Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SPARK-33234][INFRA] Generates SHA-512 using shasum #30123

Closed
wants to merge 1 commit into from

Conversation

emilianbold
Copy link
Member

@emilianbold emilianbold commented Oct 21, 2020

What changes were proposed in this pull request?

I am generating the SHA-512 using the standard shasum which also has a better output compared to GPG.

Why are the changes needed?

Which makes the hash much easier to verify for users that don't have GPG.

Because an user having GPG can check the keys but an user without GPG will have a hard time validating the SHA-512 based on the 'pretty printed' format.

Apache Spark is the only project where I've seen this format. Most other Apache projects have a one-line hash file.

Does this PR introduce any user-facing change?

No.

How was this patch tested?

This patch assumes the build system has shasum (it should, but I can't test this).

Which makes the hash much easier to verify for users that don't have GPG.
@AmplabJenkins
Copy link

Can one of the admins verify this patch?

@dongjoon-hyun dongjoon-hyun changed the title Generates SHA-512 using shasum [SPARK-33234][INFRA] Generates SHA-512 using shasum Oct 25, 2020
Copy link
Member

@dongjoon-hyun dongjoon-hyun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1, LGTM. Thank you, @emilianbold .
Merged to master.

I tested shasum -a 512 on Mac and spark-rm docker image.

@dongjoon-hyun
Copy link
Member

What is your JIRA id, @emilianbold ?

@emilianbold
Copy link
Member Author

emilianbold commented Oct 26, 2020 via email

@HyukjinKwon
Copy link
Member

@emilianbold, Apache JIRA ID because the ticket (SPARK-33234) has to be assigned properly to you.

@dongjoon-hyun
Copy link
Member

Your Apache JIRA ID, @emilianbold . As a recognition of your contribution, I want to assign SPARK-33234 to you as @HyukjinKwon explained.

@emilianbold
Copy link
Member Author

emilianbold commented Oct 26, 2020 via email

@dongjoon-hyun
Copy link
Member

?

Screen Shot 2020-10-26 at 12 51 52 AM

@emilianbold
Copy link
Member Author

emilianbold commented Oct 26, 2020 via email

@dongjoon-hyun
Copy link
Member

Finally, I assigned SPARK-33234 to you. Thank you!

srowen pushed a commit that referenced this pull request May 20, 2022
…t tool to generate hashes for integrity

### What changes were proposed in this pull request?

unify the hash generator for release files.

### Why are the changes needed?

Currently, we use `shasum` for source but `gpg` for binary, since #30123

this confuses me when validating the integrities of spark 3.3.0 RC https://dist.apache.org/repos/dist/dev/spark/v3.3.0-rc2-bin/

### Does this PR introduce _any_ user-facing change?

no

### How was this patch tested?

test script manually

Closes #36619 from yaooqinn/SPARK-39240.

Authored-by: Kent Yao <yao@apache.org>
Signed-off-by: Sean Owen <srowen@gmail.com>
srowen pushed a commit that referenced this pull request May 20, 2022
…t tool to generate hashes for integrity

### What changes were proposed in this pull request?

unify the hash generator for release files.

### Why are the changes needed?

Currently, we use `shasum` for source but `gpg` for binary, since #30123

this confuses me when validating the integrities of spark 3.3.0 RC https://dist.apache.org/repos/dist/dev/spark/v3.3.0-rc2-bin/

### Does this PR introduce _any_ user-facing change?

no

### How was this patch tested?

test script manually

Closes #36619 from yaooqinn/SPARK-39240.

Authored-by: Kent Yao <yao@apache.org>
Signed-off-by: Sean Owen <srowen@gmail.com>
(cherry picked from commit 3e78337)
Signed-off-by: Sean Owen <srowen@gmail.com>
srowen pushed a commit that referenced this pull request May 20, 2022
…t tool to generate hashes for integrity

### What changes were proposed in this pull request?

unify the hash generator for release files.

### Why are the changes needed?

Currently, we use `shasum` for source but `gpg` for binary, since #30123

this confuses me when validating the integrities of spark 3.3.0 RC https://dist.apache.org/repos/dist/dev/spark/v3.3.0-rc2-bin/

### Does this PR introduce _any_ user-facing change?

no

### How was this patch tested?

test script manually

Closes #36619 from yaooqinn/SPARK-39240.

Authored-by: Kent Yao <yao@apache.org>
Signed-off-by: Sean Owen <srowen@gmail.com>
(cherry picked from commit 3e78337)
Signed-off-by: Sean Owen <srowen@gmail.com>
kazuyukitanimura pushed a commit to kazuyukitanimura/spark that referenced this pull request Aug 10, 2022
…t tool to generate hashes for integrity

### What changes were proposed in this pull request?

unify the hash generator for release files.

### Why are the changes needed?

Currently, we use `shasum` for source but `gpg` for binary, since apache#30123

this confuses me when validating the integrities of spark 3.3.0 RC https://dist.apache.org/repos/dist/dev/spark/v3.3.0-rc2-bin/

### Does this PR introduce _any_ user-facing change?

no

### How was this patch tested?

test script manually

Closes apache#36619 from yaooqinn/SPARK-39240.

Authored-by: Kent Yao <yao@apache.org>
Signed-off-by: Sean Owen <srowen@gmail.com>
(cherry picked from commit 3e78337)
Signed-off-by: Sean Owen <srowen@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
4 participants