>>> The plan is to make only serious bug fixes or build/doc fixes, to
>>>>> 2.4 for ~10 days, after which if there are no blockers I'll call a
>>>>> vote for the actual release.
>>>>>
>>>>> Happy testing, and thanks!
>>>>>
>>>>> Mike
>>>>>
>>>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: java-dev-unsubscribe@lucene.apache.org
>> For additional commands, e-mail: java-dev-help@lucene.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: java-dev-unsubscribe@lucene.apache.org
> For additional commands, e-mail: java-dev-help@lucene.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: java-dev-help@lucene.apache.org