From e85dc52f4a0acc55982a48181bdcf05127afb6fd Mon Sep 17 00:00:00 2001 From: Vinish Reddy Date: Fri, 2 Aug 2024 02:02:58 +0530 Subject: [PATCH] Simplify guide for XTable --- pom.xml | 5 +- release/release_guide.md | 497 ++++++++++++++++++ release/scripts/create_source_release.sh | 72 +++ release/scripts/cut_release_branch.sh | 139 +++++ release/scripts/deploy_staging_jars.sh | 57 ++ .../scripts/validate_source_binary_files.sh | 29 + release/scripts/validate_source_copyright.sh | 51 ++ release/scripts/validate_source_rat.sh | 20 + release/scripts/validate_staged_bundles.sh | 49 ++ release/scripts/validate_staged_release.sh | 132 +++++ 10 files changed, 1048 insertions(+), 3 deletions(-) create mode 100644 release/release_guide.md create mode 100755 release/scripts/create_source_release.sh create mode 100755 release/scripts/cut_release_branch.sh create mode 100644 release/scripts/deploy_staging_jars.sh create mode 100644 release/scripts/validate_source_binary_files.sh create mode 100644 release/scripts/validate_source_copyright.sh create mode 100644 release/scripts/validate_source_rat.sh create mode 100644 release/scripts/validate_staged_bundles.sh create mode 100644 release/scripts/validate_staged_release.sh diff --git a/pom.xml b/pom.xml index 5e80e419..cf0d5632 100644 --- a/pom.xml +++ b/pom.xml @@ -23,6 +23,8 @@ org.apache.xtable xtable xtable + 0.1.0-SNAPSHOT + pom org.apache @@ -30,9 +32,6 @@ 31 - 0.1.0-SNAPSHOT - pom - xtable-api xtable-core diff --git a/release/release_guide.md b/release/release_guide.md new file mode 100644 index 00000000..276091b1 --- /dev/null +++ b/release/release_guide.md @@ -0,0 +1,497 @@ + + +# Introduction + +Apache XTable, currently an incubating project at the Apache Software Foundation (ASF), is a cross-table converter for table formats that facilitates omni-directional interoperability across data processing systems and query engines. +This guide outlines the steps for releasing Apache XTable versions, following the ASF policies and incorporating practices from other successful ASF projects. + +# Legal Reminders + +Releasing software under the ASF banner requires adherence to the [ASF Release Policy](https://infra.apache.org/release-publishing.html) and [Incubator Release Guidelines](https://incubator.apache.org/guides/releasemanagement.html#best-practice). +Please ensure all releases comply with these guidelines, focusing on proper licensing, source code distribution, and community approval. + +# Overview + +The release process consists of several steps: + +1. Decide to release +2. Prepare for the release +3. Build a release candidate +4. Vote on the release candidate +5. During vote process, run validation tests +6. If necessary, fix any issues and go back to step 3. +7. Finalize the release +8. Promote the release + +# Decide to release + +Anybody can propose a release on the dev@ mailing list, giving a solid argument and nominating a committer as the +Release Manager (including themselves). There’s no formal process, no vote requirements, and no timing requirements. Any +objections should be resolved by consensus before starting the release. + +# Prepare for the release + +_Before your first release, you should perform one-time configuration steps. This will set up your security keys for +signing the release and access to various release repositories._ + +To prepare for each release, you should audit the project status in the Github issue tracker for any release-blockers and ensure all of them are resolved. +Finally, you should create a release branch from which individual release candidates will be built. + +**NOTE**: If you are +using [GitHub two-factor authentication](https://help.github.com/articles/securing-your-account-with-two-factor-authentication-2fa/) +and haven’t configure HTTPS access, please +follow [the guide](https://help.github.com/articles/creating-a-personal-access-token-for-the-command-line/) to configure +command line access. + +## One-time Setup Instructions + +You need to have a GPG key to sign the release artifacts. Please be aware of the +ASF-wide [release signing guidelines](https://www.apache.org/dev/release-signing.html). If you don’t have a GPG key +associated with your Apache account, please follow the instructions below. + +### Create GPG public key with apache email + +- Install gpg using [https://gpgtools.org/](https://gpgtools.org/). +- Create gpg key with your apache emailId. +- Export the KeyId into an environment variable KEY_ID + +```shell +LOCAL_SVN_DIR=local_svn_dir +mkdir -p ~/$LOCAL_SVN_DIR && cd $LOCAL_SVN_DIR +svn checkout https://dist.apache.org/repos/dist/dev/incubator/xtable && cd xtable +email=yourapacheemailusername@apache.org +(gpg --list-sigs ${email} && gpg --armor --export ${name}) >> KEYS +svn --username=${apache_username} --password=${passowrd} commit -m "Add xtable directory and keys" +``` + +### Submit your GPG public key into MIT PGP Public Key Server + +In order to make yourself have the right