Skip to content

1.0.0-beta6

Choose a tag to compare

@sgammon sgammon released this 27 Nov 09:00
· 8 commits to main since this release
1.0.0-beta6
0bcc043

Summary

Native Windows support, and several improvements and bugfixes for other platforms. Binaries now ship native libraries for their target platform only, resulting in smaller binaries.

Tip

All users are encouraged to upgrade to 1.0.0-beta6 or newer, as it includes several critical fixes for known issues present in beta3 and beta4.

Verification

Use the following parameters to verify this release using Sigstore.

Parameter Value Description
certificate-oidc-issuer https://github.com/login/oauth Verifies the releaser's account
certificate-identity sam@elide.ventures Issuer for this release (a GitHub account)

Installation

One-liner (install and verify):

  • macOS:
echo "Installing Buildless..." \
  && wget -q https://github.com/buildless/cli/releases/download/1.0.0-beta6/buildless.darwin-arm64.tgz \
  && wget -q https://github.com/buildless/cli/releases/download/1.0.0-beta6/buildless.darwin-arm64.tgz.sha256 \
  && wget -q https://github.com/buildless/cli/releases/download/1.0.0-beta6/buildless.darwin-arm64.sigstore.json \
  && tar -xzf buildless.darwin-arm64.tgz \
  && cat buildless.darwin-arm64.tgz.sha256 | gsha256sum --check --status \
  &&  cosign verify-blob \
    --certificate-oidc-issuer https://github.com/login/oauth \
    --certificate-identity sam@elide.ventures \
    --bundle ./buildless.darwin-arm64.sigstore.json \
    buildless \
  && mkdir -p ~/bin \
  && cp -fv buildless ~/bin \
  && chmod +x ~/bin/buildless \
  && export PATH="$PATH:~/bin" \
  && rm -f buildless "buildless.darwin-arm64.*" \
  && buildless --help \
  || $(echo "Failed to verify Buildless binary; deleting." && rm -fv buildless)

# Prints: "Verified OK", with `buildless` binary extracted and installed to `~/bin`
  • Linux:
echo "Installing Buildless..." \
  && wget -q https://github.com/buildless/cli/releases/download/1.0.0-beta6/buildless.linux-amd64.tgz \
  && wget -q https://github.com/buildless/cli/releases/download/1.0.0-beta6/buildless.linux-amd64.tgz.sha256 \
  && wget -q https://github.com/buildless/cli/releases/download/1.0.0-beta6/buildless.linux-amd64.sigstore.json \
  && tar -xzf buildless.linux-amd64.tgz \
  && cat buildless.linux-amd64.tgz.sha256 | sha256sum --check --status \
  &&  cosign verify-blob \
    --certificate-oidc-issuer https://github.com/login/oauth \
    --certificate-identity sam@elide.ventures \
    --bundle ./buildless.linux-amd64.sigstore.json \
    buildless \
  && mkdir -p ~/bin \
  && cp -fv buildless ~/bin \
  && chmod +x ~/bin/buildless \
  && export PATH="$PATH:~/bin" \
  && rm -f buildless "buildless.linux-amd64.*" \
  && buildless --help \
  || $(echo "Failed to verify Buildless binary; deleting." && rm -fv buildless)

# Prints: "Verified OK", with `buildless` binary extracted and installed to `~/bin`
  • Windows:
    Please use one of the MSI or exe-based installers.

Verifying a release

To verify this release, download the binary for your platform and architecture, and the accompanying sha256 and sigstore.json files. For example, on macOS ARM64 (M1-M3), you would download all of:

  • buildless.darwin-arm64.tgz
  • buildless.darwin-arm64.tgz.sha256
  • buildless.darwin-arm64.sigstore.json

Extract the binary:

tar -xzvf buildless.darwin-arm64.tgz

To verify the SHA256 hash:

cat buildless.darwin-arm64.tgz.sha256 | gsha256sum --check --status

This command returns 0 (success) if the checksum matches.

To verify the Sigstore signature:

cosign verify-blob \
  --certificate-oidc-issuer https://accounts.google.com \
  --certificate-identity sam@elide.ventures \
  --bundle ./buildless.darwin-arm64.sigstore.json \
  buildless

# Prints: "Verified OK"

See the table at the top of this release for explanations of each parameter.

All verification steps:

tar -xzvf buildless.darwin-arm64.tgz \
  && cat buildless.darwin-arm64.tgz.sha256 | gsha256sum --check --status \
  &&  cosign verify-blob \
  --certificate-oidc-issuer https://accounts.google.com \
  --certificate-identity sam@elide.ventures \
  --bundle ./buildless.darwin-arm64.sigstore.json \
  buildless || $(echo "Failed to verify Buildless binary; deleting." && rm -fv buildless)

# Prints: "Verified OK", with `buildless` binary extracted

Platform support

Currently available for:

  • macOS M1, M2, M3 (darwin-arm64)
  • Linux X86-64 (linux-amd64)
  • Windows X64 (windows-amd64)