Release verification

Releases of log4net can be verified with following steps:

• Windows (PowerShell)
  1. Prerequisites

     winget install -e --id GnuPG.Gpg4win
     winget install -e --id TortoiseSVN.TortoiseSVN

  2. Check out the release distribution

     svn co https://dist.apache.org/repos/dist/dev/logging/log4net/source/{releaseVersion} log4net-{releaseVersion}
     pushd log4net-{releaseVersion}

  3. Verify and extract

     & ./verify-release.ps1

  4. Verify the build

     winget install -e --id Mono.Mono
     winget install Microsoft.DotNet.SDK.8
     dotnet test ./src/log4net.sln

• Linux

  1. Check out the release distribution

     svn co https://dist.apache.org/repos/dist/dev/logging/log4net/{releaseVersion} log4net-{releaseVersion} && cd $_

  2. Verify checksums

     sha512sum --check *.sha512

  3. Import the release manager GPG keys, unless you haven’t earlier done so

     wget -O - https://downloads.apache.org/logging/KEYS | gpg --import

  4. Verify signatures

     for sigFile in *.asc; do gpg --verify $sigFile; done

  5. Extract sources

     umask 0022
     unzip -q *-src.zip -d src
     cd src

  6. Verify the build

     • install docker (if you haven't already)

     • docker build -t log4net-builder .
       docker run -it log4net-builder
       # this will
       # - install all dependencies in the container
       # - build src/log4net.sln
       # inside the container run
       dotnet test /logging-log4net/src/log4net.sln