Skip to content

ReleaseNexus.md

Latest commit

 

History

History
127 lines (100 loc) · 3.25 KB

ReleaseNexus.md

File metadata and controls

127 lines (100 loc) · 3.25 KB

Omni Reporter Commons Release Document

Token generation

There is no need to configure the GPG Keys anymore. Simply create a new token on https://oss.sonatype.org/#profile;User%20Token.

Make sure maven looks like bellow

<?xml version="1.0" encoding="UTF-8" ?>
<settings xsi:schemaLocation='http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd'
          xmlns='http://maven.apache.org/SETTINGS/1.0.0' xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance'>
    <servers>
        <server>
            <id>ossrh</id>
            <username>{{username}}</username>
            <password>{{password}}</password>
        </server>
    </servers>
</settings>
mvn clean deploy -Prelease

For gradle.properties:

ossrhUsername=your-username
ossrhPassword=your-token
gradle clean build test
./gradlew publishMavenPublicationToOSSRHRepository

DEPRECATED INFO

Delivery to Sonatype Repository

Making a release via Gradle

gradle clean build test
./gradlew publishMavenPublicationToOSSRHRepository

The rest manually in Nexus Sonatype.

This file is mandatory before a release:

gradle.properties:

ossrhUsername=<ossrhUsername>
ossrhPassword=<ossrhPassword>
signing.keyId=<signing.keyId>
signing.password=<signing.password>
signing.secretKeyRingFile=/Users/<user>/.gnupg/secring.gpg

Generate keys

Generate the signing fields(if not already available. check with gpg -K first!):

gpg --full-generate-key
gpg -K
gpg --keyring secring.gpg --export-secret-keys > ~/.gnupg/secring.gpg
gpg --keyserver keyserver.ubuntu.com --send-keys <KEY>
  • gpg --full-generate-key - Key generation
  • gpg -K - Lists keys. The KeyId is the last 8 Digits of the GPG key
  • gpg --keyring secring.gpg --export-secret-keys > ~/.gnupg/secring.gpg - Exports the keys to secring.gpg
  • gpg --keyserver keyserver.ubuntu.com --send-keys <KEY> - Exports the key so that Sonatype can verify the release

Load Keys

gpg --keyserver hkp://keyserver.ubuntu.com --send-keys <your GPG key>
gpg --list-keys
export GPG_TTY=$(tty)

Release via Maven

mvn clean deploy -Prelease
mvn nexus-staging:release -Prelease

Repository ~/.m2/settings.xml

<?xml version="1.0" encoding="UTF-8" ?>
<settings xsi:schemaLocation='http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd'
          xmlns='http://maven.apache.org/SETTINGS/1.0.0' xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance'>
    <profiles>
        <profile>
            <id>ossrh</id>
            <activation>
                <activeByDefault>true</activeByDefault>
            </activation>
            <properties>
                <gpg.executable>gpg</gpg.executable>
                <gpg.keyname>${{keyname}}</gpg.keyname>
                <gpg.passphrase>{{password}}</gpg.passphrase>
            </properties>
        </profile>
    </profiles>
    <activeProfiles>
        <activeProfile>ossrh</activeProfile>
    </activeProfiles>
    <servers>
        <server>
            <id>ossrh</id>
            <username>{{username}}</username>
            <password>{{password}}</password>
        </server>
    </servers>
</settings>