...
Create a RSA GPG key of length 4096, upload it to the public server, and add it to the KEYS file (do this process once for each release lead):
See more detailed instructions on creating the key here: https://www.apache.org/dev/openpgp.html#generate-key. Instructions for updating the KEYS file can be found here: https://github.com/apache/incubator-mxnet/blob/master/KEYS#L9-L13. at the beginning of the KEYS file. Note that you must use apache email instead of personal email for the key. The following instructions shows how to update the key using svn on dev repo in dist.apache.org. (The process needs to be repeated for the release repo)
| Code Block |
|---|
| language | bash |
|---|
| theme | Midnight |
|---|
| title | Adding Keys |
|---|
|
# checkout the apache mxnet repo
svn co https://dist.apache.org/repos/dist/devrelease/incubator/mxnet apache-mxnet
cd apache-mxnet
# update the KEYS file ...
# commit the update
svn commit -m “update keys file for xxx ” --username your_username --password your_passwd |
...
| Code Block |
|---|
| language | bash |
|---|
| theme | Midnight |
|---|
|
svn co https://dist.apache.org/repos/dist/dev/incubator/mxnet && cd mxnet/#.#.#.rc0
brew install gpg coreutils
wget https://downloads.apache.org/incubator/mxnet/KEYS
gpg --import ../KEYS |
| Code Block |
|---|
| language | bash |
|---|
| theme | Midnight |
|---|
| title | validate the signatures |
|---|
| linenumbers | true |
|---|
|
gpg --verify ./apache-mxnet-src-0.11.0.rc3-incubating.tar.gz.asc
gsha512sum --check ./apache-mxnet-src-0.11.0.rc1-incubating.tar.gz.sha512
|
...