permission to stage java artifacts in Apache Nexus staging repository, please +submit your GPG public key into [MIT PGP Public Key Server](http://pgp.mit.edu:11371/). + +Also send public key to ubuntu server via + +```shell +gpg --keyserver hkp://keyserver.ubuntu.com --send-keys ${KEY_ID} # send public key to ubuntu server +gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys ${KEY_ID} # verify +``` + +would also refer +to [stackoverflow](https://stackoverflow.com/questions/19462617/no-public-key-key-with-id-xxxxx-was-not-able-to-be-located-oss-sonatype-org) + +### Access to Apache Nexus repository + +Configure access to the Apache Nexus repository, which enables final deployment of releases to the Maven Central +Repository. + +1. You log in with your Apache account. +2. Confirm you have appropriate access by finding org.apache.xtable under Staging Profiles. +3. Navigate to your Profile (top right dropdown menu of the page). +4. Choose User Token from the dropdown, then click Access User Token. Copy a snippet of the Maven XML configuration + block. +5. Insert this snippet twice into your global Maven settings.xml file, typically ${HOME}/.m2/settings.xml. The end + result should look like this, where TOKEN_NAME and TOKEN_PASSWORD are your secret tokens: + +```xml + + + + apache.releases.https + TOKEN_NAME + TOKEN_PASSWORD + + + apache.snapshots.https + TOKEN_NAME + TOKEN_PASSWORD + + + +``` + + +## Create a release branch in apache/incubator-xtable repository + +**Skip this step if it is a bug fix release. But do set the env variables.** + +Release candidates are built from a release branch. As a final step in preparation for the release, you should create the release branch, push it to the Apache code repository, and update version information on the original branch. + +Export Some Environment variables in the terminal where you are running the release scripts + +- export RELEASE_VERSION= +- export NEXT_VERSION= +- export RELEASE_BRANCH=release- +- export RC_NUM= + +Use cut_release_branch.sh to cut a release branch + +- Script: [cut_release_branch.sh](https://github.com/apache/incubator-xtable/blob/master/scripts/release/cut_release_branch.sh) + +Usage + +```shell +# Cut a release branch +./release/scripts/cut_release_branch.sh \ +--release=${RELEASE_VERSION} \ +--next_release=${NEXT_VERSION} \ +--rc_num=${RC_NUM} +# Show help page +./incubator-xtable/release/scripts/cut_release_branch.sh -h +``` + +## Verify that a Release Build Works + +Run "mvn -Prelease clean install" to ensure that the build processes are in good shape. // You need to execute this command once you have the release branch in apache/incubator-xtable + +```shell +mvn -Prelease clean install +``` + +# Build a release candidate + +The core of the release process is the build-vote-fix cycle. Each cycle produces one release candidate. The Release Manager repeats this cycle until the community approves one release candidate, which is then finalized. + +Set up a few environment variables to simplify Maven commands that follow. This identifies the release candidate being built. Start with RC_NUM equal to 1 and increment it for each candidate. + +1. git checkout ${RELEASE_BRANCH} +2. Run mvn version to set the proper rc number in all artifacts + 1. mvn versions:set -DnewVersion=${RELEASE_VERSION}-rc${RC_NUM} +3. Run Unit tests and ensure they succeed + 1. mvn test +4. Run Integration Tests and ensure they succeed + 1. mvn verify +5. Commit and push this change to RELEASE branch + 1. git commit -am "Bumping release candidate number ${RC_NUM}" + > There will be some backup files created which needs to be removed. + > + > You could do "git clean -fd" before doing the commit. + 2. git push origin ${RELEASE_BRANCH} + > If you already have a remote tag with same name as your branch, you can try below command. + > + > git push origin refs/heads/${RELEASE_BRANCH} + > + > "refs/heads/" refers to a branch. + > + > "refs/tags/" refers to tag. +6. Generate Source Release: This will create the tarball under incubator-xtable/src_release directory + 1. git checkout ${RELEASE_BRANCH} + 2. cd release && ./scripts/create_source_release.sh + > If you have multiple gpg keys(gpg --list-keys), then the signing command will take in the first key most likely. + > You will release this when it asks for a passphrase in a pop up. + > When asked for passphrase, ensure the intended key is the one asked for. + > + > Command used in script: + > + > gpg --armor --detach-sig ${RELEASE_DIR}/incubator-xtable-${RELEASE_VERSION}.src.tgz + > + > To use a specific key: update as follows: // replace FINGERPRINT + > + > gpg --local-user [FINGERPRINT] --armor --detach-sig ${RELEASE_DIR}/incubator-xtable-${RELEASE_VERSION}.src.tgz + 3. Verify Source release is signed and buildable + 1. cd ../src_release + 2. gpg --verify incubator-xtable-${RELEASE_VERSION}-rc${RC_NUM}.src.tgz.asc incubator-xtable-${RELEASE_VERSION}-rc${RC_NUM}.src.tgz + 3. tar -zxvf