This is an automated email from the ASF dual-hosted git repository.
jimin pushed a commit to branch docusaurus
in repository https://gitbox.apache.org/repos/asf/incubator-seata-website.git
The following commit(s) were added to refs/heads/docusaurus by this push:
new 34bfac7bc68 doc: add release verify (#965)
34bfac7bc68 is described below
commit 34bfac7bc68f99902e917b1562cb0f065d4a46bc
Author: jimin <sliev...@163.com>
AuthorDate: Tue Apr 29 15:47:30 2025 +0800
doc: add release verify (#965)
---
.../current/download/seata-server.md | 36 +++++++++++
.../current/download/seata-server.md | 71 ++++++++++++++++++----
2 files changed, 94 insertions(+), 13 deletions(-)
diff --git
a/i18n/en/docusaurus-plugin-content-docs-unversioned/current/download/seata-server.md
b/i18n/en/docusaurus-plugin-content-docs-unversioned/current/download/seata-server.md
index de30e8a5a37..a27111eaea4 100644
---
a/i18n/en/docusaurus-plugin-content-docs-unversioned/current/download/seata-server.md
+++
b/i18n/en/docusaurus-plugin-content-docs-unversioned/current/download/seata-server.md
@@ -78,3 +78,39 @@ requirements, you may not be able to deploy Seata-Server on
your device.
[//]: # (</section>)
[//]: # (```)
+
+## Verify the releases
+It is crucial to verify the integrity of downloaded files using GPG or SHA
signatures. You should download the KEYS along with the .asc and .sha512
signature files for the appropriate distribution. It is recommended to obtain
these files directly from the main distribution directory, rather than from
mirror sites.
+
+### Verify Signatures
+1. Download the GPG signatures
[KEYS](https://downloads.apache.org/incubator/seata/KEYS) and the release along
with its .asc signature file.
+
+2. Import the public key:
+ ```bash
+ gpg --import KEYS
+ ```
+3. Verify the signature:
+ ```bash
+ gpg --verify apache-seata-***.asc apache-seata-***
+ ```
+
+If something like the following appears, it means the signature is correct:
+```text
+gpg: Signature made Tue Apr 29 12:11:09 2025 CST
+gpg: using RSA key 775377BF271D659E591249CD63E269707E8BF0FB
+gpg: Good signature from "xxx" [ultimate]
+```
+
+### Verify Checksums
+
+1. Download the release along with its .sha512 signature file.
+
+2. Verify the checksum:
+ ```bash
+ shasum -c apache-seata-***.sha512
+ ```
+If something like the following appears, it means the checksum is correct:
+
+```text
+apache-seata-***.tar.gz: OK
+```
diff --git
a/i18n/zh-cn/docusaurus-plugin-content-docs-unversioned/current/download/seata-server.md
b/i18n/zh-cn/docusaurus-plugin-content-docs-unversioned/current/download/seata-server.md
index de7f4ff2fc7..3a517d8849b 100644
---
a/i18n/zh-cn/docusaurus-plugin-content-docs-unversioned/current/download/seata-server.md
+++
b/i18n/zh-cn/docusaurus-plugin-content-docs-unversioned/current/download/seata-server.md
@@ -1,6 +1,6 @@
---
title: Seata Java Download
-keywords: [Seata, Seata-Server, 下载]
+keywords: [ Seata, Seata-Server, 下载 ]
description: Seata 发布版本下载
hide_table_of_contents: true
---
@@ -25,13 +25,13 @@ hide_table_of_contents: true
<section class="full_width_table_section">
```
-| 项目 | 要求 |
-| ---- | ------------------------------------------------ |
-| JDK | JDK 8 或更高版本 |
-| CPU | 1 核及以上，支持 64 位的 CPU |
-| 内存 | 2G 及以上 |
-| 硬盘 | 无最小要求，需要根据日志、存储模式等配置具体调整 |
-| 系统 | 64 位的 Linux、Mac OS X、Windows |
+| 项目 | 要求 |
+|-----|------------------------------|
+| JDK | JDK 8 或更高版本 |
+| CPU | 1 核及以上，支持 64 位的 CPU |
+| 内存 | 2G 及以上 |
+| 硬盘 | 无最小要求，需要根据日志、存储模式等配置具体调整 |
+| 系统 | 64 位的 Linux、Mac OS X、Windows |
```mdx-code-block
</section>
@@ -42,12 +42,14 @@ hide_table_of_contents: true
```mdx-code-block
<section class="full_width_table_section">
```
+
### ASF 发布版本
-| 版本号 | 源码下载 | 二进制下载 | 发布说明 | 参考文档
|
-|-------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------
[...]
-| 2.3.0 |
[apache-seata-2.3.0-incubating-src.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.3.0/apache-seata-2.3.0-incubating-src.tar.gz?action=download)
[ASC](https://downloads.apache.org/incubator/seata/2.3.0/apache-seata-2.3.0-incubating-src.tar.gz.asc)
[SHA512](https://downloads.apache.org/incubator/seata/2.3.0/apache-seata-2.3.0-incubating-src.tar.gz.sha512)<br/>
|
[apache-seata-2.3.0-incubating-bin.tar.gz](https://www.apache.org/dyn/closer.lua
[...]
