Mercurial > p > roundup > code
comparison RELEASE.txt @ 8378:118897c90d4e
build: remove python 2.x directions; other notes/clarifications
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Fri, 11 Jul 2025 22:32:15 -0400 |
| parents | 3283f30623d0 |
| children | 109c1112c329 |
comparison
equal
deleted
inserted
replaced
| 8377:edc69df0efeb | 8378:118897c90d4e |
|---|---|
| 145 MANIFEST.in and possibly cleaned out of the build tree. | 145 MANIFEST.in and possibly cleaned out of the build tree. |
| 146 10b: if you added/removed files rebuild starting at step 6a. | 146 10b: if you added/removed files rebuild starting at step 6a. |
| 147 | 147 |
| 148 11. Unpack the new tarball created in dist/roundup-<version>.tar.gz | 148 11. Unpack the new tarball created in dist/roundup-<version>.tar.gz |
| 149 file in /tmp then | 149 file in /tmp then |
| 150 a) run tests using installed pytest run under python2 and | 150 a) run tests using installed pytest run under |
| 151 python3. (python2 -m pytest test/; python3 -m pytest test/) | 151 python3. (python3 -m pytest test/) |
| 152 b) demo.py | 152 b) demo.py |
| 153 with all available Python versions. | 153 with all available Python 3 versions. |
| 154 11a. (TBD how to test wheel binary distribution before uploading.) | 154 11a. (TBD how to test wheel binary distribution before uploading.) |
| 155 | 155 |
| 156 11b. Generate GPG signature file | 156 11b. Generate GPG signature file |
| 157 | 157 |
| 158 cd dist | 158 cd dist |
| 267 --ignore-unfixed rounduptracker/roundup:2.4.0 | 267 --ignore-unfixed rounduptracker/roundup:2.4.0 |
| 268 | 268 |
| 269 You may need to explicitly update/refresh the scanners with: | 269 You may need to explicitly update/refresh the scanners with: |
| 270 "docker pull anchore/grype:latest" and similarly for | 270 "docker pull anchore/grype:latest" and similarly for |
| 271 aquasec/trivy if used. | 271 aquasec/trivy if used. |
| 272 | |
| 273 Note that some security issues may show up. If they are in the | |
| 274 underlying OS package we can't do anything but make sure the | |
| 275 latest python:3-alpine package is used to build the image. Look | |
| 276 at the index digest on the image release page and compare it to | |
| 277 the sha256 at the top of the Dockerfile. | |
| 278 | |
| 272 17d. test roundup in demo mode: | 279 17d. test roundup in demo mode: |
| 273 | 280 |
| 274 docker run -it --rm -p 8917:8080 \ | 281 docker run -it --rm -p 8917:8080 \ |
| 275 -v $PWD/tracker:/usr/src/app/tracker \ | 282 -v $PWD/tracker:/usr/src/app/tracker \ |
| 276 rounduptracker/roundup:2.4.0 demo | 283 rounduptracker/roundup:2.4.0 demo |
| 284 | |
| 285 FIXME: right now the external port number (8917) in the above | |
| 286 command is hardcoded in DOCKER. It can be overridden usng | |
| 287 PORT_8080=9017 for example. However the host is always | |
| 288 localhost. Consider replacing PORT_8080 with ORIGIN="host:port" | |
| 289 or ORIGIN="port" so that the web URL can be made correct when | |
| 290 running docker on a remote server. | |
| 277 | 291 |
| 278 17e. push to DockerHub login (login using 'docker login <username>' | 292 17e. push to DockerHub login (login using 'docker login <username>' |
| 279 first and user must be member of rounduptracker org with ability | 293 first and user must be member of rounduptracker org with ability |
| 280 to publish). Replace -N with the release number (e.g. -1, -2, -3...) | 294 to publish). Replace -N with the release number (e.g. -1, -2, -3...) |
| 281 | 295 |