Repository navigation
Add one-command verified installers for Linux, macOS and Windows - #29
Conversation
…indows (#27) - install.sh / install.ps1: download one pinned tag (default v0.5.3), validate the .sha256 record, replace atomically (Windows: backup + recovery copy), start nothing; refuse unsupported OS/architectures before downloading - README is now the install commands; the old guide moves to docs/guide.md and install details, trust model and fallbacks to docs/install.md - Windows one-liner fetches the script with the built-in curl.exe, so legacy PowerShell 5.1 TLS defaults do not apply; failed or cut-off downloads install nothing - tests/installers.py: local fixture tests (PS 5.1, PS 7, sh) and an opt-in live v0.5.3 download that re-checks the checksum and runs only --help with isolated state; CI runs both on Linux x64/arm64, macOS arm64 and Windows x64 - ./dialtone.sh test --only installers runs the fixture tests Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
Native installer CI passed on all four supported families, including the real published binary download/checksum/isolated Sol's independent final review found one bootstrap edge to address before merge: a transfer that returns parseable script text but exits nonzero can still be executed by the short pipe/ |
…ds (#27) curl | sh and iex (curl.exe ... | Out-String) run whatever bytes arrived even when curl fails: a 404 exited 0, and a complete script cut short before the promised length installed. Both README one-liners and the pinned forms in docs/install.md now keep the script in memory and run it only when curl succeeded: sh -c 's=$(curl -fsSL .../install.sh) && eval "$s"' $s = curl.exe -fsSL .../install.ps1 | Out-String; if ($LASTEXITCODE) { throw ... }; iex $s The README tests now run on sh as well as PowerShell, add a complete-but-short download (must fail, request nothing, install nothing), and run the documented pinned one-command forms. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
Fixed the downloader-status finding in Local final tests: PowerShell 5.1 and 7 each 29 passed/4 intentional skips, Git Bash 25 passed/8 intentional skips, lint passed. Native CI is rerunning on the new SHA; Sol is rechecking the exact fix. Existing install scripts and signed-update trust are unchanged by this correction. |
|
Sol's independent exact-commit review APPROVED Final-SHA native Linux x64, Linux ARM64, and Windows installer jobs have passed. macOS is queued, and full repository checks are running. Merge remains gated on completion of this CI run: https://github.com/timcash/dialtone/actions/runs/42866855773 |
Closes #27
Closes #28
What changed
Collaboration and review
Sol (
gpt-6.1-sol) and Opus (claude-opus-5-5) worked through AI app router on Legion. Opus's replacement/TLS review findings were fixed; Sol independently approved final commit80af920c3c045bb19f3aab9378004ce1fd147d8fafter its downloader-failure finding was regression-tested and fixed. No remaining blocking findings.Verification
All seven native CI jobs passed on the exact final SHA: https://github.com/timcash/dialtone/actions/runs/42866855773
Live Legion/Metal processes, configuration and membership were not modified. Initial install provides HTTPS checksum integrity; release-key-signed managed-node update trust is unchanged.
Limits
Published binaries cover Linux x64/ARM64, macOS Apple Silicon and Windows x64. Intel macOS, Windows ARM64 and 32-bit targets remain unsupported. Linux ARM64 uses GNU/glibc; no unverified minimum version is claimed.