incubator-xtable-${RELEASE_VERSION}-rc${RC_NUM}.src.tgz && cd incubator-xtable-${RELEASE_VERSION}-rc${RC_NUM} && mvn clean package -DskipTests -Pintegration-tests + 4. If they pass, delete the repository we got from the tar-ball + - cd ../ && rm -rf incubator-xtable-${RELEASE_VERSION}-rc${RC_NUM} + +7. Create tag + 1. git tag -s release-${RELEASE_VERSION}-rc${RC_NUM} -m "${RELEASE_VERSION}". + > If you run into some issues, and if want to re-run the same candidate again from start, ensure you delete existing tags before retrying again. + > + > // to remove local + > + > git tag -d release-${RELEASE_VERSION}-rc${RC_NUM} + > + > // to remove remote + > + > git push --delete origin release-${RELEASE_VERSION}-rc${RC_NUM} + 2. if apache repo is origin. + > git push origin release-${RELEASE_VERSION}-rc${RC_NUM} + > + > If a branch with the same name already exists in origin, this command might fail as below. + > + > error: src refspec release-0.5.3 matches more than one + > + > error: failed to push some refs to 'https://github.com/apache/incubator-xtable.git' + > + > In such a case, try below command + > + > git push origin refs/tags/release-${RELEASE_VERSION}-rc${RC_NUM} + +8. [Stage source releases](https://www.apache.org/legal/release-policy.html#stage) on [dist.apache.org](http://dist.apache.org/) + 1. If you have not already, check out the xtable section of the dev repository on [dist.apache.org](http://dist.apache.org/) via Subversion. In a fresh directory + 2. if you would not checkout, please try svn checkout [https://dist.apache.org/repos/dist/dev/incubator/xtable](https://dist.apache.org/repos/dist/dev/incubator/xtable) again. + 1. svn checkout [https://dist.apache.org/repos/dist/dev/incubator/xtable](https://dist.apache.org/repos/dist/dev/incubator/xtable) --depth=immediates + 3. Make a directory for the new release: + 1. mkdir xtable/incubator-xtable-${RELEASE_VERSION}-rc${RC_NUM} + 4. Copy incubator-xtable source distributions, hashes, and GPG signature: + 1. mv /src_release/* xtable/incubator-xtable-${RELEASE_VERSION}-rc${RC_NUM} + 5. Add and commit all the files. + 1. cd xtable + 2. svn add incubator-xtable-${RELEASE_VERSION}-rc${RC_NUM} + 3. svn commit + 6. Verify that files are [present](https://dist.apache.org/repos/dist/dev/incubator/xtable) + 7. Run Verification Script to ensure the source release is sane + 1. For RC: cd release && ./scripts/validate_staged_release.sh --release=${RELEASE_VERSION} --rc_num=${RC_NUM} --verbose + 2. For finalized release in dev: cd scripts && ./scripts/validate_staged_release.sh --release=${RELEASE_VERSION} --verbose + +9. Deploy maven artifacts and verify + 1. This will deploy jar artifacts to the Apache Nexus Repository, which is the staging area for deploying jars to Maven Central. + 2. Review all staged artifacts (https://repository.apache.org/). They should contain all relevant parts for each module, including pom.xml, jar, test jar, source, test source, javadoc, etc. Carefully review any new artifacts. + 3. git checkout ${RELEASE_BRANCH} + 4. mvn deploy -Prelease -DskipTests -DdeployArtifacts=true + 1. when prompted for the passphrase, if you have multiple gpg keys in your keyring, make sure that you enter the right passphase corresponding to the same key (FINGERPRINT) as used while generating source release in step f.ii. + > If the prompt is not for the same key (by default the maven-gpg-plugin will pick up the first key in your keyring so that could be different), then add the following option to your ~/.gnupg/gpg.conf file + 2. make sure your IP is not changing while uploading, otherwise it creates a different staging repo + 3. Use a VPN if you can't prevent your IP from switching + 5. Review all staged artifacts by logging into Apache Nexus and clicking on "Staging Repositories" link on left pane. Then find a "open" entry for apachextable + 6. Once you have ensured everything is good and validation of step 7 succeeds, you can close the staging repo. Until you close, you can re-run deploying to staging multiple times. But once closed, it will create a new staging repo. So ensure you close this, so that the next RC (if need be) is on a new repo. So, once everything is good, close the staging repository on Apache Nexus. When prompted for a description, enter + > Apache incubator-xtable, version `${RELEASE_VERSION}`, release candidate `${RC_NUM}`. + 7. After closing, run the script to validate the staged bundles again: + ```shell + ./scripts/release/validate_staged_bundles.sh orgapachextable- ${RELEASE_VERSION}-rc${RC_NUM} 2>&1 | tee -a /tmp/validate_staged_bundles_output.txt + ``` + +## Checklist to proceed to the next step + +1. Maven artifacts deployed to the staging repository of repository.apache.org +2. Source distribution deployed to the dev repository of dist.apache.org and validated + +# Vote on the release candidate + +Once you have built and individually reviewed the release candidate, please share it for the community-wide(dev@incubator-xtable ) review. Please