You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sentry.apache.org by bu...@apache.org on 2016/09/08 09:05:41 UTC
svn commit: r996936 - in /websites/staging/sentry/trunk/content: ./
general/downloads.html
Author: buildbot
Date: Thu Sep 8 09:05:40 2016
New Revision: 996936
Log:
Staging update by buildbot for sentry
Modified:
websites/staging/sentry/trunk/content/ (props changed)
websites/staging/sentry/trunk/content/general/downloads.html
Propchange: websites/staging/sentry/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Thu Sep 8 09:05:40 2016
@@ -1 +1 @@
-1759761
+1759768
Modified: websites/staging/sentry/trunk/content/general/downloads.html
==============================================================================
--- websites/staging/sentry/trunk/content/general/downloads.html (original)
+++ websites/staging/sentry/trunk/content/general/downloads.html Thu Sep 8 09:05:40 2016
@@ -95,18 +95,41 @@ h2:hover > .headerlink, h3:hover > .head
}
h2:hover > .headerlink, h3:hover > .headerlink, h1:hover > .headerlink, h6:hover > .headerlink, h4:hover > .headerlink, h5:hover > .headerlink, dt:hover > .elementid-permalink { visibility: visible }</style>
<h1 id="apache-sentry-releases">Apache Sentry Releases<a class="headerlink" href="#apache-sentry-releases" title="Permanent link">¶</a></h1>
-<h2 id="current-release">Current release<a class="headerlink" href="#current-release" title="Permanent link">¶</a></h2>
+<h2 id="how-to-download">How to Download<a class="headerlink" href="#how-to-download" title="Permanent link">¶</a></h2>
+<p>Use the links below to download a distribution of Apache Sentry from one of our
+mirrors. It is good practice to verify the integrity of the distribution files.
+Apache Sentry releases are available under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>
+ - see the LICENSE.txt and NOTICE.txt files contained in each release artifact.</p>
+<h2 id="current-official-release-closest-mirror-site-selected-automatically">Current official release (closest mirror site selected automatically)<a class="headerlink" href="#current-official-release-closest-mirror-site-selected-automatically" title="Permanent link">¶</a></h2>
<ul>
-<li><a href="http://www.apache.org/dyn/closer.cgi/sentry/1.7.0-incubating">1.7.0</a> (<a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314720&version=12333348">changelog</a>)</li>
+<li><a href="http://www.apache.org/dyn/closer.cgi/sentry/1.7.0">1.7.0</a> (<a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314720&version=12333348">changelog</a>) (<a href="https://www.apache.org/dist/sentry/1.7.0/apache-sentry-1.7.0-src.tar.gz.asc">PGP</a>) (<a href="https://www.apache.org/dist/sentry/1.7.0/apache-sentry-1.7.0-src.tar.gz.md5">MD5</a>) (<a href="https://www.apache.org/dist/sentry/1.7.0/apache-sentry-1.7.0-src.tar.gz.sha">SHA</a>)</li>
</ul>
-<h2 id="previous-releases">Previous releases<a class="headerlink" href="#previous-releases" title="Permanent link">¶</a></h2>
+<h2 id="an-older-branch-release-is-closest-mirror-site-selected-automatically">An older branch release is (closest mirror site selected automatically)<a class="headerlink" href="#an-older-branch-release-is-closest-mirror-site-selected-automatically" title="Permanent link">¶</a></h2>
<ul>
-<li><a href="http://www.apache.org/dyn/closer.cgi/sentry/1.6.0-incubating">1.6.0-incubating</a> (<a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12329716&projectId=12314720">changelog</a>)</li>
-<li><a href="http://www.apache.org/dyn/closer.cgi/sentry/1.5.1-incubating">1.5.1-incubating</a> (<a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12327461&projectId=12314720">changelog</a>)</li>
-<li><a href="http://archive.apache.org/dist/sentry/1.4.0-incubating">1.4.0-incubating</a> (<a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12326252&projectId=12314720">changelog</a>)</li>
-<li><a href="http://archive.apache.org/dist/sentry/1.3.0-incubating">1.3.0-incubating</a> (<a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314720&version=12325060">changelog</a>)</li>
-<li><a href="http://archive.apache.org/dist/sentry/1.2.0-incubating">1.2.0-incubating</a> (<a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314720&version=12325059">changelog</a>)</li>
+<li><a href="http://www.apache.org/dyn/closer.cgi/sentry/1.6.0-incubating">1.6.0</a> (<a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12329716&projectId=12314720">changelog</a>) (<a href="https://www.apache.org/dist/sentry/1.6.0-incubating/apache-sentry-1.6.0-incubating-src.tar.gz.asc">PGP</a>) (<a href="https://www.apache.org/dist/sentry/1.6.0-incubating/apache-sentry-1.6.0-incubating-src.tar.gz.md5">MD5</a>) (<a href="https://www.apache.org/dist/sentry/1.6.0-incubating/apache-sentry-1.6.0-incubating-src.tar.gz.sha">SHA</a>)</li>
</ul>
+<h2 id="verifying-releases">Verifying Releases<a class="headerlink" href="#verifying-releases" title="Permanent link">¶</a></h2>
+<p>When downloading from a mirror please check the SHA1/MD5 checksums as well as
+verifying the OpenPGP compatible signature available from the main Apache site.
+The <a href="https://www.apache.org/dist/sentry/KEYS">KEYS</a> file contains the public keys used for signing the release. It
+is recommended that a web of trust is used to confirm the identity of these
+keys.</p>
+<p>You can check the OpenPGP compatible signature with GnuPG via:</p>
+<ul>
+<li>gpg --import KEYS</li>
+<li>gpg --verify apache-sentry-*-src.tar.gz.asc</li>
+</ul>
+<p>The digests are stored in the files called 'apache-sentry-<em>-src.tar.gz.md5' and
+'apache-sentry-</em>-src.tar.gz.sha'. You can verify the digests by using a tool
+like md5sum or sha1sum as follows:</p>
+<ul>
+<li>md5sum apache-sentry-<em>-src.tar.gz (and compare output to the relevant
+digest in apache-sentry-</em>-src.tar.gz.md5)</li>
+<li>sha1sum apache-sentry-<em>-src.tar.gz (and compare output to the relevant
+digest in apache-sentry-</em>-src.tar.gz.mds)</li>
+</ul>
+<h2 id="archive-of-old-releases">Archive of old releases<a class="headerlink" href="#archive-of-old-releases" title="Permanent link">¶</a></h2>
+<p>Older releases are available in the <a href="https://archive.apache.org/dist/sentry/">archive</a>.</p>
</div>
<div id="footera">