Releasing Java SDK packages¶

The Java SDK is distributed on the Sonatype artifact repository. Here are the steps to release a new jar file:

reference: https://central.sonatype.org/publish/release/

1. Build and upload package using https://ci.arvados.org/view/All/job/build-java-sdk
2. Go to https://oss.sonatype.org and log in with the appropriate credentials (gopass oss.sonatype.org/curii)
3. Under "Build Promotion" on the left sidebar, click on "Staging Repostories"
4. Find "orgarvados-XXXX" and click on it
5. In the toolstrip, click on "Close" -- this locks the repository against further changes and runs validation checks
6. The validation checks take a few minutes. You can monitor it on the "Activity" tab
7. Once the validations have passed, you'll be able to hit the "Release" button
8. This moves the packages to the release repository and drops (deletes) the staging repository
9. Reportedly there is lag of a few minutes on when a released package becomes visible / searchable

Getting the authentication token for Sonatype¶

1. Go to https://oss.sonatype.org and log in with the appropriate credentials (gopass oss.sonatype.org/curii)
2. Click on "Curii" in the upper right and go to "Profile"
3. There will be a drop down menu that says "Summary", click on it and select "User Token"
4. There will be a button "Access User Token", click on it and it will give a random string for username and password
5. Paste those into gradle.properties
6. Update the credentials on Jenkins

gradle.properties¶

To upload to Sonatype, you need the token (see above) and a secret key. On Jenkins, there is a package signing key which you need to also specify. Note that the property values after the equals sign should not be quoted. I'm not certain if spaces are allowed around the equals sign, but currently it works with no extra spaces.

ossrhUsername=...
ossrhPassword=...
signing.keyId=... 
signing.password= 
signing.secretKeyRingFile=...-secret-key.gpg