You are viewing a plain text version of this content. The canonical link for it is here.
Posted to tashi-commits@incubator.apache.org by st...@apache.org on 2012/03/05 04:25:18 UTC
svn commit: r1296935 - in /incubator/tashi/site: docs/downloads.html
xdocs/downloads.xml
Author: stroucki
Date: Mon Mar 5 04:25:18 2012
New Revision: 1296935
URL: http://svn.apache.org/viewvc?rev=1296935&view=rev
Log:
downloads: Update documentation to allow downloading of release.
Modified:
incubator/tashi/site/docs/downloads.html
incubator/tashi/site/xdocs/downloads.xml
Modified: incubator/tashi/site/docs/downloads.html
URL: http://svn.apache.org/viewvc/incubator/tashi/site/docs/downloads.html?rev=1296935&r1=1296934&r2=1296935&view=diff
==============================================================================
--- incubator/tashi/site/docs/downloads.html (original)
+++ incubator/tashi/site/docs/downloads.html Mon Mar 5 04:25:18 2012
@@ -98,11 +98,38 @@ table.options td {
<td align="left" valign="top" width="100%">
<h2>Downloads</h2>
- <p>
-Since the Tashi project has just entered incubation, we have not made any
-formal releases, but you are welcome (and encouraged!) to download the code
-from <a href="source_code.html">SVN</a> and begin participating.
+ <p>Use the links below to download Apache Tashi releases from one of our mirrors.
+ You should verify the integrity of the files using the signatures and checksums as detailed below.
+ <br /><br />
+ Apache Tashi releases are available under the
+ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.
+ See the NOTICE.txt file contained in each release artifact for applicable copyright attribution notices.
+ <br /><br />
+ <a href="http://www.apache.org/dyn/closer.cgi/incubator/tashi/201202-incubating">Download release 201202-incubating now!</a>
+ </p>
+ <p>All of the release distribution package have been digitally signed (using PGP or GPG) by
+ the Apache members who constructed them.
+You should not consider the sums and signatures on mirror sites to be authoritative. The authoritative files are here:
+<a href="http://www.apache.org/dist/incubator/tashi/">Authoritative site</a>.
</p>
+ <p>
+There will be an accompanying tashi-xxxxxx-incubating.tar.gz.asc signature file
+ in the same directory as the distribution.
+ The PGP keys can be found in the MIT key repository (hkp://pgp.mit.edu),
+ the OpenPGP Public Key repository (hkp://subkeys.pgp.net), and within this project's KEYS file,
+ which is located within each download directory.
+ <br /><br />
+ Always use the signature files to verify the authenticity of the distribution, e.g.,
+<div class="lit"><pre>
+ % pgpk -a KEYS
+ % pgpv tashi-xxxxxx-incubating.tar.gz.asc</pre>
+ or,
+ <pre> % gpg --import KEYS
+ % gpg --verify tashi-xxxxxx-incubating.tar.gz.asc</pre></div>
+ We offer MD5 hashes as an alternative to validate the integrity of the downloaded files.
+ A unix program called md5 or md5sum is included in many unix distributions.
+ It is also available as part of <a href="http://www.gnu.org/software/coreutils">GNU Core Utilities package</a>.
+ </p>
</td>
</tr>
</table>
Modified: incubator/tashi/site/xdocs/downloads.xml
URL: http://svn.apache.org/viewvc/incubator/tashi/site/xdocs/downloads.xml?rev=1296935&r1=1296934&r2=1296935&view=diff
==============================================================================
--- incubator/tashi/site/xdocs/downloads.xml (original)
+++ incubator/tashi/site/xdocs/downloads.xml Mon Mar 5 04:25:18 2012
@@ -19,22 +19,46 @@
-->
<document>
-
<properties>
<title>Downloads</title>
</properties>
-
-<body>
-
-<section name="Downloads">
-
-<p>
-Since the Tashi project has just entered incubation, we have not made any
-formal releases, but you are welcome (and encouraged!) to download the code
-from <a href="source_code.html">SVN</a> and begin participating.
+ <body>
+ <section name="Downloads">
+ <!-- <subsection name="Download"></subsection> -->
+ <p>Use the links below to download Apache Tashi releases from one of our mirrors.
+ You should verify the integrity of the files using the signatures and checksums as detailed below.
+ <br/><br/>
+ Apache Tashi releases are available under the
+ <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.
+ See the NOTICE.txt file contained in each release artifact for applicable copyright attribution notices.
+ <br/><br/>
+ <a href="http://www.apache.org/dyn/closer.cgi/incubator/tashi/201202-incubating">Download release 201202-incubating now!</a>
+ </p>
+
+ <!-- <subsection name="PGP Signatures"></subsection> -->
+ <p>All of the release distribution package have been digitally signed (using PGP or GPG) by
+ the Apache members who constructed them.
+You should not consider the sums and signatures on mirror sites to be authoritative. The authoritative files are here:
+<a href="http://www.apache.org/dist/incubator/tashi/">Authoritative site</a>.
</p>
-
+<p>
+There will be an accompanying tashi-xxxxxx-incubating.tar.gz.asc signature file
+ in the same directory as the distribution.
+ The PGP keys can be found in the MIT key repository (hkp://pgp.mit.edu),
+ the OpenPGP Public Key repository (hkp://subkeys.pgp.net), and within this project's KEYS file,
+ which is located within each download directory.
+ <br/><br/>
+ Always use the signature files to verify the authenticity of the distribution, e.g.,
+<div class="lit"><pre>
+ % pgpk -a KEYS
+ % pgpv tashi-xxxxxx-incubating.tar.gz.asc</pre>
+ or,
+ <pre> % gpg --import KEYS
+ % gpg --verify tashi-xxxxxx-incubating.tar.gz.asc</pre></div>
+ We offer MD5 hashes as an alternative to validate the integrity of the downloaded files.
+ A unix program called md5 or md5sum is included in many unix distributions.
+ It is also available as part of <a href="http://www.gnu.org/software/coreutils">GNU Core Utilities package</a>.
+ </p>
</section>
-
-</body>
+ </body>
</document>