Hello Apache NiFi community, Please find the associated guidance to help those interested in validating/verifying the release so they can vote.
# Download latest KEYS file: https://dist.apache.org/repos/dist/dev/nifi/KEYS # Import keys file: gpg --import KEYS # [optional] Clear out local maven artifact repository # Pull down nifi-1.5.0 source release artifacts for review: wget https://dist.apache.org/repos/dist/dev/nifi/nifi-1.5.0/nifi-1.5.0-source-release.zip wget https://dist.apache.org/repos/dist/dev/nifi/nifi-1.5.0/nifi-1.5.0-source-release.zip.asc wget https://dist.apache.org/repos/dist/dev/nifi/nifi-1.5.0/nifi-1.5.0-source-release.zip.md5 wget https://dist.apache.org/repos/dist/dev/nifi/nifi-1.5.0/nifi-1.5.0-source-release.zip.sha1 wget https://dist.apache.org/repos/dist/dev/nifi/nifi-1.5.0/nifi-1.5.0-source-release.zip.sha256 # Verify the signature gpg --verify nifi-1.5.0-source-release.zip.asc # Verify the hashes (md5, sha1, sha256) match the source and what was provided in the vote email thread md5sum nifi-1.5.0-source-release.zip sha1sum nifi-1.5.0-source-release.zip sha256sum nifi-1.5.0-source-release.zip # Unzip nifi-1.5.0-source-release.zip # Verify the build works including release audit tool (RAT) checks cd nifi-1.5.0 mvn clean install -Pcontrib-check,include-grpc # Verify the contents contain a good README, NOTICE, and LICENSE. # Verify the git commit ID is correct # Verify the RC was branched off the correct git commit ID # Look at the resulting convenience binary as found in nifi-assembly/target # Make sure the README, NOTICE, and LICENSE are present and correct # Run the resulting convenience binary and make sure it works as expected # Send a response to the vote thread indicating a +1, 0, -1 based on your findings. Please note that the convenience binaries and artifacts are provided except for the tar.gz/zip of the actual nifi build. It is simply too large to upload at this time. But once https://issues.apache.org/jira/browse/INFRA-15816 is addressed I will upload it. Thank you for your time and effort to validate the release!