[jira] [Commented] (AMBARI-4075) Download pages must use ASF mirror system for current releases

["Sebb (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMBARI-4075?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14084149#comment-14084149 ] 

Sebb commented on AMBARI-4075:
------------------------------

The incubator directory has now been removed.

However, the download area does not contain a KEYS file, and there does not appear to be a link to it anywhere, so it's impossible for users to check the signatures.

> Download pages must use ASF mirror system for current releases
> --------------------------------------------------------------
>
>                 Key: AMBARI-4075
>                 URL: https://issues.apache.org/jira/browse/AMBARI-4075
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Sebb
>            Priority: Critical
>
> The Ambari download links currently point directly to the ASF servers, for example:
> http://www.apache.org/dist/incubator/ambari/ambari-1.4.1/
> This is not allowed. Downloads MUST use the ASF mirroring system.
> Also, only the current release(s) should be available from the mirrors.
> Older (non-maintained) releases should be linked from the ASF archive server.
> Please read:
> http://www.apache.org/dev/release.html
> The folllowing need fixing:
> - change all download links for older releases to use the archive server
> - remove all the older releases from SVN [1]
> - change the current release download links to use the mirror system [2]
> [1] https://dist.apache.org/repos/dist/release/incubator/ambari/
> [2] http://www.apache.org/dev/release-download-pages



--
This message was sent by Atlassian JIRA
(v6.2#6252)