... | @@ -4,11 +4,13 @@ |
... | @@ -4,11 +4,13 @@ |
|
* Make sure all customers and Turris team are ready for public disclosure.
|
|
* Make sure all customers and Turris team are ready for public disclosure.
|
|
* Coordinate unembargo date with [OSS distros mailing list](http://oss-security.openwall.org/wiki/mailing-lists/distros) and obtain CVE # from the list.
|
|
* Coordinate unembargo date with [OSS distros mailing list](http://oss-security.openwall.org/wiki/mailing-lists/distros) and obtain CVE # from the list.
|
|
|
|
|
|
1. Change version in `config.mk`
|
|
1. Create a branch name starting with `release`
|
|
|
|
|
|
1. Update `NEWS`
|
|
1. Change version in `meson.build`, update `NEWS`
|
|
|
|
|
|
1. Make sure the tests are passing (automatic), and check respiff report (manual)
|
|
1. Commit and push the changes to trigger CI, make sure everything is passing
|
|
|
|
|
|
|
|
1. Run package builds and tests
|
|
|
|
|
|
1. Build test packages in OBS (with debian symbols):
|
|
1. Build test packages in OBS (with debian symbols):
|
|
|
|
|
... | @@ -25,18 +27,22 @@ |
... | @@ -25,18 +27,22 @@ |
|
1. `cd distro/tests`
|
|
1. `cd distro/tests`
|
|
1. For each distro: `./test-distro.sh devel debian9` (return code is 0 on success)
|
|
1. For each distro: `./test-distro.sh devel debian9` (return code is 0 on success)
|
|
|
|
|
|
1. Check docker: https://hub.docker.com/r/cznic/knot-resolver/builds/
|
|
1. Merge `release*` branch
|
|
|
|
|
|
1. Check that generated files are up to date: `rm etc/root.hints && make`
|
|
|
|
1. Create a tag: `git -as vX.Y.Z[.alphatag]`, content `Knot Resolver X.Y.Z[.alphatag]`, signed with a developer's GPG key
|
|
1. Create a tag: `git -as vX.Y.Z[.alphatag]`, content `Knot Resolver X.Y.Z[.alphatag]`, signed with a developer's GPG key
|
|
1. Push the changes and tag
|
|
|
|
|
|
1. Push the tag
|
|
|
|
|
|
1. Copy the NEWS section to https://gitlab.labs.nic.cz/knot/knot-resolver/tags
|
|
1. Copy the NEWS section to https://gitlab.labs.nic.cz/knot/knot-resolver/tags
|
|
|
|
|
|
|
|
1. Docker build should trigger automatically: check https://hub.docker.com/r/cznic/knot-resolver/builds/
|
|
|
|
|
|
1. Documentation should regenerate automatically: check http://readthedocs.org/projects/knot-resolver/builds/
|
|
1. Documentation should regenerate automatically: check http://readthedocs.org/projects/knot-resolver/builds/
|
|
|
|
|
|
* If the tag isn't there, try to trigger the webhook manually from `Settings -> Integration` (Test push tag events)
|
|
* If the tag isn't there, try to trigger the webhook manually from `Settings -> Integration` (Test push tag events)
|
|
|
|
|
|
1. (deprecated step) DNS should get updated automatically from tags: check `kdig et.knot-resolver.cz. TXT +short`
|
|
1. Create a tarball with `ninja dist`
|
|
1. Create a tarball with `./scripts/make-archive.sh`
|
|
|
|
1. Upload the tarball:
|
|
1. Upload the tarball:
|
|
|
|
|
|
* Use [sign-and-upload-knot-release](https://gitlab.labs.nic.cz/knot/knot-dns/snippets/63) script or following:
|
|
* Use [sign-and-upload-knot-release](https://gitlab.labs.nic.cz/knot/knot-dns/snippets/63) script or following:
|
... | | ... | |