Repository: nifi-site Updated Branches: refs/heads/master ab6f30da3 -> a26cecba2
Removed instructions to generate, publish, and validate SHA-1 hashes in Release Guide. Project: http://git-wip-us.apache.org/repos/asf/nifi-site/repo Commit: http://git-wip-us.apache.org/repos/asf/nifi-site/commit/3d02a5f9 Tree: http://git-wip-us.apache.org/repos/asf/nifi-site/tree/3d02a5f9 Diff: http://git-wip-us.apache.org/repos/asf/nifi-site/diff/3d02a5f9 Branch: refs/heads/master Commit: 3d02a5f93859b87eb432d37dfbfa2ec57eabd111 Parents: ab6f30d Author: Andy LoPresto <[email protected]> Authored: Fri Aug 17 14:38:03 2018 -0700 Committer: Andy LoPresto <[email protected]> Committed: Fri Aug 17 14:38:03 2018 -0700 ---------------------------------------------------------------------- src/pages/markdown/release-guide.md | 14 +------------- 1 file changed, 1 insertion(+), 13 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/nifi-site/blob/3d02a5f9/src/pages/markdown/release-guide.md ---------------------------------------------------------------------- diff --git a/src/pages/markdown/release-guide.md b/src/pages/markdown/release-guide.md index f8002c8..78f8949 100644 --- a/src/pages/markdown/release-guide.md +++ b/src/pages/markdown/release-guide.md @@ -103,7 +103,6 @@ when evaluating a release for a vote. - Look in the *-sources.zip artifact root for the readme. - Are the signatures and hashes correct for the source release? - Validate the hashes of the sources artifact do in fact match: - `https://repository.apache.org/content/repositories/${STAGING_REPO_ID}/org/apache/nifi/nifi/${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha1` `https://repository.apache.org/content/repositories/${STAGING_REPO_ID}/org/apache/nifi/nifi/${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha256` `https://repository.apache.org/content/repositories/${STAGING_REPO_ID}/org/apache/nifi/nifi/${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha512` - Validate the signature of the source artifact. Here is an example path: @@ -262,14 +261,6 @@ click on that you can inspect the various staged artifacts. $ gpg -a -b --digest-algo=SHA512 nifi-toolkit-${NIFI_VERSION}-bin.zip # produces nifi-toolkit-${NIFI_VERSION}-bin.zip.asc $ gpg -a -b --digest-algo=SHA512 nifi-toolkit-${NIFI_VERSION}-bin.tar.gz # produces nifi-toolkit-${NIFI_VERSION}-bin.tar.gz.asc ``` - 1. Generate SHA1 hash summaries. - ``` - $ shasum -a 1 nifi-${NIFI_VERSION}-source-release.zip | cut -d" " -f1 > nifi-${NIFI_VERSION}-source-release.zip.sha1 - $ shasum -a 1 nifi-${NIFI_VERSION}-bin.tar.gz | cut -d" " -f1 > nifi-${NIFI_VERSION}-bin.tar.gz.sha1 - $ shasum -a 1 nifi-${NIFI_VERSION}-bin.zip | cut -d" " -f1 > nifi-${NIFI_VERSION}-bin.zip.sha1 - $ shasum -a 1 nifi-toolkit-${NIFI_VERSION}-bin.zip | cut -d" " -f1 > nifi--toolkit${NIFI_VERSION}-bin.zip.sha1 - $ shasum -a 1 nifi-toolkit-${NIFI_VERSION}-bin.tar.gz | cut -d" " -f1 > nifi-toolkit-${NIFI_VERSION}-bin.tar.gz.sha1 - ``` 1. Generate SHA256 hash summaries. ``` $ shasum -a 256 nifi-${NIFI_VERSION}-source-release.zip | cut -d" " -f1 > nifi-${NIFI_VERSION}-source-release.zip.sha256 @@ -329,7 +320,6 @@ and more positive than negative binding votes._ https://git-wip-us.apache.org/repos/asf?p=nifi.git;a=commit;h=${RC_TAG_COMMIT_ID} Checksums of nifi-x.y.z-source-release.zip: - SHA1: <40-BYTE-SHA1SUM-HASH> SHA256: <64-CHAR-SHA256SUM-HASH> SHA512: <128-CHAR-SHA512SUM-HASH> @@ -375,15 +365,13 @@ and more positive than negative binding votes._ wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.asc - wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha1 wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha256 wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha512 # Verify the signature gpg --verify nifi-${NIFI_VERSION}-source-release.zip.asc - # Verify the hashes (sha1, sha256, sha512) match the source and what was provided in the vote email thread - shasum -a 1 nifi-${NIFI_VERSION}-source-release.zip + # Verify the hashes (sha256, sha512) match the source and what was provided in the vote email thread shasum -a 256 nifi-${NIFI_VERSION}-source-release.zip shasum -a 512 nifi-${NIFI_VERSION}-source-release.zip
