blipnik releases

Each release is one Debian package for amd64 computers running Debian 12 or later, or Ubuntu 22.04 or later. With it come SHA256SUMS, the checksum of every file; SHA256SUMS.sig, its signature by the blipnik release key; and the release's software bill of materials.

No release has been published yet.

Check a copy before installing it

Download the package, SHA256SUMS and SHA256SUMS.sig into one folder. Save the release key printed in the install guide as release-key.pem. Never use a key from this site: whoever could change a file here could change a key here too.

Then check the signature, and the package against its own line:

openssl pkeyutl -verify -pubin -inkey release-key.pem -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig
awk '$2 == "blipnik_VERSION_amd64.deb"' SHA256SUMS | sha256sum --check

Install only when the first says Signature Verified Successfully and the second says blipnik_VERSION_amd64.deb: OK. Anything else means the copy is not the one blipnik signed.