DSHD for Linux v0.2.2-rc.1.3

DSHD for Linux 0.2.2-rc.1.3

Packaging rebuild of the 0.2.2-rc.1 desktop release. The upstream desktop
runtime is unchanged; this build adds the release automation and trust chain
that were not present in the first public RC.

What changed

• AppImage auto-update: the AppImage now contains a generic update feed and
  checks the fixed appimage-x64-latest / appimage-arm64-latest GitHub
  Release feeds. deb/rpm/Flatpak remain package-manager or manual updates.
• SBOM: each Release includes SBOM.spdx.json, signed in SHA256SUMS.
• Build provenance: GitHub OIDC attestations are generated for the release
  files; verify with gh attestation verify.
• Production signing key: new releases are signed with the
  passphrase-protected key fingerprint
  2D4C2CFD4F1C3B5F8AF0DA481C9A912742C70369. The historical key remains valid
  for v0.2.2-rc.1 only.
• Technical fixes: Gentoo ebuild URL/dependency/source-directory/Manifest
  corrections, and the AppImage feed workflow.

Downloads

Use the Release assets:

Architecture	AppImage	deb	rpm	Flatpak
x86_64	AppImage	deb	rpm	Flatpak
aarch64	AppImage	deb	rpm	Flatpak

The Release also contains per-file .asc signatures, SHA256SUMS,
SHA256SUMS.asc, SBOM.spdx.json, and both the current and historical public
keys.

Verification

gpg --import dshd-linux-release-signing.asc
gpg --fingerprint 2D4C2CFD4F1C3B5F8AF0DA481C9A912742C70369
gpg --verify SHA256SUMS.asc SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missing
gh attestation verify deepseek-harness-*.AppImage \
  --repo openviewmobile/dshd-linux

For v0.2.2-rc.1 only, import deepseek-harness-release-signing.asc instead.

Known limitations

• AppImage auto-update implementation has not yet completed a version-to-version
  update acceptance in this repository.
• deb/rpm/Flatpak are not self-updating.
• Snap and OBS remain packaging artifacts, not Store/OBS service builds.
• Nix and Gentoo ebuilds are not installed on their native systems in the
  reference environment.
• Wayland, tray and IME behavior are not verified on physical desktops.
• No platform code-signing certificate; GPG signatures are detached.

License

Apache-2.0 for this repository; upstream DeepSeek Harness is MIT-licensed.

DSHD for Linux v0.2.2-rc.1.2

DSHD for Linux 0.2.2-rc.1.2

Packaging rebuild of the 0.2.2-rc.1 desktop release. The upstream desktop
runtime is unchanged; this build adds the release automation and trust chain
that were not present in the first public RC.

What changed

• AppImage auto-update: the AppImage now contains a generic update feed and
  checks the fixed appimage-x64-latest / appimage-arm64-latest GitHub
  Release feeds. deb/rpm/Flatpak remain package-manager or manual updates.
• SBOM: each Release includes SBOM.spdx.json, signed in SHA256SUMS.
• Build provenance: GitHub OIDC attestations are generated for the release
  files; verify with gh attestation verify.
• Production signing key: new releases are signed with the
  passphrase-protected key fingerprint
  2D4C2CFD4F1C3B5F8AF0DA481C9A912742C70369. The historical key remains valid
  for v0.2.2-rc.1 only.
• Technical fixes: Gentoo ebuild URL/dependency/source-directory/Manifest
  corrections, and the AppImage feed workflow.

Downloads

Use the Release assets:

Architecture	AppImage	deb	rpm	Flatpak
x86_64	AppImage	deb	rpm	Flatpak
aarch64	AppImage	deb	rpm	Flatpak

The Release also contains per-file .asc signatures, SHA256SUMS,
SHA256SUMS.asc, SBOM.spdx.json, and both the current and historical public
keys.

Verification

gpg --import dshd-linux-release-signing.asc
gpg --fingerprint 2D4C2CFD4F1C3B5F8AF0DA481C9A912742C70369
gpg --verify SHA256SUMS.asc SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missing
gh attestation verify deepseek-harness-*.AppImage \
  --repo openviewmobile/dshd-linux

For v0.2.2-rc.1 only, import deepseek-harness-release-signing.asc instead.

Known limitations

• AppImage auto-update implementation has not yet completed a version-to-version
  update acceptance in this repository.
• deb/rpm/Flatpak are not self-updating.
• Snap and OBS remain packaging artifacts, not Store/OBS service builds.
• Nix and Gentoo ebuilds are not installed on their native systems in the
  reference environment.
• Wayland, tray and IME behavior are not verified on physical desktops.
• No platform code-signing certificate; GPG signatures are detached.

License

Apache-2.0 for this repository; upstream DeepSeek Harness is MIT-licensed.

DSHD AppImage update feed (x64)

Rolling electron-updater feed; assets are replaced for each release.

DSHD AppImage update feed (arm64)

Rolling electron-updater feed; assets are replaced for each release.

