...
Download OpenPGP Keys for Signature Verification
wget wget https://dist.apache.org/repos/dist/devrelease/nifi/KEYS
wget for Windows can be found here.
...
Download Source Release Files
export VERSION=2.0.0-M1M4
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${VERSION}$VERSION/nifi-${VERSION}$VERSION-source-release.zip
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${VERSION}$VERSION/nifi-${VERSION}$VERSION-source-release.zip.asc
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${VERSION}$VERSION/nifi-${VERSION}$VERSION-source-release.zip.sha256
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${VERSION}$VERSION/nifi-${VERSION}$VERSION-source-release.zip.sha512
Verify OpenPGP Signatures
gpg --verify -v nifi-${VERSION}$VERSION-source-release.zip.asc
Verify Hashes Match Source Release Files and Vote Email Thread
Run the following commands on Linux or macOS:
shasum -a 256 nifi-${VERSION}$VERSION-source-release.zip
shasum -a 512 nifi-${VERSION}$VERSION-source-release.zip
Run the following commands on Windows:
certutil -hashfile nifi-${VERSION}$VERSION-source-release.zip SHA256
certutil -hashfile nifi-${VERSION}$VERSION-source-release.zip SHA512
Extract Source Release Files
unzip -DD nifi-${VERSION}$VERSION-source-release.zip
Verify Maven Build with Licensing and Style Checks
Use Maven Wrapper to build using the currently configured Maven version. The Maven Wrapper script is named mvnw for Linux and macOS, and mvnw.cmd for Windows.
cd nifi-${VERSION}$VERSION
On Linux or macOS
./mvnw -T 1C clean install -Pcontrib-check
...