aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorDavid Goulet <dgoulet@torproject.org>2021-12-16 11:03:53 -0500
committerDavid Goulet <dgoulet@torproject.org>2021-12-16 11:59:20 -0500
commite152a0a7cc44fd4de36eaf50f756c67a7d75dcbe (patch)
tree0cd06f796a9d693a541f7630149ea006791f51d8 /doc
parenta2971919ade15e077a0744772708d11f0332dd11 (diff)
downloadtor-e152a0a7cc44fd4de36eaf50f756c67a7d75dcbe.tar.gz
tor-e152a0a7cc44fd4de36eaf50f756c67a7d75dcbe.zip
doc: Improve a bit the ReleasingTor.md
Signed-off-by: David Goulet <dgoulet@torproject.org>
Diffstat (limited to 'doc')
-rw-r--r--doc/HACKING/ReleasingTor.md15
1 files changed, 10 insertions, 5 deletions
diff --git a/doc/HACKING/ReleasingTor.md b/doc/HACKING/ReleasingTor.md
index 12f5d1b16b..acaa748771 100644
--- a/doc/HACKING/ReleasingTor.md
+++ b/doc/HACKING/ReleasingTor.md
@@ -6,7 +6,7 @@ pipeline.
Before we begin, first rule is to make sure:
- - Our CI pass for each version to release
+ - Our CIs (*nix and Windows) pass for each version to release
- Coverity has no new alerts
## 0. Security Release
@@ -20,7 +20,7 @@ prior to the release:
## 1. Preliminaries
-The following must be done 2 days at the very least prior to the release:
+The following must be done **2 days** at the very least prior to the release:
1. Add the version(s) in the dirauth-conf git repository as the
RecommendedVersion and RequiredVersion so they can be approved by the
@@ -62,10 +62,15 @@ reproducible way using:
https://gitlab.torproject.org/tpo/core/tor-ci-reproducible
-Simply run the `./build.sh` which will commit interactively the signature for
-you. You then only need to git push.
+Steps are:
-Once all signatures have been committed:
+ 1. Run `./build.sh` which will download everything you need, including the
+ latest tarballs from the release CI, and auto-commit the signatures if
+ the checksum match. You will need to confim the commits.
+
+ 2. If all is good, `git push origin main` your signatures.
+
+Once all signatures from all selected developers have been committed:
1. Manually trigger the `signature` job in the `Post-process` stage of the
CI release pipeline.