-| 2.2.0 |
[apache-seata-2.2.0-incubating-src.zip](https://www.apache.org/dyn/closer.lua/incubator/seata/2.2.0/apache-seata-2.2.0-incubating-src.zip?action=download)
[ASC](https://downloads.apache.org/incubator/seata/2.2.0/apache-seata-2.2.0-incubating-src.zip.asc)
[SHA512](https://downloads.apache.org/incubator/seata/2.2.0/apache-seata-2.2.0-incubating-src.zip.sha512)<br/>
|
[apache-seata-2.2.0-incubating-bin.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.2.0/apach
[...]
-| 2.1.0 |
[apache-seata-2.1.0-incubating-src.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.1.0/apache-seata-2.1.0-incubating-src.tar.gz?action=download)
[ASC](https://downloads.apache.org/incubator/seata/2.1.0/apache-seata-2.1.0-incubating-src.tar.gz.asc)
[SHA512](https://downloads.apache.org/incubator/seata/2.1.0/apache-seata-2.1.0-incubating-src.tar.gz.sha512)
|
[apache-seata-2.1.0-incubating-bin.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.1.0/ap
[...]
+
+| 版本号 | 源码下载
| 二进制下载
[...]
+|-------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------
[...]
+| 2.3.0 |
[apache-seata-2.3.0-incubating-src.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.3.0/apache-seata-2.3.0-incubating-src.tar.gz?action=download)
[ASC](https://downloads.apache.org/incubator/seata/2.3.0/apache-seata-2.3.0-incubating-src.tar.gz.asc)
[SHA512](https://downloads.apache.org/incubator/seata/2.3.0/apache-seata-2.3.0-incubating-src.tar.gz.sha512)<br/>
|
[apache-seata-2.3.0-incubating-bin.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.3.0
[...]
+| 2.2.0 |
[apache-seata-2.2.0-incubating-src.zip](https://www.apache.org/dyn/closer.lua/incubator/seata/2.2.0/apache-seata-2.2.0-incubating-src.zip?action=download)
[ASC](https://downloads.apache.org/incubator/seata/2.2.0/apache-seata-2.2.0-incubating-src.zip.asc)
[SHA512](https://downloads.apache.org/incubator/seata/2.2.0/apache-seata-2.2.0-incubating-src.zip.sha512)<br/>
|
[apache-seata-2.2.0-incubating-bin.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.2.0
[...]
+| 2.1.0 |
[apache-seata-2.1.0-incubating-src.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.1.0/apache-seata-2.1.0-incubating-src.tar.gz?action=download)
[ASC](https://downloads.apache.org/incubator/seata/2.1.0/apache-seata-2.1.0-incubating-src.tar.gz.asc)
[SHA512](https://downloads.apache.org/incubator/seata/2.1.0/apache-seata-2.1.0-incubating-src.tar.gz.sha512)
|
[apache-seata-2.1.0-incubating-bin.tar.gz](https://www.apache.org/dyn/closer.lua/incubator/seata/2.1.0
[...]
1. Seata
版本维护策略，请参考[版本维护文档](/docs/ops/version-maintain-plan)，请您尽快升级低版本至当前维护版本。版本升级请参考[升级指南](/docs/ops/upgrade)
2. 更多历史版本下载，请参考[版本历史](/release-history/seata-server)
@@ -59,6 +61,7 @@ hide_table_of_contents: true
[//]: # (## 快照版)
[//]: # ()
+
[//]: # (```mdx-code-block)
[//]: # (<section class="full_width_table_section">)
@@ -66,13 +69,55 @@ hide_table_of_contents: true
[//]: # (```)
[//]: # ()
+
[//]: # (| 版本号 | 二进制下载 | docker 镜像 | checksum | 发布说明 | 版本文档 | 是否 ASF 版本 |)
[//]: # (| ------ | ---------- | ----------- | -------- | -------- | --------
| ------------- |)
[//]: # ()
+
[//]: # (```mdx-code-block)
[//]: # (</section>)
[//]: # (```)
+
+## 验证
+
+验证下载文件的完整性对保证文件的安全性至关重要，可以使用 GPG 或 SHA 签名完成这项任务。建议直接从主分发目录下载 KEYS 文件，并对应下载
.asc 和 .sha512 签名文件，而不是通过镜像站获取这些文件。
+
+### 验证签名
+
+1. 下载 GPG 签名 [KEYS](https://downloads.apache.org/incubator/seata/KEYS)
以及发布版本和它的 .asc 签名文件。
+
+2. 导入公钥:
+ ```bash
+ gpg --import KEYS
+ ```
+3. 验证签名:
+ ```bash
+ gpg --verify apache-seata-***.asc apache-seata-***
+ ```
+
+如果出现类似以下内容，说明签名是正确的:
+
+```text
+gpg: Signature made Tue Apr 29 12:11:09 2025 CST
+gpg: using RSA key 775377BF271D659E591249CD63E269707E8BF0FB
+gpg: Good signature from "xxx" [ultimate]
+```
+
+### 验证 Checksum
+
+1. 下载发布版本及其 .sha512 签名文件。
+
+2. 验证 checksum:
+ ```bash
+ shasum -c apache-seata-***.sha512
+ ```
+
+如果出现类似以下内容，说明 checksum 是正确的:
+
+```text
+apache-seata-***.tar.gz: OK
+```
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@seata.apache.org
For additional commands, e-mail: notifications-h...@seata.apache.org