DSHD for Linux v0.2.2-rc.1

DSHD for Linux 0.2.2-rc.1

First public release candidate of the Linux desktop distribution. It packages
the upstream DeepSeek Harness desktop runtime for Linux x86_64 and aarch64,
with AppImage, deb, rpm, Flatpak and distro-specific packaging.

This is a release candidate. Keep backups and expect rough edges on Wayland,
Snap, and distribution-specific desktop integration.

Downloads

Channel	Architecture	File	Size	SHA-256
AppImage	x86_64	deepseek-harness-0.2.2-rc.1-linux-x86_64-unsigned.AppImage	372 MB	cd9f8fc9…
deb	x86_64	deepseek-harness-0.2.2-rc.1-linux-amd64-unsigned.deb	291 MB	92fc7ff1…
rpm	x86_64	deepseek-harness-0.2.2-rc.1-linux-x86_64-unsigned.rpm	240 MB	6568a2e6…
Flatpak	x86_64	deepseek-harness-0.2.2-rc.1-linux-x86_64-unsigned.flatpak	252 MB	e3aadf99…
AppImage	aarch64	deepseek-harness-0.2.2-rc.1-linux-arm64-unsigned.AppImage	366 MB	c93e1a4e…
deb	aarch64	deepseek-harness-0.2.2-rc.1-linux-arm64-unsigned.deb	275 MB	b9ef57a7…
rpm	aarch64	deepseek-harness-0.2.2-rc.1-linux-aarch64-unsigned.rpm	226 MB	cac2bd37…
Flatpak	aarch64	deepseek-harness-0.2.2-rc.1-linux-aarch64-unsigned.flatpak	238 MB	9885ddbf…
Arch/AUR	x86_64	deepseek-harness-bin-0.2.2_rc.1-1-x86_64.pkg.tar.zst	354 MB	2a15229d…
Snap	x86_64	deepseek-harness_0.2.2-rc.1_amd64.snap	311 MB	5a51c778…
OBS RPM	x86_64	deepseek-harness-0.2.2~rc1-0.x86_64.rpm	273 MB	8ad2d6e8…

The complete checksums are in each directory's SHA256SUMS. Every file has a
detached .asc signature. Release key fingerprint:
0E6023DF4DB8C68AA2202EF876CE5675AFF067FF
(public key, also attached to the
release as deepseek-harness-release-signing.asc).

Install

# AppImage (checksum + signature first)
gpg --import keys/deepseek-harness-release-signing.asc
gpg --verify SHA256SUMS.asc SHA256SUMS
sha256sum -c SHA256SUMS
chmod +x deepseek-harness-0.2.2-rc.1-linux-x86_64-unsigned.AppImage
./deepseek-harness-0.2.2-rc.1-linux-x86_64-unsigned.AppImage

# deb / rpm
sudo apt install ./deepseek-harness-0.2.2-rc.1-linux-amd64-unsigned.deb
sudo dnf install ./deepseek-harness-0.2.2-rc.1-linux-x86_64-unsigned.rpm

# Flatpak (bundle; runtime 25.08 must be installed)
flatpak install --user --bundle deepseek-harness-0.2.2-rc.1-linux-x86_64-unsigned.flatpak
flatpak run com.deepseek.harness

# Arch
sudo pacman -U deepseek-harness-bin-0.2.2_rc.1-1-x86_64.pkg.tar.zst

Flatpak requires the freedesktop 25.08 runtime and the Electron2 BaseApp:

flatpak install flathub org.freedesktop.Platform//25.08 \
  org.freedesktop.Sdk//25.08 org.electronjs.Electron2.BaseApp//25.08

Highlights

• Flatpak on org.freedesktop.Platform//25.08 for x64 and arm64, with a
  launcher that fixes the empty PATH/electron-wrapper failure.
• Real-provider end-to-end chat test (no mocks).
• PDF/Office export via the bundled LibreOfficeKit WASM backend, including
  DOCX/PPTX/XLSX and legacy DOC/XLS/PPT, with rendered-page evidence.
• Arch/AUR package built, installed with pacman -Udd, and launched under Xvfb.
• Snap and OBS packages built locally (see limitations).
• Detached GPG signatures and a published release key.

Known limitations

• Filenames keep the historical unsigned suffix; these are GPG detached
  signatures, not platform code-signing certificates.
• Snap was assembled with squashfs, not snapcraft, and was not installed
  with snap install; strict confinement is unverified.
• OBS was built with a local rpmbuild, not on the OBS service.
• Nix and Gentoo packaging files are provided but were not built in the
  reference environment.
• Wayland-native sessions, tray icons and IME behavior are not verified on
  physical desktops.
• The release key has no passphrase in this reference environment; replace it
  with an offline protected key before a production release. See
  release-signing.md.

Verification

• acceptance.md: screen-by-screen and channel checks.
• testing.md: reproducible test commands.
• release-signing.md: key fingerprint and signature
  verification.
• evidence/: raw logs, screenshots and manifests.

License

Apache-2.0. See LICENSE and NOTICE.