This is an automated email from the ASF dual-hosted git repository.
kevinjqliu pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-rust.git
The following commit(s) were added to refs/heads/main by this push:
new 41c4aca2 Add how to verify release doc (#1426)
41c4aca2 is described below
commit 41c4aca21f95d68c9aa9fce6d989579b7acab4d0
Author: Renjie Liu <[email protected]>
AuthorDate: Sat Jun 21 12:28:45 2025 +0800
Add how to verify release doc (#1426)
## Which issue does this PR close?
- Closes #1413 .
## What changes are included in this PR?
Add doc about how to verify release
## Are these changes tested?
No.
---------
Co-authored-by: Kevin Liu <[email protected]>
---
website/src/release.md | 27 +++++++++++++++++++++++++++
1 file changed, 27 insertions(+)
diff --git a/website/src/release.md b/website/src/release.md
index dc94bb68..058daf85 100644
--- a/website/src/release.md
+++ b/website/src/release.md
@@ -306,6 +306,33 @@ ${name}
Example: <https://lists.apache.org/thread/xk5myl10mztcfotn59oo59s4ckvojds6>
+## How to verify a release
+
+### Validating a source release
+
+A release contains links to following things:
+
+* A source tarball
+* A signature(.asc)
+* A checksum(.sha512)
+
+After downloading them, here are the instructions on how to verify them.
+
+* Import keys:
+
+```bash
+curl https://downloads.apache.org/iceberg/KEYS -o KEYS
+gpg --import KEYS
+```
+* Verify the `.asc` file: ```gpg --verify
apache-iceberg-rust-${iceberg_version}.tar.gz.asc```
+* Verify the checksums: ```shasum -a 512
apache-iceberg-rust-${iceberg_version}.tar.gz.sha512```
+* Verify build and test:
+```bash
+tar -xzf apache-iceberg-rust-${iceberg_version}.tar.gz
+cd apache-iceberg-rust-${iceberg_version}
+make build && make test
+```
+
## Official Release
### Push the release git tag
