oodt-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ramirez, Paul M (388J)" <paul.m.rami...@jpl.nasa.gov>
Subject Re: [DISCUSS] OODT 0.3 Release Candidate
Date Tue, 14 Jun 2011 13:34:41 GMT
Hey Andrew,

The documentation for the gpg mojo is here:

http://maven.apache.org/plugins/maven-gpg-plugin/sign-mojo.html

That will show you how to setup the executable path. Chris probably has it pegged though as
it calls out specifically what he mentions on their usage page http://maven.apache.org/plugins/maven-gpg-plugin/usage.html.

Thanks,
Paul

On Jun 13, 2011, at 3:38 PM, Mattmann, Chris A (388J) wrote:

> Hey Guys,
> 
> Yeah I think there is something like -Dgpg.passhprase=XXX. The weird part is, since it's
a forked execution during mvn release:prepare, you have to do something like:
> 
> mvn -Darguments="-Dgpg.passphrase=XXX" 
> 
> in order to get it to go past signing. I may have the syntax wrong but that's the basic
intent iI think...
> 
> Cheers,
> Chris
> 
> On Jun 13, 2011, at 3:03 PM, Brian Foster wrote:
> 
>> hey Andrew,
>> 
>> There might be an environment variable u have to set for maven to find your gpg install
>> 
>> -Brian
>> 
>> On Jun 12, 2011, at 5:34 PM, Andrew Hart <ahart@apache.org> wrote:
>> 
>>> Hey Paul,
>>> 
>>> I'm taking you up on your earlier offer of some help in the release process for
0.3. I've run into a problem with step 16 (https://cwiki.apache.org/confluence/display/OODT/Release+Process)
which is the release:prepare step for staging a repository at repository.apache.org.
>>> 
>>> I've been able to set up my keys, my environment, and process through all of
the steps just fine up to that point. What happens here is, about halfway through, it gets
to the point where (i think) it is trying to ask for my gpg key passphrase. The problem is,
no matter what I've tried (details below), I can't get it to actually present me with a prompt
so that I can enter my passphrase. The end of the output log looks like:
>>> 
>>> [INFO] [INFO] ------------------------------------------------------------------------
>>> [INFO] [INFO] Building OODT Core
>>> [INFO] [INFO]    task-segment: [clean, verify]
>>> [INFO] [INFO] ------------------------------------------------------------------------
>>> [INFO] [INFO] [clean:clean {execution: default-clean}]
>>> [INFO] [INFO] Setting property: classpath.resource.loader.class => 'org.codehaus.plexus.velocity.ContextClassLoaderResourceLoader'.
>>> [INFO] [INFO] Setting property: velocimacro.messages.on => 'false'.
>>> [INFO] [INFO] Setting property: resource.loader => 'classpath'.
>>> [INFO] [INFO] Setting property: resource.manager.logwhenfound => 'false'.
>>> [INFO] [INFO] [remote-resources:process {execution: default}]
>>> [INFO] [INFO] [site:attach-descriptor {execution: default-attach-descriptor}]
>>> [INFO] [INFO] Parent project loaded from repository.
>>> [INFO] [INFO] Preparing source:jar
>>> [INFO] [WARNING] Removing: jar from forked lifecycle, to prevent recursive invocation.
>>> [INFO] [INFO] No goals needed for project - skipping
>>> [INFO] [INFO] [source:jar {execution: attach-sources}]
>>> [INFO] [INFO] Preparing javadoc:javadoc
>>> [INFO] [WARNING] Removing: jar from forked lifecycle, to prevent recursive invocation.
>>> [INFO] [WARNING] Removing: javadoc from forked lifecycle, to prevent recursive
invocation.
>>> [INFO] [INFO] No goals needed for project - skipping
>>> [INFO] [WARNING] DEPRECATED [aggregate]: since 2.5. Use the goals <code>javadoc:aggregate</code>
and <code>javadoc:test-aggregate</code> instead.
>>> [INFO] [INFO] [javadoc:javadoc {execution: attach-javadocs}]
>>> [INFO] [WARNING] DEPRECATED [aggregate]: since 2.5. Use the goals <code>javadoc:aggregate</code>
