Here is my +1(binding),

I checked:  
[x] The download link is legal.
[x] The PGP signature are valid.
[x] The source code matches the current release version.
[x] The LICENSE and NOTICE files are correct.
[x] All files carry the necessary protocol header.
[x] The compiled content is not included in the source package.
[x] The compilation can be executed smoothly.

---
# cd /data/community_release_test
# wget 
https://dist.apache.org/repos/dist/dev/doris/4.0/4.0.2-rc02/apache-doris-4.0.2-rc02-src.tar.gz
# tar -xf apache-doris-4.0.2-rc02-src.tar.gz
# cd apache-doris-4.0.2-rc02-src
# docker run -it --rm -v $(pwd):/github/workspace apache/skywalking-eyes header 
check
INFO Loading configuration from file: .licenserc.yaml 
INFO Totally checked 14060 files, valid: 10443, invalid: 0, ignored: 3617, 
fixed: 0 

# cd ..
# wget 
https://dist.apache.org/repos/dist/dev/doris/4.0/4.0.2-rc02/apache-doris-4.0.2-rc02-src.tar.gz.asc
# wget https://downloads.apache.org/doris/KEYS
# wget 
https://dist.apache.org/repos/dist/dev/doris/4.0/4.0.2-rc02/apache-doris-4.0.2-rc02-src.tar.gz.sha512
# gpg --import KEYS
# gpg --verify apache-doris-4.0.2-rc02-src.tar.gz.asc 
apache-doris-4.0.2-rc02-src.tar.gz
gpg: Signature made Thu 11 Dec 2025 05:31:38 PM CST
gpg:                using RSA key C1E2DD8E81299B312E4224F3A44E008AF97D3FB3
gpg:                issuer "[email protected]"
gpg: Good signature from "yiguolei (yiguolei's key) <[email protected]>" 
[unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: C1E2 DD8E 8129 9B31 2E42  24F3 A44E 008A F97D 3FB3

# sha512sum --check apache-doris-4.0.2-rc02-src.tar.gz.sha512
apache-doris-4.0.2-rc02-src.tar.gz: OK

# docker pull apache/doris:build-env-ldb-toolchain-latest
# docker run -it -v 
/data/community_release_test/apache-doris-4.0.2-rc02-src/.m2:/root/.m2 -v 
/data/community_release_test/# 
apache-doris-4.0.2-rc02-src/:/root/apache-doris-4.0.2-rc02-src/ 
apache/doris:build-env-ldb-toolchain-latest
# cd /root/apache-doris-4.0.2-rc02-src/
# sh build.sh
...

------
lide-reed
[email protected]


On 2025/12/11 10:08:06 GuoLei Yi wrote:
> The release notes can be found here:
> https://github.com/apache/doris/issues/58605
> 
> The source package, signature and checksum corresponding
> to this release candidate can be found here:
> https://dist.apache.org/repos/dist/dev/doris/4.0/4.0.2-rc02/
> 
> 
> The convenience binaries can be downloaded here:
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-x64.tar.gz
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-x64.tar.gz.asc
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-x64.tar.gz.sha512
> 
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-x64-noavx2.tar.gz
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-x64-noavx2.tar.gz.asc
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-x64-noavx2.tar.gz.sha512
> 
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-arm64.tar.gz
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-arm64.tar.gz.asc
> https://apache-doris-releases.oss-accelerate.aliyuncs.com/apache-doris-4.0.2-bin-arm64.tar.gz.sha512
> 
> KEYS file is available here:
> 
> https://downloads.apache.org/doris/KEYS
> -- 
> Best Regards,
> Yi Guo Lei
> SelectDB
> The Best Cloud Native Platform for Apache Doris
> Tel:134-3991-0228
> Email:[email protected]
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to