Versions Compared

Old Version 6

changes.mady.by.user Arpit Agarwal

Saved on

compared with

New Version 7

changes.mady.by.user Arpit Agarwal

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Verify signatures using the instructions at https://www.apache.org/info/verification.html#CheckingSignatures. You will need GPG installed. On MacOS machines, you can install GPG with HomeBrew using brew install gpg.

  2. Verify checkums for the source and binary artifacts from the corresponding .mds files. E.g. a quick way to do so using gpg is:

    Code Block
    languagebash
    themeRDark
    gpg --print-mds hadoop-3.1.1-src.tar.gz > mds.tmp
diff hadoop-3.1.1-src.tar.gz.mds mds.tmp


  3. Verify that there are no MD5 signatures provided.
  4. Verify that jars have been correctly staged to repository.apache.org.
    1. For 3.x releases and later, verify that the shaded fat jars look correct.
  5. Sanity check the CHANGES.md and RELEASENOTES.md files.
  6. Verify that source and binary tarballs include LICENSE.txt and NOTICE.txt files.

...