Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • You need to have the latest pinot code base in your local machine
  • You need to ensure that you have the access to Apache Repository Manager. Try to log in with Apache LDAP credential.
  • You need to check out Apache staging & release distribution directories for Pinot.

    Code Block
    languagebash
    svn co https://dist.apache.org/repos/dist/release/incubator/pinot pinot-release-dist
    svn co https://dist.apache.org/repos/dist/dev/incubator/pinot pinot-dev-dist


GPG Keys

The release manager must hold a GPG key for signing the release artifacts. GPG key has to be associated with the apache email address. One can create the GPG by using the following cmd. Note that the key length should be 4096 bits. Please refer to the example below:

Code Block
languagebash
$ gpg2 --full-generate-key
gpg (GnuPG) 2.1.22; Copyright (C) 2017 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Please select what kind of key you want:
(1) RSA and RSA (default)
(2) DSA and Elgamal
(3) DSA (sign only)
(4) RSA (sign only)
Your selection? 1
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048) 4096
Requested keysize is 4096 bits
Please specify how long the key should be valid.
0 = key does not expire
<n> = key expires in n days
<n>w = key expires in n weeks
<n>m = key expires in n months
<n>y = key expires in n years
Key is valid for? (0)
Key does not expire at all
Is this correct? (y/N) y

GnuPG needs to construct a user ID to identify your key.

Real name: Seunghyun Lee
Email address: snlee@apache.org
Comment:
You selected this USER-ID:
"Seunghyun Lee <snlee@apache.org>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
gpg: key 1A8DCF066150AF71 marked as ultimately trusted
gpg: revocation certificate stored as '/Users/snlee/.gnupg/openpgp-revocs.d/F33D2AF06BFF4EE9FB08F3881A8DCF066150AF71.rev'
public and secret key created and signed.

pub rsa4096 2019-03-20 [SC]
F33D2AF06BFF4EE9FB08F3881A8DCF066150AF71
uid Seunghyun Lee <snlee@apache.org>
sub rsa4096 2019-03-20 [E]

Reference

  1. http://plc4x.apache.org/developers/release.html
  2. https://cwiki.apache.org/confluence/display/GOBBLIN/Release+Process

...