Intel NPU Stack 0.1.1

Intel NPU Stack 0.1.1

Signed Fedora 44 x86_64 packages for the Intel NPU on PCI 8086:643e, served from https://archledger.github.io/intel-npu-stack/0.1.1/. That directory has no index page; SHA256SUMS lists every other file in it, and SHA256SUMS.asc is its signature.

Install

Run as a normal user; the installer asks for privileges only when it applies the plan:

(
    set -eu
    umask 077
    bootstrap_directory=$(mktemp -d) || exit 20
    trap 'rm -rf -- "$bootstrap_directory"' EXIT
    trap 'exit 129' HUP
    trap 'exit 130' INT
    trap 'exit 143' TERM
    bootstrap_file=$bootstrap_directory/install.sh
    if ! curl --disable --fail --location --proto '=https' --proto-redir '=https' \
        --connect-timeout 15 --max-time 180 --max-filesize 1048576 \
        --output "$bootstrap_file" -- https://archledger.github.io/intel-npu-stack/0.1.1/install.sh; then exit 20; fi
    [ -f "$bootstrap_file" ] && [ ! -L "$bootstrap_file" ] || exit 20
    if ! printf '%s  %s\n' '8b941589c92420f7719f0be2be9cb870ba6e7234a07f15949c57010e6b22f0fa' "$bootstrap_file" | sha256sum --check --status; then exit 20; fi
    /bin/sh "$bootstrap_file" "$@"
)

The command downloads install.sh, checks its SHA-256 and runs it. install.sh checks the installer binary the same way, and the installer verifies release.json against the release key it carries.

The short form trusts the HTTPS download of install.sh instead of checking its SHA-256; everything after it is checked the same way. curl reports a failed download, but the pipeline exits with the status of sh, so scripts should use the command above:

curl --disable --proto '=https' --proto-redir '=https' -fsSL https://archledger.github.io/intel-npu-stack/0.1.1/install.sh | sh

Verify before running

1. Download install.sh and install.sh.asc.
2. Run gpg --status-fd 1 --verify install.sh.asc install.sh with the release public key and check that VALIDSIG names the primary key 1085FBE578732D1CF0C50417A8FE2F718B8763D8.
3. Read install.sh.
4. Run sh install.sh --dry-run, then sh install.sh.

Support

• Platform: Fedora 44 x86_64 (fedora), profile fedora-44-lunar-lake-x86_64 (qualified).
• Hardware: PCI 8086:643e.
• Kernel: 7.2.5 up to, not including, 7.3.0 (intel_vpu). Tested: 7.2.5-200.fc44 (upgrade, firmware activation and warm reboot, doctor, removal, rollback, restoration, repeat installation); 7.2.7-200.fc44 (doctor, suspend/resume, cold boot). Other kernels inside the window are admitted by policy, observed by the kernel watcher and need a recorded per-kernel probe.
• Not supported: kernel 7.3 series and later: requires requalification; unbounded dynamic-batch models compiled without a batch layout on the NPU (issue #20).
• The full matrix is support-matrix.json.

Digests

File	SHA-256
release.json	9aa889d617acd30aaf9cd8848f0cffc5f39b55b966cd89deded3e5862ee12e4a
intel-npu-stack-0.1.1.tar	4505e8046bfb5cac69cba3a41527d2d351af955d9df4505312a052502cb85057
SHA256SUMS	0e1f9479fed5c7636e8e4642d58971f7872539d159112e4155bfc18e75732291
Qualification evidence	dcf68c330d2d52aa270cc4f84df671c916d0a4d7c4beba076eb84cf7d52a3afa

Rollback

The Fedora packages this release replaces are kept in evidence/rollback (index evidence/rollback/rollback-index.json). See docs/install-fedora.md, section "Removal and rollback" for removal and rollback.

Verify the release

gh release verify v0.1.1 -R archledger/intel-npu-stack
gh release verify-asset v0.1.1 intel-npu-stack-0.1.1.tar -R archledger/intel-npu-stack
gh attestation verify intel-npu-stack-0.1.1.tar -R archledger/intel-npu-stack
gpg --status-fd 1 --verify SHA256SUMS.asc SHA256SUMS
sha256sum --check --strict SHA256SUMS