github carvel-dev/kbld v0.49.0

7 hours ago

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.0/kbld-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kbld

# Make the binary executable
chmod +x /usr/local/bin/kbld

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kbld
$ kbld version  

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.0/checksums.txt
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

First Contribution

Full Changelog: v0.48.1...v0.49.0

📂 Files Checksum

5ac217660fa3418686c55d57fe1b8106d5102f95c87ac10396c927f822dc304c  ./kbld-linux-arm64
c60055a764d6da6f18369d80d601483ee429dab2dd44501a87ebad60326c25c2  ./kbld-darwin-amd64
de3fa737cd05e09d2547361b018edeaffd25cefb0857e931332528e47c252bc6  ./kbld-windows-arm64.exe
eb0d5157f05a597e086e97055afd2100e40792915c9fbc40f7504be35e11759a  ./kbld-windows-amd64.exe
f9ec8530fb677a37d9e9dd7c95fabaa2c857b2c46f21cdfdcec3a665a1236b6d  ./kbld-linux-amd64
fa66c519ce4dc44dc10e778def90d90efc556f1676610be1a71923394e13bba1  ./kbld-darwin-arm64

Don't miss a new kbld release

NewReleases is sending notifications on new releases.