and <code>javadoc:test-aggregate</code> instead.
>>> [INFO] [INFO] [javadoc:jar {execution: attach-javadocs}]
>>> [INFO] [INFO] Not executing Javadoc as the project is not a Java classpath-capable
package
>>> [INFO] [INFO] [gpg:sign {execution: default}]
>>> 
>>> ... and then it hangs.
>>> 
>>> I've tried running through the steps on the following environments:
>>> 
>>> 1) on people.apache.org (Maven 2.2.1, GPG 2.0.17) via ssh & via ssh -Y from
both the Mac (terminal and X11) and Linux (native) terminals
>>> 2) locally on an Ubuntu 10.04 laptop (Maven 2.2.1, GPG 1.4.10) through its native
terminal
>>> 3) locally on a Mac OSX 10.6.3 laptop (Maven 2.2.0) in both the terminal and
X11
>>> 
>>> After speaking to Chris about this, I found out he had had success using version
2.x of GPG via X11, so I have built that (and all the dependencies) on my Mac, and re-run
the process in both the terminal and X11, to no avail.
>>> 
>>> I currently have the following for Maven:
>>> 
>>> tension:apache-oodt-0.3-src ahart$ mvn --version
>>> Apache Maven 2.2.0 (r788681; 2009-06-26 06:04:01-0700)
>>> Java version: 1.6.0_17
>>> Java home: /System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home
>>> Default locale: en_US, platform encoding: MacRoman
>>> OS name: "mac os x" version: "10.6.3" arch: "x86_64" Family: "mac"
>>> 
>>> and the following for GPG2:
>>> 
>>> tension:apache-oodt-0.3-src ahart$ gpg2 --version
>>> gpg (GnuPG) 2.0.17
>>> libgcrypt 1.4.2
>>> Copyright (C) 2011 Free Software Foundation, Inc.
>>> License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
>>> This is free software: you are free to change and redistribute it.
>>> There is NO WARRANTY, to the extent permitted by law.
>>> 
>>> Home: ~/.gnupg
>>> Supported algorithms:
>>> Pubkey: RSA, ELG, DSA
>>> Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128,
>>>      CAMELLIA192, CAMELLIA256
>>> Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
>>> Compression: Uncompressed, ZIP, ZLIB, BZIP2
>>> 
>>> I can confirm that I have gpg-agent (the program that apparently is supposed
to handle this action) installed:
>>> 
>>> tension:apache-oodt-0.3-src ahart$ gpg-agent --version
>>> gpg-agent (GnuPG) 2.0.17
>>> libgcrypt 1.4.2
>>> Copyright (C) 2011 Free Software Foundation, Inc.
>>> License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
>>> This is free software: you are free to change and redistribute it.
>>> There is NO WARRANTY, to the extent permitted by law.
>>> 
>>> There are a number of threads / mail messages out there:
>>> 
>>> http://maven.40175.n5.nabble.com/maven-gpg-plugin-blocked-during-the-execution-td2835265.html
>>> http://jira.codehaus.org/browse/MGPG-9
>>> http://jira.codehaus.org/browse/MRELEASE-424
>>> 
>>> in which people discuss a similar problem and various solutions. I confess, however,
that my Maven skills are not yet to the point where I fully understand how to implement some
of the proposed solutions. As you were the RM for 0.2, I would really appreciate any help
or insight you might be able to offer here!
>>> 
>>> Thanks!
>>> 
>>> Andrew.
>>> 
>>> 
>>> 
>>> 
> 
> 
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> Chris Mattmann, Ph.D.
> Senior Computer Scientist
> NASA Jet Propulsion Laboratory Pasadena, CA 91109 USA
> Office: 171-266B, Mailstop: 171-246
> Email: chris.a.mattmann@nasa.gov
> WWW:   http://sunset.usc.edu/~mattmann/
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> Adjunct Assistant Professor, Computer Science Department
> University of Southern California, Los Angeles, CA 90089 USA
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> 


Mime
View raw message