The following guidance should help anyone interested in validating/verifying the release so they can provide their vote.
# Download latest KEYS file so i get all the public keys. https://dist.apache.org/repos/dist/release/incubator/nifi/KEYS # Import keys file: gpg --import KEYS # Clear out my local maven artifact repository to get rid of # Pull down nifi-0.2.0 items for review: wget https://repository.apache.org/content/repositories/orgapachenifi-1057/org/apache/nifi/nifi/0.2.0-incubating/nifi-0.2.0-incubating-source-release.zip wget https://repository.apache.org/content/repositories/orgapachenifi-1057/org/apache/nifi/nifi/0.2.0-incubating/nifi-0.2.0-incubating-source-release.zip.asc wget https://repository.apache.org/content/repositories/orgapachenifi-1057/org/apache/nifi/nifi/0.2.0-incubating/nifi-0.2.0-incubating-source-release.zip.md5 wget https://repository.apache.org/content/repositories/orgapachenifi-1057/org/apache/nifi/nifi/0.2.0-incubating/nifi-0.2.0-incubating-source-release.zip.sha1 # Verify the signature gpg --verify nifi-0.2.0-incubating-source-release.zip.asc nifi-0.2.0-incubating-source-release.zip # Verify the hashes (md5 and sha1) match the source and what was provided in the vote email thread md5sum nifi-0.2.0-incubating-source-release.zip sha1sum nifi-0.2.0-incubating-source-release.zip # Unzip nifi-0.2.0-incubating-source-release.zip # Verify the build works. Did this by running the following which includes the RAT/license/header checks and checkstyle consistency checks mvn clean install -Pcontrib-check # Verify the contents contain a good readme LICENSE, NOTICE, DISCLAIMER # Verify the git commit ID is correct # Look at the resulting convenience binary as found in nifi-assembly/target/nifi-0.2.0-incubating-bin/nifi-0.2.0-incubating/ #Make sure the README, LICENSE, NOTICE, DISCLAIMER are present and correct # Run the resulting convenience binary. Make sure it works as expected. Dataflows can be setup, etc.. # Send a response to the vote thread indicating a +1, 0, -1 based on your findings. Also indicate whether the vote is binding or not. Basically if you're an IPMC member it is binding. If you are simply PPMC or a contributor it is non-binding. However, whether it is binding or not the vote is appreciated as all of it helps ensure quality of the release and engages the community.
