[PIO-156] Direct links to sigs and hashes
Project: http://git-wip-us.apache.org/repos/asf/predictionio/repo Commit: http://git-wip-us.apache.org/repos/asf/predictionio/commit/fdd3e845 Tree: http://git-wip-us.apache.org/repos/asf/predictionio/tree/fdd3e845 Diff: http://git-wip-us.apache.org/repos/asf/predictionio/diff/fdd3e845 Branch: refs/heads/master Commit: fdd3e8457e76fee2f54e71484f5b5a9436dead47 Parents: 1a8babe Author: Donald Szeto <don...@apache.org> Authored: Mon Sep 10 12:02:26 2018 -0700 Committer: Donald Szeto <don...@apache.org> Committed: Mon Sep 10 12:02:26 2018 -0700 ---------------------------------------------------------------------- .../install/install-sourcecode.html.md.erb | 54 +++++++++++++++++--- 1 file changed, 47 insertions(+), 7 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/predictionio/blob/fdd3e845/docs/manual/source/install/install-sourcecode.html.md.erb ---------------------------------------------------------------------- diff --git a/docs/manual/source/install/install-sourcecode.html.md.erb b/docs/manual/source/install/install-sourcecode.html.md.erb index a16acde..edb6cdb 100644 --- a/docs/manual/source/install/install-sourcecode.html.md.erb +++ b/docs/manual/source/install/install-sourcecode.html.md.erb @@ -32,9 +32,41 @@ building against * Hadoop 2.7.3 * Elasticsearch 5.5.2 -Download binary release from an [Apache mirror](https://www.apache.org/dyn/closer.cgi/predictionio/<%= -data.versions.pio %>/apache-predictionio-<%= data.versions.pio %>-bin.tar.gz) -and verify the release. +Download [binary release from an Apache +mirror](https://www.apache.org/dyn/closer.lua/predictionio/<%= data.versions.pio +%>/apache-predictionio-<%= data.versions.pio %>-bin.tar.gz) and verify the +release with the corresponding +[signature](https://archive.apache.org/dist/predictionio/<%= +data.versions.pio %>/apache-predictionio-<%= data.versions.pio +%>-bin.tar.gz.asc) and +[checksum](https://archive.apache.org/dist/predictionio/<%= +data.versions.pio %>/apache-predictionio-<%= data.versions.pio +%>-bin.tar.gz.sha512). + +### Verifying Release + +Verify binary/source release using [signatures and checksums] +(https://www.apache.org/dist/predictionio/<%= data.versions.pio %>/) +and [project release KEYS](https://www.apache.org/dist/predictionio/KEYS). + +``` +$ gpg --import KEYS +$ gpg --verify apache-predictionio-<%= data.versions.pio %>.tar.gz.asc apache-predictionio-<%= data.versions.pio %>.tar.gz +``` + +You should see something like this. + +``` +gpg: Signature made Tue Sep 26 22:55:22 2017 PDT +gpg: using RSA key 7E2363D84719A8F4 +gpg: Good signature from "Chan Lee <chan...@apache.org>" [ultimate] +``` + +For further information, the [official guide from +Apache](https://www.apache.org/info/verification.html) has the most up-to-date +and complete information. + +### Installation Extract the binary distribution and proceed to [Installing Dependencies](#installing-dependencies). @@ -45,10 +77,14 @@ $ tar zxvf apache-predictionio-<%= data.versions.pio %>.tar.gz ## Downloading Source Code -Download Apache PredictionIO source <%= data.versions.pio %> from an -[Apache mirror](https://www.apache.org/dyn/closer.cgi/predictionio/<%= -data.versions.pio %>/apache-predictionio-<%= data.versions.pio %>.tar.gz) and -verify the release. +Download [source release from an Apache +mirror](https://www.apache.org/dyn/closer.cgi/predictionio/<%= data.versions.pio +%>/apache-predictionio-<%= data.versions.pio %>.tar.gz) and verify the release +with the corresponding +[signature](https://archive.apache.org/dist/predictionio/<%= data.versions.pio +%>/apache-predictionio-<%= data.versions.pio %>.tar.gz.asc) and +[checksum](https://archive.apache.org/dist/predictionio/<%= data.versions.pio +%>/apache-predictionio-<%= data.versions.pio %>.tar.gz.sha512). ### Verifying Release @@ -69,6 +105,10 @@ gpg: using RSA key 7E2363D84719A8F4 gpg: Good signature from "Chan Lee <chan...@apache.org>" [ultimate] ``` +For further information, the [official guide from +Apache](https://www.apache.org/info/verification.html) has the most up-to-date +and complete information. + ## Building Run the following at the directory where you downloaded the source code to build