理解Apache發(fā)布的內(nèi)容和流程
總的來(lái)說(shuō)，Source Release是Apache關(guān)注的重點(diǎn)，也是發(fā)布的必須內(nèi)容；而B(niǎo)inary Release是可選項(xiàng)，Dubbo可以選擇是否發(fā)布二進(jìn)制包到Apache倉(cāng)庫(kù)或者發(fā)布到Maven中央倉(cāng)庫(kù)。
目前
創(chuàng)新互聯(lián)公司已為上千多家的企業(yè)提供了網(wǎng)站建設(shè)、域名、網(wǎng)頁(yè)空間、
綿陽(yáng)服務(wù)器托管、企業(yè)網(wǎng)站設(shè)計(jì)、
瑪沁網(wǎng)站維護(hù)等服務(wù)，公司將堅(jiān)持客戶導(dǎo)向、應(yīng)用為本的策略，正道將秉承"和諧、參與、激情"的文化，與客戶和合作伙伴齊心協(xié)力一起成長(zhǎng)，共同發(fā)展。
請(qǐng)參考以下鏈接，找到更多關(guān)于ASF的發(fā)布指南:
Apache Release Guide
Apache Release Policy
Maven Release Info
本地構(gòu)建環(huán)境準(zhǔn)備
主要包括簽名工具、Maven倉(cāng)庫(kù)認(rèn)證相關(guān)準(zhǔn)備
安裝GPG，參見(jiàn)
/tupian/20230522/index.html
用gpg生成key
$ gpg2 --full-gen-keygpg (GnuPG) 2.0.12; Copyright (C) 2009 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Please select what kind of key you want:
(1) RSA and RSA (default)
(2) DSA and Elgamal
(3) DSA (sign only)
(4) RSA (sign only)
Your selection? 1RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048) 4096Requested keysize is 4096 bits
Please specify how long the key should be valid. 0 = key does not expire
= key expires in n days
w = key expires in n weeks
m = key expires in n months
y = key expires in n yearsKey is valid for? (0)
Key does not expire at allIs this correct? (y/N) y
GnuPG needs to construct a user ID to identify your key.Real name: Robert Burrell Donkin
Email address: rdonkin@apache.orgComment: CODE SIGNING KEYYou selected this USER-ID: "Robert Burrell Donkin (CODE SIGNING KEY) "Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
You need a Passphrase to protect your secret key. # 填入密碼，以后打包過(guò)程中會(huì)經(jīng)常用到
查看key id
$ gpg --list-keys
pub rsa4096/28681CB1 2018-04-26 # 28681CB1就是key iduid [ultimate] liujun (apache-dubbo)
sub rsa4096/D3D6984B 2018-04-26# 通過(guò)key id發(fā)送public key到keyserver$ gpg --keyserver pgpkeys.mit.edu --send-key 28681CB1# 其中，pgpkeys.mit.edu為隨意挑選的keyserver，keyserver列表為：https://sks-keyservers.net/status/，因?yàn)橄嗷ブg是自動(dòng)同步的，選任意一個(gè)都可以。
如果有多個(gè)public key，設(shè)置默認(rèn)key
~/.gnupg/gpg.conf
# If you have more than 1 secret key in your keyring, you may want to# uncomment the following option and set your preferred keyid.default-key 28681CB1
設(shè)置Apache中央倉(cāng)庫(kù)
...
apache.snapshots.https
apache.releases.https
...
