Loams 0.1.0

Loams 0.1.0. Run it yourself with Docker Compose: see deploy/release/README.md in the attached bundle.

Images (linux/amd64, linux/arm64; provenance and SBOM attested, verify with gh attestation verify oci://<image> -R ostrium-labs/loams):

• ghcr.io/ostrium-labs/loams:0.1.0 (also :0.1 and :latest)
• ghcr.io/ostrium-labs/loams-fabric:0.1.0 (also :0.1 and :latest)
• ghcr.io/ostrium-labs/loams-agentd:0.1.0 (also :0.1 and :latest)
• ghcr.io/ostrium-labs/loams-pg-control:0.1.0 (also :0.1 and :latest)

Upgrading

From 0.1.0-preview.2 (one step at a time): loams upgrade --to 0.1.0.

It takes a snapshot first, and loams upgrade rollback restores it.

Migration	Store	Class	What it does
0000-adopt-preview-2	meta	Reversible	Record preview.2's versions (preview.2 writes no stack record)
0001-safekeeper-volume	host	Reversible	Give the safekeeper a volume (after a drain)

Third-party bumps: none.
Free space needed: 1.5× the snapshot estimate (loams upgrade check shows it).
Expected downtime: about 5 minutes, excluding image pulls.

Loams Desktop

Loams Desktop 0.1.0.

Platform	Files	Signing
Linux x64, arm64	AppImage, deb, rpm, pacman	rpm: unsigned; AppImage, deb, pacman: detached GPG .sig files
Windows x64	NSIS installer	unsigned (expect a SmartScreen warning)
macOS arm64, x64	dmg, zip	ad-hoc signed only, not notarized

Verify the desktop downloads with DESKTOP-SHA256SUMS and DESKTOP-SHA256SUMS.asc (detached GPG signature).

macOS: first launch

Unless the table above says notarized, macOS quarantines the download (the app carries an ad-hoc signature, which Apple Silicon requires, but no Developer ID). After copying it to /Applications, run:

xattr -dr com.apple.quarantine "/Applications/Loams Desktop.app"

or right-click the app, choose Open, and confirm. macOS does not self-update: the app offers "Download v..." when a newer release exists.

Windows: first launch

The installer is unsigned, so SmartScreen shows Windows protected your PC: choose More info, then Run anyway. That is an unknown-publisher warning, not a malware detection.

Linux packages, the Windows zip and the macOS tarballs

Linux

File	Format	Signature	By
loams-0.1.0-1-x86_64.pkg.tar.zst	archlinux	signed	gpg-detached
loams-0.1.0-1-x86_64.pkg.tar.zst.sig	archlinux-signature	signed	gpg-detached
loams-0.1.0-1.x86_64.rpm	rpm	UNSIGNED	signpath-rpm-sign
loams_0.1.0_amd64.deb	deb	signed	nfpm-debsign

• The .deb and the .pkg.tar.zst are signed with the project GPG key at build time.
• The .rpm is not signed by this workflow: nFPM cannot sign an RPM, so it is submitted to
  SignPath's <rpm-sign> by .github/workflows/release-sign.yml.
  Until that workflow has run against this tag, the .rpm is unsigned.

Windows

File	Signature
loams-0.1.0-windows-x86_64.zip	UNSIGNED

The Windows binary has no Authenticode signature. Windows SmartScreen will show
Windows protected your PC on a downloaded copy. That is an unknown-publisher warning,
not a malware detection, and it clears once the user unblocks the file. Building from
source produces no such prompt: docs/build-from-source/windows.md.

macOS

File	Signature
loams-0.1.0-macos-arm64.tar.gz	ad-hoc only (no Developer ID, not notarized)
loams-0.1.0-macos-x86_64.tar.gz	ad-hoc only (no Developer ID, not notarized)

The binary carries an ad-hoc signature, which Apple Silicon needs to run it at all, but no
Developer ID, so Gatekeeper quarantines a downloaded copy. Clear the flag once after unpacking:

tar -xzf loams-0.1.0-macos-arm64.tar.gz
xattr -dr com.apple.quarantine loams-0.1.0-macos-arm64
./loams-0.1.0-macos-arm64/loams --version
./loams-0.1.0-macos-arm64/git-remote-loams --version

The server stack itself (Postgres, the images in this release) runs as Linux containers;
on macOS and Windows use Docker Desktop with the attached compose bundle.

Git push and fetch to the bucket

Every package installs git-remote-loams next to loams (/usr/bin on Linux; the
top level of the zip and the tarballs). With that directory on PATH, git handles
loams::<store-url>/ns/<ns>/repos/<repo> URLs itself: git clone, fetch and push
go straight to the repository in the bucket, with no Loams server in between.

Not in this release

• No Android APK. There is no Android or Gradle project in this repository.
• No AUR package in-tree. A PKGBUILD is at release/aur/PKGBUILD;
  the AUR submission path is documented in release/aur/README.md.

