Skip to content

How to verify Apache Release

Jump to bottom
lide edited this page Dec 12, 2018 · 10 revisions

To verify the release, following checklist can used to reference:

  1. Download links are valid.
  2. Checksums and PGP signatures are valid.
  3. DISCLAIMER is included.
  4. Source code artifacts have correct names matching the current release.
  5. LICENSE and NOTICE files are correct for the repository.
  6. All files have license headers if necessary.
  7. No compiled archives bundled in source archive.
  8. Building is OK.

1. Download source package, signature file, hash file and KEYS

Download all artifacts as following:

wget https://dist.apache.org/repos/dist/dev/incubator/doris/0.9.0-incubating-rc01/apache-doris-0.9.0.rc01-incubating-src.tar.gz

wget https://dist.apache.org/repos/dist/dev/incubator/doris/0.9.0-incubating-rc01/apache-doris-0.9.0.rc01-incubating-src.tar.gz.sha512

wget https://dist.apache.org/repos/dist/dev/incubator/doris/0.9.0-incubating-rc01/apache-doris-0.9.0.rc01-incubating-src.tar.gz.asc

wget https://dist.apache.org/repos/dist/dev/incubator/doris/KEYS

2. Verify signature and hash

GnuPG is recommended, which can install by yum install gnupg or apt-get install gnupg.

gpg --import KEYS
gpg --verify apache-doris-0.9.0.rc01-incubating-src.tar.gz.asc apache-doris-0.9.0.rc01-incubating-src.tar.gz
sha512sum --check apache-doris-0.9.0.rc01-incubating-src.tar.gz.sha512

3. Verify license header

Apache RAT is recommended to verify license headder, which can dowload as following command.

wget http://mirrors.shu.edu.cn/apache//creadur/apache-rat-0.12/apache-rat-0.12-bin.tar.bz2
tar jxvf apache-rat-0.12-bin.tar.bz2

Given your source dir is apache-doris-0.9.0.rc01-incubating-src, you can check with following command. It will output a file list which don't include ASF license header, and these files used other licenses.

java -jar apache-rat-0.12/apache-rat-0.12.jar -a -d apache-doris-0.9.0.rc01-incubating-src -e *.md *.MD .gitignore .gitmodules .travis.yml manifest **vendor** **licenses** | grep File: | grep -v "test_data" | grep -v "gutil" | grep -v "json" | grep -v "patch" | grep -v "xml" | grep -v "conf" | grep -v "svg"

4. Verify building

Now we just support Linux, and you must be install following softwares:

GCC 5.3.1+, Oracle JDK 1.8+, Python 2.7+, Apache Maven 3.5+, CMake 3.4.3+

After you installed above all, you also must be set them to environment variable PATH and set JAVA_HOME.

Lastly, you can build with following command:

cd apache-doris-0.9.0.rc01-incubating-src
sh build.sh

For more detail, you can refer to README.md in source package.

Documentation license here.

Contents

Clone this wiki locally