On 05/10/2021 14:19, Christopher Schultz wrote:
On 10/5/21 03:49, Mark Thomas wrote:
<snip/>
I believe this is fixed. The Maven repository is now closed and the
staging repository in the original VOTE is available:
https://repository.apache.org/content/repositories/orgapachetomcat-1337
What sorcery did you apply, here?
I cheated ;) I have SSH access to the box that hosts repository.a.o
rsync the staging repo to my local machine
sign everything that needed signing
rsync the *.asc files back to my home dir on repository.a.o
set file permissions correctly
rsync the *.asc files to the right place on repository.a.o
close the repository via the UI
The files that were in the repository are unchanged. All I have done
is signed the files that were missing signatures (*.jar, *.zip,
*.tar.gz and *.pom) and the closed the repository.
There were so many files I wasn't sure where to begin. Were you able to
get a comprehensive listing of the files in there in order to download
them? I also don't know the mechanism for uploading them (it's all done
by the build script, which presumably you wrote).
I just grabbed the whole directory structure and then did a recursive
find to sign everything with a given file extension. Repeat for each
file type that needed to be signed.
From memory, it was jfclere that updated the build scripts to talk to
Nexus.
I suggest allowing 24 hours for anyone who voted to change their vote
if they wish and then either complete the release if the votes remain
unchanged or create a 8.5.73 release if there are any -1 votes.
So the files were produced by me but signed by you. That shouldn't be a
problem unless someone wants to claim that a Tomcat release must be done
by a single person, which is of course completely untrue.
+1
Thanks for doing this. I'd love the details so I can recover in the
future if necessary.
Generally, this will need someone from the infra team to fix this. At
least the way I fixed it anyway. There might be a way to fix this via
the UI but I couldn't see one although as the creator of the repository
you might have a few more options.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