review foundation-wide voting guidelines for more information. + +Start the review-and-vote thread on the dev@ mailing list. Here’s an email template; please adjust as you see fit. + +``` +From: Release Manager + +To: dev@incubator-xtable.apache.org + +Subject: [VOTE] Release 1.2.3, release candidate #3 + + + +Hi everyone, + +Please review and vote on the release candidate #3 for the version 1.2.3, as follows: + +[ ] +1, Approve the release + +[ ] -1, Do not approve the release (please provide specific comments) + + + +The complete staging area is available for your review, which includes: + +* GH release notes [1], + +* the official Apache source release and binary convenience releases to be deployed to dist.apache.org [2], which are signed with the key with fingerprint FFFFFFFF [3], + +* all artifacts to be deployed to the Maven Central Repository [4], + +* source code tag "1.2.3-rc3" [5], + + + +The vote will be open for at least 72 hours. It is adopted by majority approval, with at least 3 PMC affirmative votes. + + + +Thanks, + +Release Manager + + + +[1] link + +[2] link + +[3] https://dist.apache.org/repos/dist/release/incubator/xtable/KEYS + +[4] link + +[5] link + +[6] link +``` + +If there are any issues found in the release candidate, reply on the vote thread to cancel the vote, and there’s no need to wait 72 hours if any issues found. Proceed to the Fix Issues step below and address the problem. However, some issues don’t require cancellation. For example, if an issue is found in the website, just correct it on the spot and the vote can continue as-is. + +If there are no issues, reply on the vote thread to close the voting. Then, tally the votes in a separate email. Here’s an email template; please adjust as you see fit. + +``` +From: Release Manager + +To: dev@xtable.apache.org + +Subject: [RESULT] [VOTE] Release 1.2.3, release candidate #3 + + + +I'm happy to announce that we have unanimously approved this release. + + + +There are XXX approving votes, XXX of which are binding: + +* approver 1 + +* approver 2 + +* approver 3 + +* approver 4 + + + +There are no disapproving votes. + + + +Thanks everyone! +``` + +## Checklist to proceed to the finalization step + +Community votes to release the proposed candidate, with at least three approving PMC votes + +# Fix any issues + +Any issues identified during the community review and vote should be fixed in this step. + +Code changes should be proposed as standard pull requests to the master branch and reviewed using the normal contributing process. Then, relevant changes should be cherry-picked into the release branch. The cherry-pick commits should then be proposed as the pull requests against the release branch, again reviewed and merged using the normal contributing process. + +Once all issues have been resolved, you should go back and build a new release candidate with these changes. + +## Checklist to proceed to the next step + +Issues identified during vote have been resolved, with fixes committed to the release branch. + +# Finalize the release + +Once the release candidate has been reviewed and approved by the community, the release should be finalized. This involves the final deployment of the release candidate to the release repositories, merging of the website changes, etc. + +## Current follow the below steps to finalize the release. + +1. Drop all RC orgapachextable-XXX in [Apache Nexus Staging Repositories](https://repository.apache.org/#stagingRepositories). +2. change the version from ${RELEASE_VERSION}-rc${RC_NUM} to ${RELEASE_VERSION} against release branch, use command `mvn versions:set -DnewVersion=${RELEASE_VERSION}`, e.g. change 0.5.1-rc1 to 0.5.1. +3. Commit and push the version change to release branch. + 1. git commit -am "[MINOR] Update release version to reflect published version ${RELEASE_VERSION}" + 2. git push origin release-${RELEASE_VERSION} +4. Repeat the steps from **_Generate Source Release (f) to Stage source releases on [dist.apache.org](http://dist.apache.org/) (i)_**. Including staging jars with the release version and uploading source release. + > **Note that make sure remove the -rc${RC_NUM} suffix when repeat the above steps. and please also verify the steps. Ensure git tag is also done without -rc${RC_NUM}** +5. One more step is to [deploy source code to release](https://www.apache.org/legal/release-policy.html#upload-ci) dist. [https://dist.apache.org/repos/dist/release/incubator/xtable](https://dist.apache.org/repos/dist/release/incubator/xtable). + Only PMC will have access to this repo. So, if you are not a PMC, do get help from somone who is. + 1. svn checkout https://dist.apache.org/repos/dist/release/incubator/xtable --depth=immediates, if you would not checkout, please try svn checkout https://dist.apache.org/repos/dist/release/incubator/xtable again. + 2. Make a directory for the new release: + ```shell + mkdir incubator-xtable/${RELEASE_VERSION} + ``` + 3. Copy incubator-xtable source