Skip to content

v1.5.6: Distribution

Choose a tag to compare

View all tags
@reloading01 reloading01 released this 25 Aug 15:06
· 10 commits to main since this release
v1.5.6
1593dea

Release date: August 25, 2026

This release changes distribution only. The server binary is identical to v1.5.5.

Prebuilt binaries and install script

Prebuilt binaries are now available for Linux and macOS:

  • Linux: x86_64 and aarch64, statically linked with musl
  • macOS: Intel and Apple Silicon

Install with:

curl -fsSL https://raw.githubusercontent.com/reloading01/certstream-server-rust/main/install.sh | sh

The script selects the correct build, verifies the published SHA-256 checksum, and aborts if a checksum is missing. Use PREFIX=$HOME/.local to install outside /usr/local without root.

Downloaded binaries do not use target-cpu tuning so they remain portable across supported CPUs. The container image keeps its existing build tuning.

apt and dnf repositories

Signed package repositories are available for system-managed upgrades.

For apt:

sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://reloading01.github.io/packages/key.gpg | sudo tee /etc/apt/keyrings/certstream.asc > /dev/null
echo "deb [signed-by=/etc/apt/keyrings/certstream.asc] https://reloading01.github.io/packages/apt stable main" | sudo tee /etc/apt/sources.list.d/certstream.list
sudo apt update && sudo apt install certstream-server-rust

The dnf instructions are on the package repository page. Both repositories are signed with:

C5D7 B0D1 42A6 1EF0 FB1A BE95 462A 111C FD91 20EE

Packages include a systemd unit with DynamicUser, StateDirectory=/var/lib/certstream, ProtectSystem=strict, NoNewPrivileges, and a syscall filter. Configuration is read from /etc/default/certstream-server-rust.

A commented MemoryMax setting is included. Steady-state RSS is around 80 MB, but catch-up after downtime needs additional headroom.

Homebrew and crates.io

brew install reloading01/tap/certstream-server-rust
cargo install certstream-server-rust

The Homebrew formula is updated automatically by the release workflow for each tag.

Engineering notes

Operational write-ups are available at certstream.dev/blog, including:

Upgrade

No server-side migration is required. The binary is unchanged from v1.5.5.

docker pull ghcr.io/reloading01/certstream-server-rust:1.5.6
Assets 14
Loading