Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Make sure your release notes have been updated for any new commits, and go through the previous steps if necessary.
  2. Build the release (binary and source versions) after running unit tests. Manually create the md5 files. On a Mac use md5 in place of md5sumsha256 files.

    No Format
    % mvn install -Pdist -DskipTests -Dmaven.javadoc.skip=true -DcreateChecksum=true
    
    % cd packaging/target
    % shasum -a md5256 apache-hive-X.Y.Z-bin.tar.gz > apache-hive-X.Y.Z-bin.tar.gz.md5sha256
    % md5 shasum -a 256 apache-hive-X.Y.Z-src.tar.gz > apache-hive-X.Y.Z-src.tar.gz.md5sha256
  3. Verify that the MD5 checksums SHA 256 checksums are valid:

    No Format
    % md5sum shasum -a 256 -c apache-hive-X.Y.Z-bin.tar.gz.md5sha256
    apache-hive-X.Y.Z-bin.tar.gz: OK
    
    % shasum -a md5sum256 -c apache-hive-X.Y.Z-src.tar.gz.md5sha256
    apache-hive-X.Y.Z-src.tar.gz: OK
    
  4. Check that release file looks ok -- e.g., install it and run examples from tutorial.
  5. Setup your PGP keys for signing the release, if you don't have them already.
    1. See http://www.apache.org/dev/release-signing.html, http://www.apache.org/dev/openpgp.html.
  6. Sign the release (see Step-By-Step Guide to Mirroring Releases for more information).

    No Format
    % gpg --armor --output apache-hive-X.Y.Z-bin.tar.gz.asc --detach-sig apache-hive-X.Y.Z-bin.tar.gz
    % gpg --armor --output apache-hive-X.Y.Z-src.tar.gz.asc --detach-sig apache-hive-X.Y.Z-src.tar.gz
    
  7. Copy release files to a public place.

    No Format
    % ssh people.apache.org mkdir public_html/apache-hive-X.Y.Z-rc-0
    % scp -p apache-hive-X.Y.Z*.tar.gz* people.apache.org:public_html/apache-hive-X.Y.Z-rc-0
    
  8. Publish Maven artifacts to the Apache staging repository:

    No Format
    % mvn deploy -DskipTests -Papache-release -Dmaven.javadoc.skip=true
    
  9. Login to the Apache Nexus server and "close" the staged repository. This makes the artifacts available at a temporary URL.

...

  1. Verifying the PGP signature:

    No Format
    #get the hive committers keys file
    wget http://www.apache.org/dist/hive/KEYS 
    or 
    wget https://people.apache.org/keys/group/hive.asc
    
    gpg --import <keys file>
    gpg --verify hive-X.Y.Z-bin.tar.gz.asc  hive-X.Y.Z-bin.tar.gz
    gpg --verify hive-X.Y.Z.tar.gz.asc  hive-X.Y.Z.tar.gz
    
    
  2. Verifying the md5 checksumsha256 checksum:
    See the step under Building.

...