distributions, hashes, and GPG signature: + ```shell + mv /src_release/* incubator-xtable/${RELEASE_VERSION} + ``` + 4. Add and commit all the files. + ```shell + cd incubator-xtable + svn add ${RELEASE_VERSION} + svn commit + ``` + 5. Verify that files are [present](https://dist.apache.org/repos/dist/release/incubator/xtable) +6. Use the Apache Nexus repository to release the staged binary artifacts to the Maven Central repository. In the Staging Repositories section, find the relevant release candidate orgapachextable-XXX entry and click `Release`. + > Note: make sure and check you click `Release` repo, it cannot be withdrawn. +7. Drop all other release candidates that are not being released. It can take up to 24 hours for the new release to show up in [Maven Central repository](https://search.maven.org/search?q=g:org.apache.xtable). +8. Finalize the Release in GH by providing the release date. +9. Update [DOAP] + +# Promote the release + +Once the release has been finalized, the last step of the process is to promote the release within the project and beyond. Please wait for 1h after finalizing the release in accordance with the [ASF release policy](http://www.apache.org/legal/release-policy.html#release-announcements). +We need to create a blog post in https://xtable.apache.org/ which provides details about the release including a high-level description of major changes + +## Apache mailing lists + +Announce on the dev@ mailing list that the release has been finished. + +Announce on the release on the user@ mailing list, listing major improvements and contributions. + +Announce the release on the [announce@apache.org](announce@apache.org) mailing list. **NOTE**: put [announce@apache.org](announce@apache.org) in **bcc** to avoid disrupting people with followups. + +Considering that announce@ ML has restrictions on what is published, we can follow this email template: + +``` +From: Release Manager + +To: announce@apache.org + +Subject: [ANNOUNCE] Apache incubator-xtable released + + + +The Apache incubator-xtable team is pleased to announce the release of Apache + +incubator-xtable . + + + +Apache incubator-xtable manages storage of large analytical + +datasets on DFS (Cloud stores, HDFS or any Hadoop FileSystem compatible storage) + +and provides the ability to query them. + + + +This release comes xxx months after xxx. It includes more than +xxx resolved issues, comprising of a few new features as well as +general improvements and bug-fixes. It includes support for +xxx, xxx, xxx, and many more bug fixes and improvements. + +For details on how to use incubator-xtable, please look at the quick start page located at https://xtable.apache.org/docs/quick-start-guide.html + +If you'd like to download the source release, you can find it here: + +https://github.com/apache/incubator-xtable/releases/tag/ + +You can read more about the release (including release notes) here: + +We welcome your help and feedback. For more information on how to +report problems, and to get involved, visit the project website at: + +https://xtable.apache.org/ + +Thanks to everyone involved! + +XXX +``` + +## Recordkeeping + +Use [reporter.apache.org](http://reporter.apache.org/) to seed the information about the release into future project reports. + +## Social media + +Tweet, post on Facebook, LinkedIn, and other platforms. Ask other contributors to do the same. + +# Improve the process + +It is important that we improve the release processes over time. Once you’ve finished the release, please take a step back and look what areas of this process and be improved. Perhaps some part of the process can be simplified. Perhaps parts of this guide can be clarified. + +If we have specific ideas, please start a discussion on the dev@ mailing list and/or propose a pull request to update this guide. Thanks! \ No newline at end of file diff --git a/release/scripts/create_source_release.sh b/release/scripts/create_source_release.sh new file mode 100755 index 00000000..fcfd72f8 --- /dev/null +++ b/release/scripts/create_source_release.sh @@ -0,0 +1,72 @@ +#!/bin/bash +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +## Variables with defaults (if not overwritten by environment) +## +MVN=${MVN:-mvn} + +# fail immediately +set -o errexit +set -o nounset +# print command before executing +set -o xtrace + +CURR_DIR=`pwd` +if [[ `basename $CURR_DIR` != "release" ]] ; then + echo "You have to call the script from the release/ dir" + exit 1 +fi + +RELEASE_VERSION=`grep -A 5 "incubator-xtable" ../pom.xml | grep '' | sed -e 's///' -e 's/<\/version>//' -e 's/ //g'` + +if [ -z "${RELEASE_VERSION}" ]; then + echo "RELEASE_VERSION was not set." + exit 1 +fi + +echo "RELEASE_VERSION=${RELEASE_VERSION}" + +########################### + +cd .. + +XTABLE_DIR=`pwd` +RELEASE_DIR=${XTABLE_DIR}/src_release +CLONE_DIR=${RELEASE_DIR}/incubator-xtable-tmp-clone + +echo "Creating source package" + +rm -rf ${RELEASE_DIR} +mkdir -p ${RELEASE_DIR} + +# create