Committers' FAQs

A committer is an individual who has write access to the codebase of an Apache project.

The main information resource for you in this role, apart from the wisdom of your project colleagues, is the New Committers Guide.

If you are not an Apache committer, but wish to become one, the instructions on how to contribute to Apache projects will be more useful to you.

Frequently asked questions

General

What is ApacheCon?

The Apache Software Foundation periodically organizes conferences focusing on software developed at Apache and on the way that Apache develops its software. Learn about what's happening at Apache, hack code and meet the faces associated with the names!

What is a Hackathon?

A face-to-face or shared online gathering for hacking code together. Hackathons are generally held at ApacheCons, as well as at other times.

What is an Infrathon?

A face-to-face gathering for work on Apache infrastructure by our amazing infra contractors and volunteers.

How do I manage my volunteer energy?

Heed the warnings in these two email threads about what it means to be a committed person at the ASF and how to deal with the pressures that arise from such dedication:

We each need to re-read these important messages from time to time and remind ourselves and our communities of the need for self-care and care of others.

How do I start a new ASF project or migrate an existing project?

Contact the Incubator Project. They will assist you in starting a project or moving an existing one into the ASF.

Apache Labs could also be for you if you want to start something new.

What are the responsibilities of a Committer?

Note: this is an incomplete collection and not authoritative.

As an Apache volunteer, you have the right to set your own priorities and do the work that scratches your own itch. As a Committer, you have a responsibility to the community to help create a product that will outlive the interest of any particular volunteer, including yourself. For example, the code that you commit should be clear enough that others not involved in its current development will be able to maintain and extend it. It also means that you are responsible for helping to grow and maintain the health of the Apache community.

More specific responsibilities of Committers include:

  • Deciding on release plans and releases: A prime committer responsibility is to help decide when a version of product code is ready for release. A release is not to be taken lightly; each release must uphold the Apache tradition of quality. Each Project Management Committee PMC) formally authorizes the distribution of releases to the public.
  • Applying patches: To grow and maintain healthy communities, committers need to discuss, review and apply patches submitted by contributors and other committers. Committers are also responsible for the quality and IP clearance of the code that goes into ASF repositories.
  • Helping users: Committers should monitor both the dev@ and user@ or users@ email lists for the projects they work on and together provide prompt and useful responses to questions from users and their developer colleagues.
  • Monitoring commits and issues: Committers should review commit email messages for their projects and point out anything that looks funny or that may point to IP issues. Committers also monitor the project's issue-tracking system (Bugzilla or Jira or something else) for bug reports or enhancement requests.
  • Helping out with the website: The main Apache website and the project websites are in constant need of maintenance. Committers on a project are expected to collectively maintain the project's web site. Apache committers as a group share the responsibility to maintain the main Apache site.

Is there a set term for acting as a Committer? Will I have to be elected again?

Committer status and merit never expire. If you become inactive for a time (usually six months or more), your account may be deactivated for security reasons. Most projects allow reactivation of committer status by application to the PMC.

Some projects use the concept of emeritus committer for those who have contributed to the project but can no longer can give much time to it.

How do I bring code developed outside Apache into an existing project?

For any substantial codebase that has been developed outside the ASF, there is a process to complete before the code can be committed. The Incubator team manages this. The first step is to contact your PMC.

Where should I discuss ASF project business?

Apache project business should almost always be on your public dev@ mailing list, unless there is a specific reason to use private@. See the discussion about private vs. public lists.

I just made my first commit. Why don't I see a commit message?

The most likely explanation is that the commit message is awaiting moderation. Messages will be delivered promptly without moderation once the moderator approves posts from your apache.org address.

Technical

How do I make infrastructure requests?

You might notice something that needs changing, for example the configuration for a mailing list. The request to the users@infra list or the apmail@ alias needs to come from your Project Management Committee. That ensures that the requests are official, and not just an individual's desire.

There are many things that the PMC or PMC chair can do directly, thereby easing the load on the infrastructure team (Infra).

How does Infra communicate with the public?

Infra uses the [email protected] mailing list to discuss new infrastructure developments at the ASF. For service downtime announcements and current information on operations, we use Infrabot. For general announcements regarding services and the like, Infra has a blog.

What hosts/machines at Apache can I access?

Committers may access home.apache.org. See the related information in the New committers' guide. Note that you do only have SFTP access. There is no shell access. RSA SSH keys are required for SFTP access, which you can update via Whimsy or id.apache.org.

Here is a list of other Apache services/hosts and their public keys.

What can and can't I do on those machines?

You can publish a small personal website in public_html, as described in the New committers' guide. Never store secret/private keys (the private half of an SSH keypair, or a PGP private key) on any ASF machines.

Is there a way to see a graph of loads (CPU, I/O, network)?

  • Infra publishes top-level statistics on the status page.

What should I do if Host Key has changed when logging into an Apache server?

Take any message about a change to the host key or any "Error validating server certificate" very seriously: it may indicate a man-in-the-middle attack is in progress. Do not ignore this message.

Before contacting the Apache infrastructure team, check that you are logging in to the correct machine, and verify the currently published SSH fingerprints for Apache hosts, as described under "Identity theft" in the New committers' guide.

Help, I forgot my password!

See if you get an authorization failure (see below) when accessing SVN, or try the 'forgot password' link on the Apache Account site https://id.apache.org/.

Nexus (`repository.apache.org`) locked me out when I tried to stage a RC

Nexus uses LDAP-based authorization. If you have changed your LDAP password recently it is possible you have a cached version of your old password stored, perhaps in a settings.xml file locally. Maven makes repeated attempts to try this authorization and within 10 seconds you might find your LDAP account locked as a result. Try accessing another LDAP-based service to test the theory.

The cure is to go to https://id.apache.org/reset/enter and reset your LDAP password to clear the locked account. Change any cached credentials locally and try staging to Nexus again.

Version control

Why do I get an authorization failure when I try to access Subversion?

The most common reason is that you've forgotten your password! The password you use for Subversion is the same as the password you use for access to LDAP id.apache.org. You will not be prompted to enter it frequently. This makes it easy to forget.

Apache employs a number of different HTTP authentication realms. You will need to enter your password whenever you access a new realm. (Subversion prints information about the realm when you are prompted for the password.)

Of course, it is also possible that you're accessing a URL which is restricted. That's probably for a good reason, so unless you know that you should have access, don't bother the infrastructure team about being locked out.

If you do forget your password please visit https://id.apache.org/ to reset it.

Where is the committers/ module?

In Subversion, URL: https://svn.apache.org/repos/private/committers .

When do I need to use `svn lock`?