Page History

...

1. Download and extract the build artifacts.

2. Check the SHA512 checksums:

   Code Block
   language bash theme Midnight
   find . -name '*.sha512' -exec sha512sum --check '{}' \; #alternative for (z in $(find .name '*.sha512'); do cd $(dirname $z); shasum512 ./$(basename $z) --check --quiet; cd - >dev/null; done

   
   

On the NetBeans virtual machine

...

1. Download and extract the build artifacts.

2. Check the SHA512 checksums:

   Code Block
   language bash theme Midnight bash theme Midnight
   find . -name '*.sha512' -exec sha512sum --check '{}' \; #alternative for (z in $(find .find . -name '*.sha512' -exec sha512sum); do cd $(dirname $z); shasum512 ./$(basename $z) --check '{}' \;--quiet; cd - >dev/null; done

   NB.  check (and create if necessary) .sha512 files for nbm/updates.xml and nbm/tasks.jar

3. Sign the Release Files

   Code Block
   language bash theme Midnight
   find . -name '*.zip' -exec gpg -u YOU@apache.org --armor --output {}.asc --detach-sign {} \; # Stop here if nbms are not going to be published find . -name '*.nbm' -exec gpg -u YOU@apache.org --armor --output {}.asc --detach-sign {} \; find . -name '*.gz' -exec gpg -u YOU@apache.org --armor --output {}.asc --detach-sign {} \; # nbm/updates.xml and nbm/tasks.jar added since NB 11.0 find . -name '*.jar' -exec gpg -u YOU@apache.org --armor --output {}.asc --detach-sign {} \; find . -name '*.xml' -exec gpg -u YOU@apache.org --armor --output {}.asc --detach-sign {} \;

   
   

4. Verify Signatures

   Code Block
   language bash theme Midnight
   find . -name '*.asc' -exec gpg --verify {} \;

   
   

...