a temporary git clone to ensure that we have a pristine source release +git clone ${XTABLE_DIR} ${CLONE_DIR} +cd ${CLONE_DIR} + +rsync -a \ + --exclude ".git" --exclude ".gitignore" --exclude ".gitattributes" --exclude ".travis.yml" \ + --exclude ".github" --exclude "target" --exclude ".idea" --exclude "*.iml" --exclude ".DS_Store" \ + --exclude "build-target" --exclude ".rubydeps" --exclude "rfc" --exclude "docker/images" \ + --exclude "assets" --exclude "demo" --exclude "website" . incubator-xtable-$RELEASE_VERSION + +tar czf ${RELEASE_DIR}/incubator-xtable-${RELEASE_VERSION}.src.tgz incubator-xtable-$RELEASE_VERSION +gpg --armor --local-user E391B3E8179C4FD9BB8BF72002AB8E945EFD1E91 --detach-sig ${RELEASE_DIR}/incubator-xtable-${RELEASE_VERSION}.src.tgz +cd ${RELEASE_DIR} +shasum -a 512 incubator-xtable-${RELEASE_VERSION}.src.tgz > incubator-xtable-${RELEASE_VERSION}.src.tgz.sha512 + +cd ${CURR_DIR} +rm -rf ${CLONE_DIR} diff --git a/release/scripts/cut_release_branch.sh b/release/scripts/cut_release_branch.sh new file mode 100755 index 00000000..c315a4d9 --- /dev/null +++ b/release/scripts/cut_release_branch.sh @@ -0,0 +1,139 @@ +#!/bin/bash +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +set -e + +function clean_up(){ + echo "Do you want to clean local clone repo? [y|N]" + read confirmation + if [[ $confirmation = "y" ]]; then + cd ~ + rm -rf ${LOCAL_CLONE_DIR} + echo "Clean up local repo." + fi +} + +if [[ $# -eq 1 && $1 = "-h" ]]; then + echo "This script will update apache incubator-xtable main branch with next release version and cut release branch for current development version." + echo "There are 3 params required:" + echo "--release=\${CURRENT_RELEASE_VERSION}" + echo "--next_release=\${NEXT_RELEASE_VERSION}" + echo "--rc_num=\${RC_NUM}" + exit +else + for param in "$@" + do + if [[ $param =~ --release\=([0-9]\.[0-9]*\.[0-9]) ]]; then + RELEASE=${BASH_REMATCH[1]} + fi + if [[ $param =~ --next_release\=([0-9]\.[0-9]*\.[0-9]) ]]; then + NEXT_VERSION_IN_BASE_BRANCH=${BASH_REMATCH[1]} + fi + if [[ $param =~ --rc_num\=([0-9]*) ]]; then + RC_NUM=${BASH_REMATCH[1]} + fi + done +fi + +if [[ -z "$RELEASE" || -z "$NEXT_VERSION_IN_BASE_BRANCH" || -z "$RC_NUM" ]]; then + echo "This script needs to be ran with params, please run with -h to get more instructions." + exit +fi + + +MAIN_BRANCH=main +NEXT_VERSION_BRANCH=MINOR-move-to-${NEXT_VERSION_IN_BASE_BRANCH} +RELEASE_BRANCH=release-${RELEASE} +GITHUB_REPO_URL=git@github.com:apache/incubator-xtable.git +XTABLE_REPO_DIR=incubator-xtable +LOCAL_CLONE_DIR=incubator-xtable_release_${RELEASE} + +echo "=====================Environment Variables=====================" +echo "version: ${RELEASE}" +echo "next_release: ${NEXT_VERSION_IN_BASE_BRANCH}" +echo "working main branch: ${MAIN_BRANCH}" +echo "working next-version branch: ${NEXT_VERSION_BRANCH}" +echo "working release branch: ${RELEASE_BRANCH}" +echo "local repo dir: ~/${LOCAL_CLONE_DIR}/${XTABLE_REPO_DIR}" +echo "RC_NUM: $RC_NUM" +echo "===============================================================" + +cd ~ +if [[ -d ${LOCAL_CLONE_DIR} ]]; then + rm -rf ${LOCAL_CLONE_DIR} +fi + +mkdir ${LOCAL_CLONE_DIR} +cd ${LOCAL_CLONE_DIR} +git clone ${GITHUB_REPO_URL} +cd ${XTABLE_REPO_DIR} + +# Now, create local release branch +git branch ${RELEASE_BRANCH} + +git checkout ${MAIN_BRANCH} +git checkout -b ${NEXT_VERSION_BRANCH} + +echo "====================Current working branch=====================" +echo ${NEXT_VERSION_BRANCH} +echo "===============================================================" + +# Update main branch +mvn versions:set -DnewVersion=${NEXT_VERSION_IN_BASE_BRANCH}-SNAPSHOT + +echo "===========Update next-version branch as following=============" +git diff +echo "===============================================================" + +echo "Please make sure all changes above are expected. Do you confirm to commit?: [y|N]" +read confirmation +if [[ $confirmation != "y" ]]; then + echo "Exit without committing any changes on main branch." + clean_up + exit +fi + +git commit -am "[MINOR] Moving to ${NEXT_VERSION_IN_BASE_BRANCH}-SNAPSHOT on main branch." + +echo "===============================================================" +echo "!!Please open a PR based on ${NEXT_VERSION_BRANCH} branch for approval!! [Press ENTER to continue]" +read confirmation + +# Checkout and update release branch +git checkout ${RELEASE_BRANCH} +mvn versions:set -DnewVersion=${RELEASE}-rc${RC_NUM} + +echo "==================Current working branch=======================" +echo ${RELEASE_BRANCH} +echo "===============================================================" + +echo "===============Update release branch as following==============" +git diff +echo "===============================================================" + +echo "Please make sure all changes above are expected. Do you confirm to commit?: [y|N]" +read confirmation +if [[ $confirmation != "y" ]]; then + echo "Exit without committing any changes on release branch." + clean_up + exit +fi + +git commit -am "Create release branch for version ${RELEASE}." +git push --set-upstream origin ${RELEASE_BRANCH} + +clean_up diff --git a/release/scripts/deploy_staging_jars.sh b/release/scripts/deploy_staging_jars.sh new file mode 100644 index 00000000..fb20c47c --- /dev/null +++ b/release/scripts/deploy_staging_jars.sh @@ -0,0 +1,57 @@ +#!