Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.47.0/kbld-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kbld
# Make the binary executable
chmod +x /usr/local/bin/kbldVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install kbld
$ kbld version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.47.0/checksums.txt
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.47.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.47.0/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing✨ What's new
- Bump hashicorp/go-version, kisielk/errcheck, spf13/cobra and golang.org/x/sync by @dependabot in #488, #531, #557 and #564
- fix: trim 'v' prefix from kbld version string) by @Zebradil in #562
- Bump imgpkg-v0.47.0, vendir-v0.45.0 and golang-1.24.9 by @CodesbyUnnati in #567
New Contributors
@CodesbyUnnati made their first contribution in #567
Full Changelog: v0.46.0...v0.47.0
📂 Files Checksum
22d0ba350d8ae760dda1162893559c53065bdfb11648855ffcb7b53183a4e717 ./kbld-linux-arm64
529cb544dae41e59f75f1d5fc292865ec22e191be590058272bda63a0eb57302 ./kbld-darwin-amd64
59b2e9ee3bc9b18f3923d379f2205ab0873899c88c503e94bc4037b656adf38f ./kbld-windows-arm64.exe
5a8f0288f967538ce5b32f3dfecf67e0da59744a6ab48aeeeb86078f37ce24d2 ./kbld-windows-amd64.exe
81616056fa27db02e1b1d530f17ab1137aa6babbed1937f49df933d2e2fd1c33 ./kbld-darwin-arm64
f9cf1d84ed8dd7c19133044e15939e62c9929ecf1115edeb7275f45b99e2d1ac ./kbld-linux-amd64