Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.2/ytt-linux-amd64
Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
Make the binary executable
chmod +x /usr/local/bin/ytt
Via Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version
Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.2/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.53.2/checksums.txt.sig
Verify the checksums file
cosign verify-blob checksums.txt
--certificate checksums.txt.pem
--signature checksums.txt.sig
--certificate-identity-regexp=https://github.com/carvel-dev
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
What's Changed
- Fix empty maps and list issue #817 #911 by @emh-jump
Full Changelog: v0.53.1...v0.53.2
📂 Files Checksum
0e9e75b7a5f59161d2413e9d6163a1a13218f270daa1c525656195d1fcef28f6 ./ytt-linux-arm64
18fe794d01c2539db39acb90994db0d8e51faa7892d0e749d74c29818017247a ./ytt-linux-amd64
4cc85a5e954d651d547cdef1e673742d995a38b0840273a5897e5318185b4e18 ./ytt-darwin-arm64
641f84d65af7459ccaaa83694666bc9e5deb92b2b2dd94c34f51ddd94f0c69d2 ./ytt-windows-amd64.exe
7c825bfb2e11565904d23bd9b850fb73de3a73bf5019986d9f08807875a86c6b ./ytt-windows-arm64.exe
b1d90bf73071c78edb62a0f37663c655c99a3203783593e6e7988c2eeee5f935 ./ytt-linux-riscv64
cc51c3040b91bb0871967f9960cd9286bafd334ffd153a86914b883f3adad9ef ./ytt-darwin-amd64
