deploy: 49a9d86

download.html

@@ -197,6 +197,39 @@ <h1 class="menu-title">Iceberg Rust</h1>
   ~ specific language governing permissions and limitations
   ~ under the License.
 -->
+<h1 id="apache-iceberg-rust-downloads"><a class="header" href="#apache-iceberg-rust-downloads">Apache Iceberg™ Rust Downloads</a></h1>
+<p>The official Apache Iceberg-Rust releases are provided as source artifacts.</p>
+<h2 id="releases"><a class="header" href="#releases">Releases</a></h2>
+<p>The latest source release is <a href="https://www.apache.org/dyn/closer.lua/iceberg/iceberg-rust-0.2.0/apache-iceberg-rust-0.2.0-src.tar.gz?action=download">0.2.0</a> (<a href="https://downloads.apache.org/iceberg/iceberg-rust-0.2.0/apache-iceberg-rust-0.2.0-src.tar.gz.asc">asc</a>,
+<a href="https://downloads.apache.org/iceberg/iceberg-rust-0.2.0/apache-iceberg-rust-0.2.0-src.tar.gz.sha512">sha512</a>).</p>
+<p>For older releases, please check the <a href="https://archive.apache.org/dist/iceberg/">archive</a>.</p>
+<h2 id="notes"><a class="header" href="#notes">Notes</a></h2>
+<ul>
+<li>When downloading a release, please verify the OpenPGP compatible signature (or failing that, check the SHA-512); these should be fetched from the main Apache site.</li>
+<li>The KEYS file contains the public keys used for signing release. It is recommended that (when possible) a web of trust is used to confirm the identity of these keys.</li>
+<li>Please download the <a href="https://downloads.apache.org/iceberg/KEYS">KEYS</a> as well as the .asc signature files.</li>
+</ul>
+<h3 id="to-verify-the-signature-of-the-release-artifact"><a class="header" href="#to-verify-the-signature-of-the-release-artifact">To verify the signature of the release artifact</a></h3>
+<p>You will need to download both the release artifact and the .asc signature file for that artifact. Then verify the signature by:</p>
+<ul>
+<li>
+<p>Download the KEYS file and the .asc signature files for the relevant release artifacts.</p>
+</li>
+<li>
+<p>Import the KEYS file to your GPG keyring:</p>
+<pre><code class="language-shell">gpg --import KEYS
+</code></pre>
+</li>
+<li>
+<p>Verify the signature of the release artifact using the following command:</p>
+<pre><code class="language-shell">gpg --verify &lt;artifact&gt;.asc &lt;artifact&gt;
+</code></pre>
+</li>
+</ul>
+<h3 id="to-verify-the-checksum-of-the-release-artifact"><a class="header" href="#to-verify-the-checksum-of-the-release-artifact">To verify the checksum of the release artifact</a></h3>
+<p>You will need to download both the release artifact and the .sha512 checksum file for that artifact. Then verify the checksum by:</p>
+<pre><code class="language-shell">shasum -a 512 -c &lt;artifact&gt;.sha512
+</code></pre>
 
                     </main>
 

print.html

@@ -243,6 +243,39 @@ <h1 id="install"><a class="header" href="#install">Install</a></h1>
   ~ specific language governing permissions and limitations
   ~ under the License.
 -->
+<h1 id="apache-iceberg-rust-downloads"><a class="header" href="#apache-iceberg-rust-downloads">Apache Iceberg™ Rust Downloads</a></h1>
+<p>The official Apache Iceberg-Rust releases are provided as source artifacts.</p>
+<h2 id="releases"><a class="header" href="#releases">Releases</a></h2>
+<p>The latest source release is <a href="https://www.apache.org/dyn/closer.lua/iceberg/iceberg-rust-0.2.0/apache-iceberg-rust-0.2.0-src.tar.gz?action=download">0.2.0</a> (<a href="https://downloads.apache.org/iceberg/iceberg-rust-0.2.0/apache-iceberg-rust-0.2.0-src.tar.gz.asc">asc</a>,
+<a href="https://downloads.apache.org/iceberg/iceberg-rust-0.2.0/apache-iceberg-rust-0.2.0-src.tar.gz.sha512">sha512</a>).</p>
+<p>For older releases, please check the <a href="https://archive.apache.org/dist/iceberg/">archive</a>.</p>
+<h2 id="notes"><a class="header" href="#notes">Notes</a></h2>
+<ul>
+<li>When downloading a release, please verify the OpenPGP compatible signature (or failing that, check the SHA-512); these should be fetched from the main Apache site.</li>
+<li>The KEYS file contains the public keys used for signing release. It is recommended that (when possible) a web of trust is used to confirm the identity of these keys.</li>
+<li>Please download the <a href="https://downloads.apache.org/iceberg/KEYS">KEYS</a> as well as the .asc signature files.</li>
+</ul>
+<h3 id="to-verify-the-signature-of-the-release-artifact"><a class="header" href="#to-verify-the-signature-of-the-release-artifact">To verify the signature of the release artifact</a></h3>
+<p>You will need to download both the release artifact and the .asc signature file for that artifact. Then verify the signature by:</p>
+<ul>
+<li>
+<p>Download the KEYS file and the .asc signature files for the relevant release artifacts.</p>
+</li>
+<li>
+<p>Import the KEYS file to your GPG keyring:</p>
+<pre><code class="language-shell">gpg --import KEYS
+</code></pre>
+</li>
+<li>
+<p>Verify the signature of the release artifact using the following command:</p>
+<pre><code class="language-shell">gpg --verify &lt;artifact&gt;.asc &lt;artifact&gt;
+</code></pre>
+</li>
+</ul>
+<h3 id="to-verify-the-checksum-of-the-release-artifact"><a class="header" href="#to-verify-the-checksum-of-the-release-artifact">To verify the checksum of the release artifact</a></h3>
+<p>You will need to download both the release artifact and the .sha512 checksum file for that artifact. Then verify the checksum by:</p>
+<pre><code class="language-shell">shasum -a 512 -c &lt;artifact&gt;.sha512
+</code></pre>
 <div style="break-before: page; page-break-before: always;"></div><!--
   ~ Licensed to the Apache Software Foundation (ASF) under one
   ~ or more contributor license agreements.  See the NOTICE file