Updating installation instructions (merged from trunk)
git-svn-id: https://svn.apache.org/repos/asf/lenya/tags/RELEASE_2_0@609706 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/INSTALL-SRC.txt b/INSTALL-SRC.txt
index f2bad89..c50b21b 100644
--- a/INSTALL-SRC.txt
+++ b/INSTALL-SRC.txt
@@ -33,11 +33,11 @@
Apache Cocoon is included in the Lenya distribution. In the SVN version of Lenya, Cocoon is
included using svn:externals. You do not have to download it separately.
Note that Cocoon is needed when building the source version of Lenya, but the
- resulting Lenya webapp is completely self contained and therefore it does not need
+ resulting Lenya webapp is completely self-contained and therefore it does not need
the Cocoon webapp to be installed. See the FAQ for details of configuration changes
required when running multiple Cocoon based applications.
- * A SVN client
+ * (optional) An SVN client
SVN (or subversion) is a software revision control system that is used by the Lenya community to
manage the development tree. If you want to use the latest development version, you will need to
install a client in order to check out your local copy of Lenya.
@@ -61,8 +61,22 @@
(Windows: start -> Control Panel -> System -> Advanced -> Environment Variables -> User variables
...)
- 2. Check out Apache Lenya from SVN:
- Change into the directory where you want your Lenya sources to be, and do
+ 2. Download Lenya (in case you don't have it already), and compute the
+ MD5 checksum of the Lenya distribution file:
+
+ md5sum <apache-lenya file>
+
+ Then visit http://people.apache.org/~henkp/cgi-bin/md5.cgi and follow the instructions
+ to verify the integrity of the file you have downloaded.
+
+ Change into the directory where you want your Lenya sources to be, and unpack the source:
+
+ tar xvzf <apache-lenya>.tar.gz (for the tarball)
+ unzip <apache-lenya>.zip (for the zip archive)
+
+ OR
+
+ * Check out Apache Lenya from SVN:
svn checkout http://svn.apache.org/repos/asf/lenya/trunk lenya-2.0.x
@@ -165,6 +179,13 @@
Security Considerations
+ Prior to compilation, you should verify the integrity of the file you
+ just downloaded, by following the instructions at
+
+ http://people.apache.org/~henkp/cgi-bin/md5.cgi
+
+ In case of doubt, please ask on the mailing lists before proceeding.
+
It is advisable to run Lenya's servlet container with limited privileges,
to reduce the impact of a possible exploit.
You might want to create a user "lenya" with default group "lenya" for
