Downloads

Pick a signed deployment by board, profile and artifact kind. This repository publishes no public download list: images are built from source, or delivered by the integrator together with what is needed to verify them.

No published artifact catalogue yet. Build an image from source, or ask your integrator for one.

How to get an image

Build from source

A pinned build container imports the packages, then assembles, signs, verifies and tests one product image.

Quickstart

Ask your integrator

The integrator selects the board and owns the application, and ships the image with its manifest, digests and test log.

Get and identify an image

Verification

The metadata public key has to come from an independent trusted channel — a checksum served beside the artifact is not authentication. Boot, content and metadata have separate trust anchors.

bash verify/run.sh --verify --board x64 \
  --image /path/to/disk.img --public-key /path/to/metadata-public.key

The offline check verifies the authenticated signature record and inspects content, geometry, firmware receipts and root policy.