Download#

While DataFusion is also distributed via the Rust crates.io package manager as a convenience, the official Apache DataFusion releases are provided as source artifacts.

Releases#

The latest source release is 41.0.0 (asc, sha512).

For previous releases, please check the archive.

For releases earlier than 37.0.0, please check Arrow’s archive.

Notes#

  • When downloading a release, please verify the OpenPGP compatible signature (or failing that, check the SHA-512); these should be fetched from the main Apache site.

  • The KEYS file contains the public keys used for signing release. It is recommended that (when possible) a web of trust is used to confirm the identity of these keys.

  • Please download the KEYS as well as the .asc signature files.

To verify the signature of the release artifact#

You will need to download both the release artifact and the .asc signature file for that artifact. Then verify the signature by:

  • Download the KEYS file and the .asc signature files for the relevant release artifacts.

  • Import the KEYS file to your GPG keyring:

    gpg --import KEYS

  • Verify the signature of the release artifact using the following command:

    gpg --verify <artifact>.asc <artifact>

To verify the checksum of the release artifact#

You will need to download both the release artifact and the .sha512 checksum file for that artifact. Then verify the checksum by:

shasum -a 512 -c <artifact>.sha512