/bin/bash +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +## Variables with defaults (if not overwritten by environment) +## +MVN=${MVN:-mvn} +# fail immediately +set -o errexit +set -o nounset + +CURR_DIR=$(pwd) +if [ ! -d "$CURR_DIR/packaging" ] ; then + echo "You have to call the script from the repository root dir that contains 'packaging/'" + exit 1 +fi + +if [ "$#" -gt "1" ]; then + echo "Only accept 0 or 1 argument. Use -h to see examples." + exit 1 +fi + + +if [ "${1:-}" == "-h" ]; then + echo " +Usage: $(basename "$0") [OPTIONS] + +Options: + One of the version options below +${joined} +-h, --help +" + exit 0 +fi + + +COMMON_OPTIONS="-DdeployArtifacts=true -DskipTests -DretryFailedDeploymentCount=10" +echo "Cleaning everything before any deployment" +$MVN clean $COMMON_OPTIONS +echo "Building with options +$MVN install $COMMON_OPTIONS + +echo "Deploying to repository.apache.org with version options" +$MVN deploy $COMMON_OPTIONS diff --git a/release/scripts/validate_source_binary_files.sh b/release/scripts/validate_source_binary_files.sh new file mode 100644 index 00000000..c51c0bf4 --- /dev/null +++ b/release/scripts/validate_source_binary_files.sh @@ -0,0 +1,29 @@ +#!/bin/bash +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +set -o errexit +set -o nounset + +echo "Checking for binary files in the source files" +numBinaryFiles=`find . -iname '*' | xargs -I {} file -I {} | grep -va directory | grep -v "release/" | grep -v "/src/test/" | grep -va 'application/json' | grep -va 'text/' | grep -va 'application/xml' | grep -va 'application/json' | wc -l | sed -e s'/ //g'` + +if [ "$numBinaryFiles" -gt "0" ]; then + echo -e "There were non-text files in source release. [ERROR]\n Please check below\n" + find . -iname '*' | xargs -I {} file -I {} | grep -va directory | grep -v "release/release_guide" | grep -v "/src/test/" | grep -va 'application/json' | grep -va 'text/' | grep -va 'application/xml' + exit 1 +fi +echo -e "\t\tNo Binary Files in the source files? - [OK]\n" diff --git a/release/scripts/validate_source_copyright.sh b/release/scripts/validate_source_copyright.sh new file mode 100644 index 00000000..b1a97d2f --- /dev/null +++ b/release/scripts/validate_source_copyright.sh @@ -0,0 +1,51 @@ +#!/bin/bash +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +### Checking for DISCLAIMER-WIP +echo "Checking for DISCLAIMER-WIP" +disclaimerFile="./DISCLAIMER-WIP" +if [ -f "$disclaimerFile" ]; then + echo "DISCLAIMER-WIP file should not be present [ERROR]" + exit 1 +fi +echo -e "\t\tDISCLAIMER-WIP file exists ? [OK]\n" + +### Checking for LICENSE and NOTICE +echo "Checking for LICENSE and NOTICE" +licenseFile="./LICENSE" +noticeFile="./NOTICE" +if [ ! -f "$licenseFile" ]; then + echo "License file missing [ERROR]" + exit 1 +fi +echo -e "\t\tLicense file exists ? [OK]" + +if [ ! -f "$noticeFile" ]; then + echo "Notice file missing [ERROR]" + exit 1 +fi +echo -e "\t\tNotice file exists ? [OK]\n" + +### Licensing Check +echo "Performing custom Licensing Check " +numfilesWithNoLicense=`find . -iname '*' -type f | grep -v NOTICE | grep -v LICENSE | grep -v '.jpg' | grep -v '.json' | grep -v '.hfile' | grep -v '.data' | grep -v '.commit' | grep -v emptyFile | grep -v DISCLAIMER | grep -v KEYS | grep -v '.mailmap' | grep -v '.sqltemplate' | grep -v 'banner.txt' | grep -v "fixtures" | xargs grep -L "Licensed to the Apache Software Foundation (ASF)" | wc -l` +if [ "$numfilesWithNoLicense" -gt "0" ]; then + echo "There were some source files that did not have Apache License [ERROR]" + find . -iname '*' -type f | grep -v NOTICE | grep -v LICENSE | grep -v '.jpg' | grep -v '.json' | grep -v '.hfile' | grep -v '.data' | grep -v '.commit' | grep -v emptyFile | grep -v DISCLAIMER | grep -v '.sqltemplate' | grep -v KEYS | grep -v '.mailmap' | grep -v 'banner.txt' | grep -v "fixtures" | xargs grep -L "Licensed to the Apache Software Foundation (ASF)" + exit 1 +fi +echo -e "\t\tLicensing Check Passed [OK]\n" diff --git a/release/scripts/validate_source_rat.sh b/release/scripts/validate_source_rat.sh new file mode 100644 index 00000000..ad3a29d6 --- /dev/null +++ b/release/scripts/validate_source_rat.sh @@ -0,0 +1,20 @@ +#!