Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.63.2/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's new

Bump go version to 1.22.5 by @devanshuVmware in #985

New Contributors

@devanshuVmware made their first contribution in #977

Full Changelog: v0.63.1...v0.63.2

📂 Files Checksum

65084088d51fa0a43a31c71da175e8158844f776e2d2731f89cc51787823ed2d  ./kapp-darwin-amd64
7b747f0107481b3b9faf8d2cac29126fb1a2aeb028cf33a551c67d8e7a6f075f  ./kapp-darwin-arm64
d760b51d8e9e3f5d0847e84fad05a51d1415fcfe309e10f885edd51d3e8c1301  ./kapp-linux-amd64
e68f3c87cd7ad0af361bef633f621e677ac53d17c946f4d40d7c12a31156bd51  ./kapp-windows-amd64.exe
f499fa48f42509e8e4e492c5f68126205319529e34b98249adbfb082a31b37db  ./kapp-linux-arm64

carvel-dev/kapp v0.63.2 on GitHub