geruh commented on code in PR #1426:
URL: https://github.com/apache/iceberg-rust/pull/1426#discussion_r2139412667


##########
website/src/release.md:
##########
@@ -202,6 +202,35 @@ please cancel the release for the current 
`release_version`,
 _increase th RC counting_ and re-initiate a release with the new 
`release_version`.
 And remember to delete the wrong artifacts from the SVN dist repo.
 
+## How to verify a release
+
+### Validating a source release
+
+A release contains links to following things:
+
+* A source tarball
+* A signature(.asc)
+* A checksum(.sha512)
+
+After downloading them, here are the instructions on how to verify them.
+
+* Import keys:
+
+```bash
+curl https://downloads.apache.org/iceberg/KEYS -o KEYS
+gpg --import KEYS
+```

Review Comment:
   ohh interesting, usually I follow the [pyiceberg release 
docs](https://py.iceberg.apache.org/verify-release/#validating-a-release-candidate)
 since their documentation used to be the easiest to follow, but I just noticed 
that iceberg docs don't have this either



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For additional commands, e-mail: issues-h...@iceberg.apache.org

Reply via email to