fluo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ctubbsii <...@git.apache.org>
Subject [GitHub] incubator-fluo issue #790: Add verification code to RC email
Date Fri, 21 Oct 2016 21:28:54 GMT
Github user ctubbsii commented on the issue:

    https://github.com/apache/incubator-fluo/issues/790
  
    Maybe simpler, and leaves some MD5SUM, SHA1SUM files around to manually check later:
    ```bash
    function checkFile {
      local file; file=$1
      echo '='
      echo "$file"
      gpg2 --verify "$file".asc "$file"
      echo "$(cat "$file".md5) *$file" >> MD5SUM
      echo "$(cat "$file".sha1) *$file" >> SHA1SUM
    }
    export -f checkFile
    rm MD5SUM SHA1SUM
    #find . -type f -name '*.asc' -exec bash -c 'checkFile "$(dirname "$0")/$(basename "$0"
.asc)"' {} \;
    find . -type f -regex '.*\.\(pom\|jar\|gz\)' -exec bash -c 'checkFile "$0"' {} \;
    md5sum --quiet -c MD5SUM
    sha1sum --quiet -c SHA1SUM
    ```
    
    The commented out find command is a little more comprehensive... it'll check all files
with a detached gpg signature. The original one only checks for `pom`, `jar`, and `gz` files,
and that may not catch everything.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---

Mime
View raw message