-
Notifications
You must be signed in to change notification settings - Fork 0
Updates and Releases
Björn Schlaack edited this page Jul 26, 2026
·
1 revision
Release versions come from semantic vMAJOR.MINOR.PATCH tags contained in
main.
- Windows x64 installer and portable ZIP
- Linux x64/ARM64 DEB, RPM, and portable tar archives
- Arch Linux x86-64 package
- macOS Intel/Apple-Silicon PKG, portable ZIP, and tar archives
Published releases receive an ECDSA P-256 signed manifest containing SHA-256 digests and platform metadata for every required asset. Orynivo verifies:
- the manifest signature;
- the selected asset metadata;
- the downloaded package digest.
There is no unsigned fallback.
Windows opens the verified installer normally. macOS opens the
architecture-matching verified PKG through /usr/bin/open; Orynivo never runs a
privileged installer command.
Linux server updates use a fixed-command systemd helper that independently verifies the manifest and package before invoking the package manager.