[HBASE-23339] Release scripts should not need to write out a copy of gpg key material

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha-1
• Component/s: community, scripts
• Assignee: Sean Busbey
• Reporter: Sean Busbey
• Created: 25/Nov/19 04:40
• Updated: 25/Jun/20 14:53
• Resolved: 25/Jun/20 07:56

Description

We shouldn't need to export a copy of the gpg key. Either we should give the container access to the gpg-agent on the host or we should do signing steps outside of the container.

I don't think the latter is feasible, since the build with -P apache-release needs access to keys to sign as a part of the build.

Issue Links

• links to: GitHub Pull Request #1620
• links to: PR 1620