Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.5/kapp-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp
# Make the binary executable
chmod +x /usr/local/bin/kappVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.5/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.5/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.65.5/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- Harden resource-history debug output & make debug env var case-insensitive by @sameerforge in #1137
Full Changelog: v0.65.4...v0.65.5
📂 Files Checksum
96ef4d7da52628888542d741080c04fbdbdf313b8fbae9f63f3a35c53119461a ./kapp-linux-amd64
d9329cd6c8ca47387d065ef241c73da20152888d9184a55a0a4a3dc4b66962ed ./kapp-linux-arm64
df079c7a5cec7f1ea62ebb230e07f597d67e9ea4231ada0c19186d7b7114b48a ./kapp-darwin-amd64
7172d01b3fbbef469c7abe1dc0db009092634b967f06970677ddfa17566aaca9 ./kapp-darwin-arm64
2c60a388a8b6cb83cb316d4eb1b12e073d2265aca9796626a51abde9e993fe99 ./kapp-windows-amd64.exe