Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Changed to 4.2.0 from 4.1.0

...

Code Block
mkdir /tmp/cloudstack; cd /tmp/cloudstack
wget --no-check-certificate https://dist.apache.org/repos/dist/release/cloudstack/KEYS
wget --no-check-certificate https://dist.apache.org/repos/dist/dev/cloudstack/4.12.0/apache-cloudstack-4.12.0-src.tar.bz2
wget --no-check-certificate https://dist.apache.org/repos/dist/dev/cloudstack/4.12.0/apache-cloudstack-4.12.0-src.tar.bz2.asc
wget --no-check-certificate https://dist.apache.org/repos/dist/dev/cloudstack/4.12.0/apache-cloudstack-4.12.0-src.tar.bz2.md5
wget --no-check-certificate https://dist.apache.org/repos/dist/dev/cloudstack/4.12.0/apache-cloudstack-4.12.0-src.tar.bz2.sha

Install gpg (if needed): sudo apt-get install gpg

...

Code Block
gpg --verify apache-cloudstack-4.12.0-src.tar.bz2.asc

This command should return "Good Signature".

Code Block
gpg --print-md MD5 apache-cloudstack-4.12.0-src.tar.bz2 | diff - apache-cloudstack-4.12.0-src.tar.bz2.md5
gpg --print-md SHA512 apache-cloudstack-4.12.0-src.tar.bz2 | diff - apache-cloudstack-4.12.0-src.tar.bz2.sha

Each of these commands should return no output. If there is any output from them, then there is a difference between the hash you generated locally and the hash that has been pulled from the server.

...

Code Block
cd /tmp/cloudstack
tar xvfj apache-cloudstack-4.12.0-src.tar.bz2

Compare the contents of the release artifact with the contents pulled from the repo:

Code Block
diff -r /tmp/cloudstack/apache-cloudstack-4.12.0-src /tmp/cloudstack/tree

...

Code Block
cd /tmp/cloudstack/apache-cloudstack-4.12.0-src
mvn --projects='org.apache.cloudstack:cloudstack' org.apache.rat:apache-rat-plugin:0.8:check

...