You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@predictionio.apache.org by do...@apache.org on 2018/09/10 19:02:41 UTC

predictionio git commit: [PIO-156] Direct links to sigs and hashes

Repository: predictionio
Updated Branches:
  refs/heads/livedoc 1a8babeea -> fdd3e8457


[PIO-156] Direct links to sigs and hashes


Project: http://git-wip-us.apache.org/repos/asf/predictionio/repo
Commit: http://git-wip-us.apache.org/repos/asf/predictionio/commit/fdd3e845
Tree: http://git-wip-us.apache.org/repos/asf/predictionio/tree/fdd3e845
Diff: http://git-wip-us.apache.org/repos/asf/predictionio/diff/fdd3e845

Branch: refs/heads/livedoc
Commit: fdd3e8457e76fee2f54e71484f5b5a9436dead47
Parents: 1a8babe
Author: Donald Szeto <do...@apache.org>
Authored: Mon Sep 10 12:02:26 2018 -0700
Committer: Donald Szeto <do...@apache.org>
Committed: Mon Sep 10 12:02:26 2018 -0700

----------------------------------------------------------------------
 .../install/install-sourcecode.html.md.erb      | 54 +++++++++++++++++---
 1 file changed, 47 insertions(+), 7 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/predictionio/blob/fdd3e845/docs/manual/source/install/install-sourcecode.html.md.erb
----------------------------------------------------------------------
diff --git a/docs/manual/source/install/install-sourcecode.html.md.erb b/docs/manual/source/install/install-sourcecode.html.md.erb
index a16acde..edb6cdb 100644
--- a/docs/manual/source/install/install-sourcecode.html.md.erb
+++ b/docs/manual/source/install/install-sourcecode.html.md.erb
@@ -32,9 +32,41 @@ building against
 * Hadoop 2.7.3
 * Elasticsearch 5.5.2
 
-Download binary release from an [Apache mirror](https://www.apache.org/dyn/closer.cgi/predictionio/<%=
-data.versions.pio %>/apache-predictionio-<%= data.versions.pio %>-bin.tar.gz)
-and verify the release.
+Download [binary release from an Apache
+mirror](https://www.apache.org/dyn/closer.lua/predictionio/<%= data.versions.pio
+%>/apache-predictionio-<%= data.versions.pio %>-bin.tar.gz) and verify the
+release with the corresponding
+[signature](https://archive.apache.org/dist/predictionio/<%=
+data.versions.pio %>/apache-predictionio-<%= data.versions.pio
+%>-bin.tar.gz.asc) and
+[checksum](https://archive.apache.org/dist/predictionio/<%=
+data.versions.pio %>/apache-predictionio-<%= data.versions.pio
+%>-bin.tar.gz.sha512).
+
+### Verifying Release
+
+Verify binary/source release using [signatures and checksums]
+(https://www.apache.org/dist/predictionio/<%= data.versions.pio %>/)
+and [project release KEYS](https://www.apache.org/dist/predictionio/KEYS).
+
+```
+$ gpg --import KEYS
+$ gpg --verify apache-predictionio-<%= data.versions.pio %>.tar.gz.asc apache-predictionio-<%= data.versions.pio %>.tar.gz
+```
+
+You should see something like this.
+
+```
+gpg: Signature made Tue Sep 26 22:55:22 2017 PDT
+gpg:                using RSA key 7E2363D84719A8F4
+gpg: Good signature from "Chan Lee <ch...@apache.org>" [ultimate]
+```
+
+For further information, the [official guide from
+Apache](https://www.apache.org/info/verification.html) has the most up-to-date
+and complete information.
+
+### Installation
 
 Extract the binary distribution and proceed to
 [Installing Dependencies](#installing-dependencies).
@@ -45,10 +77,14 @@ $ tar zxvf apache-predictionio-<%= data.versions.pio %>.tar.gz
 
 ## Downloading Source Code
 
-Download Apache PredictionIO source <%= data.versions.pio %> from an
-[Apache mirror](https://www.apache.org/dyn/closer.cgi/predictionio/<%=
-data.versions.pio %>/apache-predictionio-<%= data.versions.pio %>.tar.gz) and
-verify the release.
+Download [source release from an Apache
+mirror](https://www.apache.org/dyn/closer.cgi/predictionio/<%= data.versions.pio
+%>/apache-predictionio-<%= data.versions.pio %>.tar.gz) and verify the release
+with the corresponding
+[signature](https://archive.apache.org/dist/predictionio/<%= data.versions.pio
+%>/apache-predictionio-<%= data.versions.pio %>.tar.gz.asc) and
+[checksum](https://archive.apache.org/dist/predictionio/<%= data.versions.pio
+%>/apache-predictionio-<%= data.versions.pio %>.tar.gz.sha512).
 
 ### Verifying Release
 
@@ -69,6 +105,10 @@ gpg:                using RSA key 7E2363D84719A8F4
 gpg: Good signature from "Chan Lee <ch...@apache.org>" [ultimate]
 ```
 
+For further information, the [official guide from
+Apache](https://www.apache.org/info/verification.html) has the most up-to-date
+and complete information.
+
 ## Building
 
 Run the following at the directory where you downloaded the source code to build