THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
Code Block |
---|
mkdir /tmp/cloudstack; cd /tmp/cloudstack wget --no-check-certificate https://dist.apache.org/repos/dist/release/cloudstack/KEYS wget --no-check-certificate https://dist.apache.org/repos/dist/dev/cloudstack/4.12.0/apache-cloudstack-4.12.0-src.tar.bz2 wget --no-check-certificate https://dist.apache.org/repos/dist/dev/cloudstack/4.12.0/apache-cloudstack-4.12.0-src.tar.bz2.asc wget --no-check-certificate https://dist.apache.org/repos/dist/dev/cloudstack/4.12.0/apache-cloudstack-4.12.0-src.tar.bz2.md5 wget --no-check-certificate https://dist.apache.org/repos/dist/dev/cloudstack/4.12.0/apache-cloudstack-4.12.0-src.tar.bz2.sha |
Install gpg (if needed): sudo apt-get install gpg
...
Code Block |
---|
gpg --verify apache-cloudstack-4.12.0-src.tar.bz2.asc |
This command should return "Good Signature".
Code Block |
---|
gpg --print-md MD5 apache-cloudstack-4.12.0-src.tar.bz2 | diff - apache-cloudstack-4.12.0-src.tar.bz2.md5 gpg --print-md SHA512 apache-cloudstack-4.12.0-src.tar.bz2 | diff - apache-cloudstack-4.12.0-src.tar.bz2.sha |
Each of these commands should return no output. If there is any output from them, then there is a difference between the hash you generated locally and the hash that has been pulled from the server.
...
Code Block |
---|
cd /tmp/cloudstack tar xvfj apache-cloudstack-4.12.0-src.tar.bz2 |
Compare the contents of the release artifact with the contents pulled from the repo:
Code Block |
---|
diff -r /tmp/cloudstack/apache-cloudstack-4.12.0-src /tmp/cloudstack/tree |
...
Code Block |
---|
cd /tmp/cloudstack/apache-cloudstack-4.12.0-src mvn --projects='org.apache.cloudstack:cloudstack' org.apache.rat:apache-rat-plugin:0.8:check |
...