/bin/bash +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +echo "Running RAT Check" +(bash -c "mvn apache-rat:check -DdeployArtifacts=true") || (echo -e "\t\t Rat Check Failed. [ERROR]\n\t\t Please run with --verbose to get details\n" && exit 1) +echo -e "\t\tRAT Check Passed [OK]\n" diff --git a/release/scripts/validate_staged_bundles.sh b/release/scripts/validate_staged_bundles.sh new file mode 100644 index 00000000..88118db7 --- /dev/null +++ b/release/scripts/validate_staged_bundles.sh @@ -0,0 +1,49 @@ +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +set -o errexit +set -o nounset + +REPO=$1 +VERSION=$2 + +STAGING_REPO="https://repository.apache.org/content/repositories/${REPO}/org/apache/xtable" + +declare -a extensions=("-javadoc.jar" "-javadoc.jar.asc" "-javadoc.jar.md5" "-javadoc.jar.sha1" "-sources.jar" +"-sources.jar.asc" "-sources.jar.md5" "-sources.jar.sha1" ".jar" ".jar.asc" ".jar.md5" ".jar.sha1" ".pom" ".pom.asc" +".pom.md5" ".pom.sha1") + +declare -a bundles=("incubator-xtable") + +NOW=$(date +%s) +TMP_DIR_FOR_BUNDLES=/tmp/${NOW} +mkdir "$TMP_DIR_FOR_BUNDLES" + +for bundle in "${bundles[@]}" +do + for extension in "${extensions[@]}" + do + url=${STAGING_REPO}/$bundle/${VERSION}/$bundle-${VERSION}$extension + if curl --output "$TMP_DIR_FOR_BUNDLES/$bundle-${VERSION}$extension" --head --fail "$url"; then + echo "Artifact exists: $url" + else + echo "Artifact missing: $url" + exit 1 + fi + done +done + +echo "All artifacts exist. Validation succeeds." diff --git a/release/scripts/validate_staged_release.sh b/release/scripts/validate_staged_release.sh new file mode 100644 index 00000000..2962bb0e --- /dev/null +++ b/release/scripts/validate_staged_release.sh @@ -0,0 +1,132 @@ +#!/bin/bash +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +set -o errexit +set -o nounset +# print command before executing +#set -o xtrace + +CURR_DIR=`pwd` +if [[ `basename $CURR_DIR` != "scripts" ]] ; then + echo "You have to call the script from the scripts/ dir" + exit 1 +fi + +REDIRECT=' > /dev/null 2>&1' +if [[ $# -lt 1 ]]; then + echo "This script will validate source release candidate published in dist for apache xtable (incubating)" + echo "You can set 3 args to this script: release version is mandatory, while rest two are optional. Default release_type is \"dev\". Or you can set to \"release\"" + echo "--release=\${CURRENT_RELEASE_VERSION}" + echo "--rc_num=\${RC_NUM}" + echo "--release_type=release" + exit +else + for param in "$@" + do + if [[ $param =~ --release\=([0-9]\.[0-9]*\.[0-9].*) ]]; then + RELEASE_VERSION=${BASH_REMATCH[1]} + fi + if [[ $param =~ --rc_num\=([0-9]*) ]]; then + RC_NUM=${BASH_REMATCH[1]} + fi + if [[ $param =~ --release_type\="release" ]]; then + RELEASE_TYPE="release" + fi + if [[ $param =~ --verbose ]]; then + REDIRECT="" + fi + done +fi + +if [ -z ${RC_NUM+x} ]; then + RC_NUM=-1 +fi + +if [ -z ${RELEASE_TYPE+x} ]; then + RELEASE_TYPE=dev +fi + +# Get to a scratch dir +RELEASE_TOOL_DIR=`pwd` +WORK_DIR=/tmp/validation_scratch_dir_001 +rm -rf $WORK_DIR +mkdir $WORK_DIR +pushd $WORK_DIR + +# Checkout dist repo +LOCAL_SVN_DIR=local_svn_dir +ROOT_SVN_URL=https://dist.apache.org/repos/dist +REPO_TYPE=${RELEASE_TYPE} +XTABLE_REPO=xtable + +if [ $RC_NUM == -1 ]; then + ARTIFACT_SUFFIX=${RELEASE_VERSION} +else + ARTIFACT_SUFFIX=${RELEASE_VERSION}-rc${RC_NUM} +fi + +if [ $RELEASE_TYPE == "release" ]; then + ARTIFACT_PREFIX= +elif [ $RELEASE_TYPE == "dev" ]; then + ARTIFACT_PREFIX='incubator-xtable-' +else + echo "Unexpected RELEASE_TYPE: $RELEASE_TYPE" + exit 1; +fi + +rm -rf $LOCAL_SVN_DIR +mkdir $LOCAL_SVN_DIR +cd $LOCAL_SVN_DIR + +echo "Current directory: `pwd`" + +FULL_SVN_URL=${ROOT_SVN_URL}/${REPO_TYPE}/${XTABLE_REPO}/${ARTIFACT_PREFIX}${ARTIFACT_SUFFIX} + +echo "Downloading from svn co $FULL_SVN_URL" + +(bash -c "svn co $FULL_SVN_URL $REDIRECT") || (echo -e "\t\t Unable to checkout $FULL_SVN_URL to $REDIRECT. Please run with --verbose to get details\n" && exit -1) + +echo "Validating incubator-xtable-${ARTIFACT_SUFFIX} with release type \"${REPO_TYPE}\"" +cd ${ARTIFACT_PREFIX}${ARTIFACT_SUFFIX} +shasum -a 512 incubator-xtable-${ARTIFACT_SUFFIX}.src.tgz > got.sha512 + +echo "Checking Checksum of Source Release" +diff -u incubator-xtable-${ARTIFACT_SUFFIX}.src.tgz.sha512 got.sha512 +echo -e "\t\tChecksum Check of Source Release - [OK]\n" + +# Download KEYS file +curl https://dist.apache.org/repos/dist/dev/incubator/xtable/KEYS > ../KEYS + +# GPG Check +echo "Checking Signature" +(bash -c "gpg --import ../KEYS $REDIRECT" && bash -c "gpg --verify incubator-xtable-${ARTIFACT_SUFFIX}.src.tgz.asc incubator-xtable-${ARTIFACT_SUFFIX}.src.tgz $REDIRECT" && echo -e "\t\tSignature Check - [OK]\n") || (echo -e "\t\tSignature Check - [ERROR]\n\t\t Run with --verbose to get details\n" && exit 1) + +# Untar +(bash -c "tar -zxf incubator-xtable-${ARTIFACT_SUFFIX}.src.tgz $REDIRECT") || (echo -e "\t\t Unable to untar incubator-xtable-${ARTIFACT_SUFFIX}.src.tgz - [ERROR]\n\t\t Please run with --verbose to get details\n" && exit 1) +cd incubator-xtable-${ARTIFACT_SUFFIX} + +### BEGIN: Binary Files Check +$CURR_DIR/release/validate_source_binary_files.sh +### END: Binary Files Check + +### Checking for DISCLAIMER, LICENSE, NOTICE and source file license +$CURR_DIR/release/validate_source_copyright.sh + +### Checking for RAT +$CURR_DIR/release/validate_source_rat.sh + +popd