gpg.passphrase
Dubbo項(xiàng)目的父pom為apache pom
org.apache
apache
19
添加以下內(nèi)容到.m2/settings.xml
所有密碼請(qǐng)使用[maven-encryption-plugin](http://maven.apache.org/guides/mini/guide-encryption.html)加密后再填入
打包&上傳
從主干分支拉取新分支作為發(fā)布分支，如現(xiàn)在要發(fā)布2.6.4版本，則從2.6.x拉出新分支2.6.4-release，此后2.6.4 Release Candidates涉及的修改及打標(biāo)簽等都在2.6.4-release分支進(jìn)行，最終發(fā)布完成后合入主干分支。
首先，在2.6.4-release分支驗(yàn)證maven組件打包、source源碼打包、簽名等是否都正常工作
$ mvn clean install -Papache-release
$ mvn deploy# 將snapshot包推送到maven中央倉(cāng)庫(kù)，處于staging狀態(tài)
用maven-release-plugin發(fā)布
$ mvn release:clean
$ mvn release:prepare -Papache-release -Darguments="-DskipTests" -DautoVersionSubmodules=true -Dusername=YOUR GITHUB ID# 執(zhí)行完成后：1.生成source.zip包； 2.打出tag，并推送到github倉(cāng)庫(kù)； 3.分支版本自動(dòng)升級(jí)為2.6.4-SNAPSHOT，并將修改推送到github倉(cāng)庫(kù)
執(zhí)行release:perform，做正式發(fā)布
$ mvn -Prelease release:perform -Darguments="-DskipTests" -DautoVersionSubmodules=true -Dusername=YOUR GITHUB ID# 所有artifacts發(fā)布到配置的遠(yuǎn)程maven中央倉(cāng)庫(kù)，處于staging狀態(tài)
準(zhǔn)備Apache發(fā)布
準(zhǔn)備svn本機(jī)環(huán)境（Apache使用svn托管項(xiàng)目的發(fā)布內(nèi)容）
將dubbo checkout到本地目錄
$ svn checkout https://dist.apache.org/repos/dist/dev/incubator/dubbo# 假定本地目錄為 ~/apache/incubator/dubbo
當(dāng)前發(fā)布版本為2.6.4，新建目錄
$ cd ~/apache/incubator/dubbo # dubbo svn根目錄$ mkdir 2.6.4
添加public key到
KEYS
文件。KEYS主要是讓參與投票的人在本地導(dǎo)入，用來(lái)校驗(yàn)sign的正確性
拷貝Dubbo根目錄下的source.zip包到svn本地倉(cāng)庫(kù)dubbo/2.6.4
生成sha512簽名
$ shasum -a 512 dubbo-incubating-2.6.4-source-release.zip >> dubbo-incubating-2.6.4-source-release.zip.sha512
如果有binary release要同時(shí)發(fā)布
# 到dubbo項(xiàng)目distribution的module下，執(zhí)行：$ mvn install# target目錄下，拷貝bin-release.zip以及bin-release.zip.asc到svn本地倉(cāng)庫(kù)dubbo/2.6.4# 參考第6步，生成sha512簽名
提交到Apache svn
$ svn status
$ svn commit -m 'prepare for 2.6.4 RC1'
驗(yàn)證Release Candidates
證環(huán)節(jié)包含但不限于以下內(nèi)容和形式：
Check signatures and hashes are good
sha512 dubbo-incubating-${release_version}-bin-release.zip.sha512
sha512 dubbo-incubating-${release_version}-source-release.zip.sha512
unzip dubbo-incubating-${release_version}-source-release.zip to the default directory and check the following:
Directory with
incubator
in name
dubbo-incubating-${release_version}-bin-release
DISCLAIMER file exists
LICENSE and NOTICE file exists and contents are good
All files and no binary files exist
All files has standard ASF License header
Can compile from source
All unit tests can pass
mvn clean test # This will run all unit tests# you can also open rat and style plugin to check if every file meets requirements.mvn clean install -Drat.skip=false -Dcheckstyle.skip=false
Release candidates match with corresponding tags, you can find tag link and hash in vote email.
進(jìn)入投票
投票分兩個(gè)階段：
Dubbo社區(qū)投票，發(fā)起投票郵件到dev@dubbo.apache.org。在社區(qū)開(kāi)發(fā)者Review，并統(tǒng)計(jì)到3個(gè)同意發(fā)版的binding票后，即可進(jìn)入下一階段的投票。
Apache社區(qū)投票，發(fā)起投票郵件到general@apache.org。在Apache PMC Review，并統(tǒng)計(jì)到3個(gè)統(tǒng)一發(fā)版的binding票后，即可進(jìn)行正式發(fā)布。
郵件模板：
Hello Dubbo Community,
This is a call for vote to release Apache Dubbo (Incubating) version 2.6.4.
The release candidates:
https://dist.apache.org/repos/dist/dev/incubator/dubbo/2.6.4/
Git tag for the release:
https://github.com/apache/incubator-dubbo/tree/dubbo-2.6.4Hash for the release tag:
afab04c53edab38d52275d2a198ea1aff7a4f41eRelease Notes:
https://github.com/apache/incubator-dubbo/releases/tag/untagged-4775c0a22c60fca55118
The artifacts have been signed with Key : 28681CB1, which can be found in the keys file:
https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYSThe vote will be open for at least 72 hours or until necessary number of votes are reached.
Please vote accordingly:
[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove with the reason
Thanks,
The Apache Dubbo (Incubating) Team
正式發(fā)布
提交
https://dist.apache.org/repos/dist/dev/incubator/dubbo
目錄下的發(fā)布包到
https://dist.apache.org/repos/dist/release/incubator/dubbo/
，完成正式發(fā)布。
發(fā)郵件到dev@dubbo.apache.org和general@apache.org，通知社區(qū)發(fā)布完成。
分享文章：如何完成一次Apache的版本發(fā)布-創(chuàng)新互聯(lián)
網(wǎng)頁(yè)地址：
http://weahome.cn/article/csoghp.html
重慶分公司
重慶分公司
