Title: Binary Packages for Cryptech Software and Firmware
Author: Rob Austein
Date: 2016-12-15 22:44
Modified: 2019-09-03 15:23
Category: Releases
The Cryptech Project maintains APT and Homebrew repositories
containing packaged software for the Cryptech Alpha board for Debian
and Ubuntu Linux and for Mac OS X. The binary packages also include
pre-compiled images for the Alpha Board's Artix-7 FPGA, Cortex M4 ARM
CPU, and AVR ATtiny828 MCU.
- Fetch and validate the repository key. Presumably you're security
concious (otherwise, why are you installing this stuff?), so you may
want to pay attention to what
gpg --check-sig says here.
$ id=37A8E93F5D7E7B9A
$ wget https://apt.cryptech.is/apt-gpg-key.gpg
$ gpg --recv-key $id
$ gpg --check-sig $id
- Install the repository key. We used to use
apt-key(8) for this,
these days the cool kids use the /etc/apt/trusted.gpg.d/ directory:
$ sudo chown root:root apt-gpg-key.gpg
$ sudo mv apt-gpg-key.gpg /etc/apt/trusted.gpg.d/cryptech.gpg
-
Configure apt to use the repository. You need to add a couple of
entries to /etc/apt/source.list.d/; which entries you need to add
depends on which distribution you're running.
- For Debian Stretch, do:
$ sudo wget -q -O /etc/apt/sources.list.d/cryptech.list https://apt.cryptech.is/sources.stretch.list
- For Debian Buster, do:
$ sudo wget -q -O /etc/apt/sources.list.d/cryptech.list https://apt.cryptech.is/sources.buster.list
- For Ubuntu Xenial, do:
$ sudo wget -q -O /etc/apt/sources.list.d/cryptech.list https://apt.cryptech.is/sources.xenial.list
- For Ubuntu Bionic, do:
$ sudo wget -q -O /etc/apt/sources.list.d/cryptech.list https://apt.cryptech.is/sources.bionic.list
-
Update the package index.
$ sudo apt-get update
- Install the
cryptech-alpha package.
$ sudo apt-get install cryptech-alpha
Once you've performed the steps above you should be able to upgrade to newer
version of the code using the normal APT upgrade process:
$ sudo apt-get update
$ sudo apt-get upgrade
- Fetch and validate the repository key. Presumably you're security
concious (otherwise, why are you installing this stuff?), so you may
want to pay attention to what
gpg --check-sig says here.
$ id=37A8E93F5D7E7B9A
$ gpg --recv-key $id
$ gpg --check-sig $id
- Configure Homebrew to use the repository.
$ brew tap cryptech/sw https://brew.cryptech.is/tap
- Update the package index.
$ brew update
- Check the commit signature on the cryptech-alpha package formula.
This is optional (Homebrew doesn't care whether you do this), but if
you want to know whether the formula was signed by the Cryptech
project, this is how to check.
$ brew log --max-count=1 --show-signature cryptech-alpha
- Install the
cryptech-alpha package. At the moment, this is only
available as a Homebrew source package due to licensing issues in
the MacOS Xcode SDK, so the installation will probably take several
minutes, as some of the libraries are a bit slow to compile (sorry...).
$ brew install cryptech-alpha
Once you've performed the steps above you should be able to upgrade to newer
version of the code using the normal Homebrew upgrade process:
$ brew update
$ brew upgrade
$ brew cleanup