Loams 0.1.0-preview.2 (preview)

Loams 0.1.0-preview.2 (preview). Run it yourself with Docker Compose: see deploy/release/README.md in the attached bundle.

Images (linux/amd64, linux/arm64; provenance and SBOM attested, verify with gh attestation verify oci://<image> -R ostrium-labs/loams):

• ghcr.io/ostrium-labs/loams:0.1.0-preview.2 (also :preview)
• ghcr.io/ostrium-labs/loams-fabric:0.1.0-preview.2 (also :preview)
• ghcr.io/ostrium-labs/loams-agentd:0.1.0-preview.2 (also :preview)
• ghcr.io/ostrium-labs/loams-pg-control:0.1.0-preview.2 (also :preview)

Linux packages, the Windows zip and the macOS tarballs

Linux

File	Format	Signature	By
loams-0.1.0-preview.2-1-x86_64.pkg.tar.zst	archlinux	UNSIGNED	gpg-detached
loams-0.1.0-preview.2-1.x86_64.rpm	rpm	UNSIGNED	signpath-rpm-sign
loams_0.1.0-preview.2_amd64.deb	deb	UNSIGNED	nfpm-debsign

• The .deb and the .pkg.tar.zst are signed with the project GPG key at build time.
• The .rpm is not signed by this workflow: nFPM cannot sign an RPM, so it is submitted to
  SignPath's <rpm-sign> by .github/workflows/release-sign.yml.
  Until that workflow has run against this tag, the .rpm is unsigned.

Windows

File	Signature
loams-0.1.0-preview.2-windows-x86_64.zip	UNSIGNED

The Windows binary has no Authenticode signature. Windows SmartScreen will show
Windows protected your PC on a downloaded copy. That is an unknown-publisher warning,
not a malware detection, and it clears once the user unblocks the file. Building from
source produces no such prompt: docs/build-from-source/windows.md.

macOS

File	Signature
loams-0.1.0-preview.2-macos-arm64.tar.gz	ad-hoc only (no Developer ID, not notarized)
loams-0.1.0-preview.2-macos-x86_64.tar.gz	ad-hoc only (no Developer ID, not notarized)

The binary carries an ad-hoc signature, which Apple Silicon needs to run it at all, but no
Developer ID, so Gatekeeper quarantines a downloaded copy. Clear the flag once after unpacking:

tar -xzf loams-0.1.0-preview.2-macos-arm64.tar.gz
xattr -dr com.apple.quarantine loams-0.1.0-preview.2-macos-arm64
./loams-0.1.0-preview.2-macos-arm64/loams --version

The server stack itself (Postgres, the images in this release) runs as Linux containers;
on macOS and Windows use Docker Desktop with the attached compose bundle.

Not in this release

• No Android APK. There is no Android or Gradle project in this repository.
• No AUR package in-tree. A PKGBUILD is at release/aur/PKGBUILD;
  the AUR submission path is documented in release/aur/README.md.

Loams Desktop

The Electron app with the unified console, for every platform:

Platform	Files
Linux x64	.AppImage, .deb (amd64), .rpm (x86_64), .pacman
Linux arm64	.AppImage, .deb, .rpm (aarch64), .pacman
macOS Apple silicon	mac-arm64.dmg, mac-arm64.zip
macOS Intel	mac-x64.dmg, mac-x64.zip
Windows x64	win-x64-unsigned.exe (installer)

These preview builds are not code-signed yet:

• macOS: the app is ad-hoc signed. After moving it to Applications, run xattr -dr com.apple.quarantine "/Applications/Loams Desktop.app" once.
• Windows: SmartScreen warns on first run. Choose More info → Run anyway.

Verify a download with:

sha256sum -c DESKTOP-SHA256SUMS --ignore-missing

Loams 0.1.0-preview.1 (preview)

Loams 0.1.0-preview.1 (preview). Run it yourself with Docker Compose: see deploy/release/README.md in the attached bundle.

Images (linux/amd64, linux/arm64; provenance and SBOM attested, verify with gh attestation verify oci://<image> -R ostrium-labs/loams):

• ghcr.io/ostrium-labs/loams:0.1.0-preview.1 (also :preview)
• ghcr.io/ostrium-labs/loams-fabric:0.1.0-preview.1 (also :preview)
• ghcr.io/ostrium-labs/loams-agentd:0.1.0-preview.1 (also :preview)

Loams Desktop (Linux, preview)

Unsigned preview builds of the desktop app, built from this release's source. Linux is the only supported desktop platform in this preview.

Architecture	Packages
x86_64	loams-desktop-0.1.0-linux-amd64.deb, -x86_64.rpm, -x64.pacman, -x86_64.AppImage
arm64	loams-desktop-0.1.0-linux-arm64.deb, -aarch64.rpm, -aarch64.pacman, -arm64.AppImage

Check a download against DESKTOP-SHA256SUMS before installing:

sha256sum -c DESKTOP-SHA256SUMS --ignore-missing

These builds are not code-signed. Windows and macOS builds are coming in a later preview.