Skip to content

DSHD for Linux v0.2.2-rc.1.3

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Nov 13:37
· 23 commits to main since this release
v0.2.2-rc.1.3
019795d

DSHD for Linux 0.2.2-rc.1.3

Packaging rebuild of the 0.2.2-rc.1 desktop release. The upstream desktop
runtime is unchanged; this build adds the release automation and trust chain
that were not present in the first public RC.

What changed

  • AppImage auto-update: the AppImage now contains a generic update feed and
    checks the fixed appimage-x64-latest / appimage-arm64-latest GitHub
    Release feeds. deb/rpm/Flatpak remain package-manager or manual updates.
  • SBOM: each Release includes SBOM.spdx.json, signed in SHA256SUMS.
  • Build provenance: GitHub OIDC attestations are generated for the release
    files; verify with gh attestation verify.
  • Production signing key: new releases are signed with the
    passphrase-protected key fingerprint
    2D4C2CFD4F1C3B5F8AF0DA481C9A912742C70369. The historical key remains valid
    for v0.2.2-rc.1 only.
  • Technical fixes: Gentoo ebuild URL/dependency/source-directory/Manifest
    corrections, and the AppImage feed workflow.

Downloads

Use the Release assets:

Architecture AppImage deb rpm Flatpak
x86_64 AppImage deb rpm Flatpak
aarch64 AppImage deb rpm Flatpak

The Release also contains per-file .asc signatures, SHA256SUMS,
SHA256SUMS.asc, SBOM.spdx.json, and both the current and historical public
keys.

Verification

gpg --import dshd-linux-release-signing.asc
gpg --fingerprint 2D4C2CFD4F1C3B5F8AF0DA481C9A912742C70369
gpg --verify SHA256SUMS.asc SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missing
gh attestation verify deepseek-harness-*.AppImage \
  --repo openviewmobile/dshd-linux

For v0.2.2-rc.1 only, import deepseek-harness-release-signing.asc instead.

Known limitations

  • AppImage auto-update implementation has not yet completed a version-to-version
    update acceptance in this repository.
  • deb/rpm/Flatpak are not self-updating.
  • Snap and OBS remain packaging artifacts, not Store/OBS service builds.
  • Nix and Gentoo ebuilds are not installed on their native systems in the
    reference environment.
  • Wayland, tray and IME behavior are not verified on physical desktops.
  • No platform code-signing certificate; GPG signatures are detached.

License

Apache-2.0 for this repository; upstream DeepSeek Harness is MIT-licensed.

Assets 24
Loading