You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pegasus.apache.org by la...@apache.org on 2021/06/28 15:57:14 UTC

[incubator-pegasus-website] branch master updated: Update download page: remove git clone, add verify steps

This is an automated email from the ASF dual-hosted git repository.

laiyingchun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-pegasus-website.git


The following commit(s) were added to refs/heads/master by this push:
     new 65a5209  Update download page: remove git clone, add verify steps
65a5209 is described below

commit 65a5209f6c20b749da57fb221dcc6109bab1203e
Author: Yingchun Lai <40...@qq.com>
AuthorDate: Mon Jun 28 23:57:03 2021 +0800

    Update download page: remove git clone, add verify steps
---
 _docs/en/downloads.md | 17 ++++++++---------
 _docs/zh/downloads.md | 13 +++++++------
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/_docs/en/downloads.md b/_docs/en/downloads.md
index 4f63388..7a8839b 100644
--- a/_docs/en/downloads.md
+++ b/_docs/en/downloads.md
@@ -2,7 +2,14 @@
 permalink: docs/downloads/
 ---
 
-We recommend downloading the signed source release that follows [ASF Release Policy](http://www.apache.org/legal/release-policy.html):
+We recommend downloading the signed source release that follows [ASF Release Policy](http://www.apache.org/legal/release-policy.html): 
+> To verify the integrity of the release, check the following:
+> - Verify the checksum by downloading the `Package` and the `Checksum` file, and running the following command:
+>   - On Linux: `sha512sum -c apache-pegasus-2.2.0-incubating-src.zip.sha512`
+>   - On MacOS: `shasum -a 512 -c apache-pegasus-2.2.0-incubating-src.zip.sha512`
+> - Verify the signature by downloading the `Package` and the `Signature` file, and doing the following:
+>   - Import the [KEYS file](https://downloads.apache.org/incubator/pegasus/KEYS) to the GPG keychain by running `gpg --import KEYS`
+>   - Run `gpg --verify apache-pegasus-2.2.0-incubating-src.zip.asc apache-pegasus-2.2.0-incubating-src.zip`
 
 [2.1.0-src]: https://www.apache.org/dyn/closer.cgi?path=/incubator/pegasus/2.1.0/apache-pegasus-2.1.0-incubating-src.zip
 [2.1.0-asc]: https://downloads.apache.org/incubator/pegasus/2.1.0/apache-pegasus-2.1.0-incubating-src.zip.asc
@@ -18,11 +25,3 @@ Name | Package | Signature | Checksum | Release Notes |
 Apache Pegasus 2.1.0 | [Source][2.1.0-src] | [asc][2.1.0-asc] | [sha512][2.1.0-sha] | [2020-11-30][2.1.0-rn]
 Apache Pegasus 2.2.0 | [Source][2.2.0-src] | [asc][2.2.0-asc] | [sha512][2.2.0-sha] | [2021-06-27][2.2.0-rn]
 
-You can also download the sources via git clone:
-
-```bash
-git clone {{ site.pegasus_github_url }}.git --recursive
-cd incubator-pegasus
-git checkout -b v2.2.0 v2.2.0
-git submodule update
-```
diff --git a/_docs/zh/downloads.md b/_docs/zh/downloads.md
index 5c40961..54a55ce 100644
--- a/_docs/zh/downloads.md
+++ b/_docs/zh/downloads.md
@@ -3,6 +3,13 @@ permalink: docs/downloads/
 ---
 
 我们推荐下载遵循[ASF Release Policy](http://www.apache.org/legal/release-policy.html)发布的源码包:
+> 执行以下操作来验证release包的正确性:
+> - 下载`Package`包和`Checksum`文件来验证checksum,执行以下命令:
+>   - Linux: `sha512sum -c apache-pegasus-2.2.0-incubating-src.zip.sha512`
+>   - MacOS: `shasum -a 512 -c apache-pegasus-2.2.0-incubating-src.zip.sha512`
+> - 下载`Package`包和`Signature`文件来验证签名,执行以下命令:
+>   - 导入[KEYS文件](https://downloads.apache.org/incubator/pegasus/KEYS) 到GPG keychain:`gpg --import KEYS`
+>   - 执行命令 `gpg --verify apache-pegasus-2.2.0-incubating-src.zip.asc apache-pegasus-2.2.0-incubating-src.zip`
 
 [2.1.0-src]: https://www.apache.org/dyn/closer.cgi?path=/incubator/pegasus/2.1.0/apache-pegasus-2.1.0-incubating-src.zip
 [2.1.0-asc]: https://downloads.apache.org/incubator/pegasus/2.1.0/apache-pegasus-2.1.0-incubating-src.zip.asc
@@ -18,12 +25,6 @@ Name | Package | Signature | Checksum | Release Notes |
 Apache Pegasus 2.1.0 | [Source][2.1.0-src] | [asc][2.1.0-asc] | [sha512][2.1.0-sha] | [2020-11-30][2.1.0-rn]
 Apache Pegasus 2.2.0 | [Source][2.2.0-src] | [asc][2.2.0-asc] | [sha512][2.2.0-sha] | [2021-06-27][2.2.0-rn]
 
-你也可以通过git clone的方式获取Pegasus源码:
-
-```bash
-git clone -b v2.2.0 --recursive https://github.com/apache/incubator-pegasus.git
-```
-
 在 2.1.0 版本以前,Pegasus 并未遵循 ASF 发版流程,这里我们仍然提供老版本下载渠道,方便升级:
 
 [2.0.0-src]: https://github.com/apache/incubator-pegasus/releases/download/v2.0.0/apache-pegasus-2.0.0-incubating-src.zip

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pegasus.apache.org
For additional commands, e-mail: commits-help@pegasus.apache.org