Skip to content

v0.43.1

Latest
Latest
Compare
Choose a tag to compare
@github-actions github-actions released this 28 Mar 12:03
· 8 commits to develop since this release
v0.43.1
72a506b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.43.1/vendir-linux-amd64

# Move the binary in to your PATH
mv vendir-linux-amd64 /usr/local/bin/vendir

# Make the binary executable
chmod +x /usr/local/bin/vendir

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install vendir
$ vendir version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.43.1/checksums.txt
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.43.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/vendir/releases/download/v0.43.1/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's new

Full Changelog: v0.43.0...v0.43.1

📂 Files Checksum

34c1638e57d577f437fd55c206857422f8c52427f55352722161eb1d29fbcb6e  ./vendir-darwin-amd64
540d146faad93e1ba8962bb2367b6ad64ab504750ec7efd8a1a558fca4c7f392  ./vendir-linux-amd64
89584179518d8810dd305607798d9c20fd3d97a9153735991f942a15d9f31d33  ./vendir-linux-arm64
cd7b01f90e2c9f195c628509ae59b0367da5e9c1cdeee1d3cfcbd73e933c224c  ./vendir-windows-amd64.exe
f4149b425cfb86b2e1e9130ffc15415d1d89dd19b01301e1143cab55f2c162ff  ./vendir-darwin-arm64

Contributors

devanshuVmware
Assets 10
Loading