Skip to content

Updates and Releases

Björn Schlaack edited this page Jul 26, 2026 · 1 revision

Updates and Releases

Release versions come from semantic vMAJOR.MINOR.PATCH tags contained in main.

Desktop packages

  • Windows x64 installer and portable ZIP
  • Linux x64/ARM64 DEB, RPM, and portable tar archives
  • Arch Linux x86-64 package
  • macOS Intel/Apple-Silicon PKG, portable ZIP, and tar archives

Signed manifest

Published releases receive an ECDSA P-256 signed manifest containing SHA-256 digests and platform metadata for every required asset. Orynivo verifies:

  1. the manifest signature;
  2. the selected asset metadata;
  3. the downloaded package digest.

There is no unsigned fallback.

Installing updates

Windows opens the verified installer normally. macOS opens the architecture-matching verified PKG through /usr/bin/open; Orynivo never runs a privileged installer command.

Linux server updates use a fixed-command systemd helper that independently verifies the manifest and package before invoking the package manager.

Clone this wiki locally