liurenjie1024 commented on code in PR #1426: URL: https://github.com/apache/iceberg-rust/pull/1426#discussion_r2137436599
########## website/src/release.md: ########## @@ -202,6 +202,35 @@ please cancel the release for the current `release_version`, _increase th RC counting_ and re-initiate a release with the new `release_version`. And remember to delete the wrong artifacts from the SVN dist repo. +## How to verify a release + +### Validating a source release + +A release contains links to following things: + +* A source tarball +* A signature(.asc) +* A checksum(.sha512) + +After downloading them, here are the instructions on how to verify them. + +* Import keys: + +```bash +curl https://downloads.apache.org/iceberg/KEYS -o KEYS +gpg --import KEYS +``` Review Comment: The link to artifacts will usually be included in the email voting for release, also user should not try to use `svn co` to download them. They should just use direct link. So I don't think we need to add them in the doc. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org For additional commands, e-mail: issues-h...@iceberg.apache.org
