Slug: BinaryPackages
Title: Binary Packages for Cryptech Software and Firmware
Author: Rob Austein
Date: 2016-12-15 22:44
Modified: 2019-09-03 15:23
Category: Releases
The Cryptech Project maintains APT and Homebrew repositories
containing packaged software for the Cryptech Alpha board for Debian
and Ubuntu Linux and for Mac OS X. The binary packages also include
pre-compiled images for the Alpha Board's Artix-7 FPGA, Cortex M4 ARM
CPU, and AVR ATtiny828 MCU.
-
Fetch and validate the repository key. Presumably you're security
concious (otherwise, why are you installing this stuff?), so you may
want to pay attention to what gpg --check-sig
says here.
id=37A8E93F5D7E7B9A
wget https://apt.cryptech.is/apt-gpg-key.gpg
gpg --recv-key $id
gpg --check-sig $id
-
Install the repository key. We used to use apt-key(8)
for this,
these days the cool kids use the /etc/apt/trusted.gpg.d/
directory:
sudo chown root:root apt-gpg-key.gpg
sudo mv apt-gpg-key.gpg /etc/apt/trusted.gpg.d/cryptech.gpg
-
Configure apt to use the repository. You need to add a couple of
entries to /etc/apt/source.list.d/
; which entries you need to add
depends on which distribution you're running.
-
For Debian Stretch, do:
sudo wget -q -O /etc/apt/sources.list.d/cryptech.list https://apt.cryptech.is/sources.stretch.list
-
For Debian Buster, do:
sudo wget -q -O /etc/apt/sources.list.d/cryptech.list https://apt.cryptech.is/sources.buster.list
-
For Ubuntu Xenial, do:
sudo wget -q -O /etc/apt/sources.list.d/cryptech.list https://apt.cryptech.is/sources.xenial.list
-
For Ubuntu Bionic, do:
sudo wget -q -O /etc/apt/sources.list.d/cryptech.list https://apt.cryptech.is/sources.bionic.list
-
Update the package index.
-
Install the cryptech-alpha
package.
sudo apt-get install cryptech-alpha
Once you've performed the steps above you should be able to upgrade to newer
version of the code using the normal APT upgrade process:
sudo apt-get update
sudo apt-get upgrade
-
Fetch and validate the repository key. Presumably you're security
concious (otherwise, why are you installing this stuff?), so you may
want to pay attention to what gpg --check-sig
says here.
id=37A8E93F5D7E7B9A
gpg --recv-key $id
gpg --check-sig $id
-
Configure Homebrew to use the repository.
brew tap cryptech/sw https://brew.cryptech.is/tap
-
Update the package index.
-
Check the commit signature on the cryptech-alpha package formula.
This is optional (Homebrew doesn't care whether you do this), but if
you want to know whether the formula was signed by the Cryptech
project, this is how to check.
brew log --max-count=1 --show-signature cryptech-alpha
-
Install the cryptech-alpha
package. At the moment, this is only
available as a Homebrew source package due to licensing issues in
the MacOS Xcode SDK, so the installation will probably take several
minutes, as some of the libraries are a bit slow to compile (sorry...).
brew install cryptech-alpha
Once you've performed the steps above you should be able to upgrade to newer
version of the code using the normal Homebrew upgrade process:
brew update
brew upgrade
brew cleanup