Principle:Apache Airflow RC Verification
| Knowledge Sources | |
|---|---|
| Domains | Release_Engineering, Verification |
| Last Updated | 2026-02-08 00:00 GMT |
Overview
A verification process for validating release candidate artifacts through checksum verification, signature validation, and reproducible build confirmation.
Description
RC Verification ensures release candidate artifacts are authentic, complete, and reproducible. Verifiers check SHA512 checksums, validate GPG signatures against PMC member keys, verify source code licenses, and optionally rebuild from source to confirm reproducibility. The reproducible_build.yaml file provides metadata (release-notes-hash, source-date-epoch) for reproducible build verification.
Usage
Perform RC verification before casting a vote on any release candidate. All PMC members should verify artifacts independently.
Theoretical Basis
Verification Steps:
- Checksum: SHA512 hash matches the published checksum
- Signature: GPG signature verifies against a PMC member key
- License: Source contains required license files
- Build Test: Source can be built successfully
- Reproducibility: Rebuild produces identical artifacts (optional)
Related Pages
Implemented By
Page Connections
Double-click a node to navigate. Hold to expand connections.
Principle
Implementation
Heuristic
Environment