Uploaded image for project: 'Calcite'
  1. Calcite
  2. CALCITE-960

Download links for pgp, md5, KEYS files, and direct from mirrors

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.6.0
    • Component/s: None
    • Labels:
      None

      Description

      I noticed the recent announce mail of Calcite 1.5.0, which points to the generic ASF download page.

      However I could not find any links to download releases on the website.
      I found the developer page, but that only shows links for the current source.

      Have I overlooked the page?
      If so, where is it?

      It would help if there were a page that linked to the official releases on the ASF mirror system; this should be clearly linked from the main menu.

        Activity

        Hide
        julianhyde Julian Hyde added a comment -

        From the home page click 'Documentation' at the top, then 'Downloads' on the bottom right. But yes, we need to make it more obvious.

        Show
        julianhyde Julian Hyde added a comment - From the home page click 'Documentation' at the top, then 'Downloads' on the bottom right. But yes, we need to make it more obvious.
        Hide
        sebb@apache.org Sebb added a comment -

        OK, I see now. I would never have thought to look under Documentation.

        The News page has details of various releases but also has no links to downloads that I could find.

        It would also help if the downloads page included links to the KEYS file, and the sigs/hashes.

        Note that you can have a customised download page that could follow the style of the rest of the site

        For example these pages follow the style of the rest of the site:
        http://archiva.apache.org/download.cgi
        http://commons.apache.org/proper/commons-math/download_math.cgi
        http://httpd.apache.org/download.cgi

        See: http://www.apache.org/dev/release-download-pages.html#custom for details on how to set this up.

        An alternative approach is the one here:

        http://camel.apache.org/download.html

        This uses the site download page to show all the releases, hashes, sigs, keys etc and points directly to the ASF mirror service for the actual download.

        Show
        sebb@apache.org Sebb added a comment - OK, I see now. I would never have thought to look under Documentation. The News page has details of various releases but also has no links to downloads that I could find. It would also help if the downloads page included links to the KEYS file, and the sigs/hashes. Note that you can have a customised download page that could follow the style of the rest of the site For example these pages follow the style of the rest of the site: http://archiva.apache.org/download.cgi http://commons.apache.org/proper/commons-math/download_math.cgi http://httpd.apache.org/download.cgi See: http://www.apache.org/dev/release-download-pages.html#custom for details on how to set this up. An alternative approach is the one here: http://camel.apache.org/download.html This uses the site download page to show all the releases, hashes, sigs, keys etc and points directly to the ASF mirror service for the actual download.
        Hide
        julianhyde Julian Hyde added a comment -

        Our download page is fairly close to what Camel does, but I agree we need to add KEYS, hashes etc.

        Show
        julianhyde Julian Hyde added a comment - Our download page is fairly close to what Camel does, but I agree we need to add KEYS, hashes etc.
        Hide
        sebb@apache.org Sebb added a comment -

        I've just discovered that there is a way to link directly to the download file without needing to go via the ASF mirror page, see:

        https://issues.apache.org/jira/browse/CAMEL-9308

        Show
        sebb@apache.org Sebb added a comment - I've just discovered that there is a way to link directly to the download file without needing to go via the ASF mirror page, see: https://issues.apache.org/jira/browse/CAMEL-9308
        Hide
        julianhyde Julian Hyde added a comment -

        Sebb, I've added tar, zip, md5, pgp and KEYS links to the download page, and you can see a prototype at http://calcite.hydromatic.net/docs/downloads.html. I decided not to use the one-step process described in CAMEL-9308 because it is confusing if a mirror fails.

        Show
        julianhyde Julian Hyde added a comment - Sebb , I've added tar, zip, md5, pgp and KEYS links to the download page, and you can see a prototype at http://calcite.hydromatic.net/docs/downloads.html . I decided not to use the one-step process described in CAMEL-9308 because it is confusing if a mirror fails.
        Hide
        jnadeau Jacques Nadeau added a comment -

        This and the custom download page above are great pieces of info. Thanks, didn't realize that either of these were possible.

        Show
        jnadeau Jacques Nadeau added a comment - This and the custom download page above are great pieces of info. Thanks, didn't realize that either of these were possible.
        Hide
        sebb@apache.org Sebb added a comment -

        That looks good. BTW, the hash and sig links should ideally use https:

        Minor nit: the pgp files are not hashes, they are signatures.

        So perhaps change the text to:

        Choose a source distribution in either tar or zip format, and verify using the corresponding pgp signature (using the committer keys in KEYS).
        If you cannot do that, the MD5 hash file may be used to check that the download has completed OK.

        For fast downloads, recent source distributions are hosted on mirror servers; older source distributions are in the archive or incubator archive.

        For security, hash and signature files are always hosted at Apache.

        It might be worth adding a link to
        http://www.apache.org/dyn/closer.cgi#verify
        and/or
        http://www.apache.org/info/verification.html

        Show
        sebb@apache.org Sebb added a comment - That looks good. BTW, the hash and sig links should ideally use https: Minor nit: the pgp files are not hashes, they are signatures. So perhaps change the text to: Choose a source distribution in either tar or zip format, and verify using the corresponding pgp signature (using the committer keys in KEYS). If you cannot do that, the MD5 hash file may be used to check that the download has completed OK. For fast downloads, recent source distributions are hosted on mirror servers; older source distributions are in the archive or incubator archive. For security, hash and signature files are always hosted at Apache. It might be worth adding a link to http://www.apache.org/dyn/closer.cgi#verify and/or http://www.apache.org/info/verification.html
        Hide
        sebb@apache.org Sebb added a comment -

        I decided not to use the one-step process described in CAMEL-9308 because it is confusing if a mirror fails.

        That should be quite rare, and you could always add a message to suggest retrying if there is a problem.
        The same can happen with the ASF generic links, in which case the user will still have to go back to the previous page in order to select a new mirror.

        Show
        sebb@apache.org Sebb added a comment - I decided not to use the one-step process described in CAMEL-9308 because it is confusing if a mirror fails. That should be quite rare, and you could always add a message to suggest retrying if there is a problem. The same can happen with the ASF generic links, in which case the user will still have to go back to the previous page in order to select a new mirror.
        Hide
        julianhyde Julian Hyde added a comment -

        I'm re-titling this issue. The original purpose of this issue, "Where is the download page on the website?" is dealt with as part of CALCITE-961. This issue will deal with the links and instructions on the download page.

        Show
        julianhyde Julian Hyde added a comment - I'm re-titling this issue. The original purpose of this issue, "Where is the download page on the website?" is dealt with as part of CALCITE-961 . This issue will deal with the links and instructions on the download page.
        Show
        julianhyde Julian Hyde added a comment - Fixed in http://git-wip-us.apache.org/repos/asf/calcite/commit/7dd21420 .
        Hide
        sebb@apache.org Sebb added a comment -

        Looks good.

        Minor nit: the text says

        "recent source distributions may be hosted"

        should be

        "recent source distributions are hosted"
        or perhaps better
        "current source distributions are hosted"

        Show
        sebb@apache.org Sebb added a comment - Looks good. Minor nit: the text says "recent source distributions may be hosted" should be "recent source distributions are hosted" or perhaps better "current source distributions are hosted"
        Hide
        julianhyde Julian Hyde added a comment -

        Resolved in release 1.6.0 (2016-01-22).

        Show
        julianhyde Julian Hyde added a comment - Resolved in release 1.6.0 (2016-01-22).

          People

          • Assignee:
            julianhyde Julian Hyde
            Reporter:
            sebb@apache.org Sebb
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development