Repository navigation
Releases: ajithakdev/claude-desktop-rpm
Releases · ajithakdev/claude-desktop-rpm
Release list
v1.1.2
v1.1.1
Security release (#7). To upgrade from 1.1.0, download the new script and run ./claude-desktop-rpm.sh install once. The daily timer updates the app, not this script.
Added
tests/mock-repo.sh: attack tests that run full installs against a fake repository with tampered signatures, checksums, expiry dates and versions. CI runs them on every PR.- Releases are published by a workflow when a
vX.Y.Ztag is pushed. Each release attaches aSHA256SUMSfile for the script.
Fixed
- Security: the repository index now has to be signed by Anthropic's pinned key itself. Before, the script checked that
key.asccontained that key but accepted a signature from any key in the file, so a tamperedkey.ascwith a second key could sign a fake index. Reported by Marko Jokinen on Fedora Discussion. - A signature from an expired or revoked Anthropic key is refused, and so is an index without a
Valid-Untildate. updaterefuses to install an older version than the one installed, so a replayed index can't roll the app back.update --forcestill can.- Downloads time out on dead connections instead of hanging the update timer, and never follow a redirect off HTTPS.
v1.1.0
Upgrading from 1.0.0: quit Claude, then run ./claude-desktop-rpm.sh update --force once. That installs the new launcher (dark mode fix), the daily update timer and the search provider. After that, updates take care of themselves.
Added
- Automatic updates. A daily systemd user timer checks Anthropic's repository. If Claude is closed, the update installs right away; if it is open, the update is downloaded and verified, then installed the next time you open Claude. Turn it off with
auto-update off. doctorchecks the install, tray icon, keyring, Quick Entry hotkey and every Cowork requirement, and prints the fix for each problem.- Anthropic's GNOME search provider is installed, so Claude sessions show up in the Activities search.
installtells you how to turn on GNOME's AppIndicator extension when it is off, since Claude's tray menu holds Quit.- The script copies itself to
~/.local/bin/claude-desktop-rpm. tests/e2e.shinstalls from Anthropic into a temporary folder and checks every command, including an update that arrives while Claude is open. CI runs it on each push and every Monday.docs/TESTING.md: the release checklist.
Fixed
- The System theme now follows GNOME's dark style. Electron ignores that setting and reads only the GTK theme name, so the launcher sets
GTK_THEME=Adwaita:darkwhen GNOME is dark.
Security
- Installs and updates now refuse an
InReleaseindex that is past itsValid-Untildate, so an old signed index can't be replayed to keep you on an old version. - The script refuses to run as root.
v1.0.0
Added
installandupdate: download Claude Desktop from Anthropic's signed repository, check the signing key, signature and both checksums, and unpack it into~/.local. No root needed.update --forceto reinstall the current version.coworksets up the Cowork tab: QEMU, OVMF firmware linked at the path the app expects,vhost_vsockat boot, andkvmgroup membership.uninstallremoves the app and keeps your sign-in and chats.versionprints the installed version.
Changed
- Renamed from claude-desktop-fedora. The script is now
claude-desktop-rpm.sh.