v3.1

Reproducible build

This release was built twice on independent GitHub-hosted ubuntu-24.04 runners from tag v3.1, checked out at two different source paths. The two builds were verified byte-identical before publishing.

Tag	v3.1
Commit	e6398f6aa5f3e8f8dc8ddc7a0c22035b08b1e94b
Target	x86_64-unknown-linux-gnu
Toolchain	Rust 1.94.1 (pinned by rust-toolchain.toml)
SOURCE_DATE_EPOCH	1791366770

Checksums

File	SHA-256
xet-server-v3.1-x86_64-unknown-linux-gnu.tar.gz	ade9e01abe86562f20cc7c741493d24dd961880d49dc7bc54a9470cd9ceebbd6
xet-server (inside the tarball)	8d3e57929517ddc754c8330d1bf97cc650fb8c1cba80c084f0cdef94bf16874e
hub-api (inside the tarball)	52b86e612bdd598897b27cd24f8c0b44a63e8bfdfc9526687fe2223ee62cf473

Verify a downloaded release:

sha256sum -c SHA256SUMS.txt

Reproduce this build

On an ubuntu-24.04-equivalent x86_64 Linux host (glibc 2.39, gcc 13, GNU tar 1.35, gzip 1.12) with rustup installed — rust-toolchain.toml selects the exact toolchain:

git clone https://github.com/kebyn/xet-server.git
cd xet-server
git checkout v3.1
export SOURCE_DATE_EPOCH="$(git log -1 --pretty=%ct)"
export RUSTFLAGS="--remap-path-prefix=$PWD=/build --remap-path-prefix=${CARGO_HOME:-$HOME/.cargo}=/cargo"
export CFLAGS_x86_64_unknown_linux_gnu="-ffile-prefix-map=$PWD=/build -ffile-prefix-map=${CARGO_HOME:-$HOME/.cargo}=/cargo"
cargo build --release --locked --workspace --bins --target x86_64-unknown-linux-gnu
TARBALL="xet-server-v3.1-x86_64-unknown-linux-gnu.tar.gz"
tar --sort=name --format=gnu --mtime="@${SOURCE_DATE_EPOCH}" \
    --owner=0 --group=0 --numeric-owner \
    -C target/x86_64-unknown-linux-gnu/release -c xet-server hub-api \
  | gzip -n > "${TARBALL}"
sha256sum "${TARBALL}"

The result must match the tarball checksum above. If your local tar/gzip differs from the versions listed above, compare the extracted binaries instead:

tar -xzf "${TARBALL}"
sha256sum xet-server hub-api

Full Changelog: v3.0...v3.1