Signed package repository for rooca-agent.
curl -fsSL https://packages.rooca.io/gpg-key.asc \
| sudo gpg --dearmor -o /usr/share/keyrings/rooca.gpg
curl -fsSL https://packages.rooca.io/gpg-key.asc \
| sudo gpg --dearmor -o /usr/share/keyrings/rooca.gpg
echo "deb [signed-by=/usr/share/keyrings/rooca.gpg] \
https://packages.rooca.io/debian stable main" \
| sudo tee /etc/apt/sources.list.d/rooca.list
sudo apt update && sudo apt install rooca-agent
sudo rpm --import https://packages.rooca.io/gpg-key.asc
sudo tee /etc/yum.repos.d/rooca.repo <<'EOF'
[rooca]
name=Rooca
baseurl=https://packages.rooca.io/dnf
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.rooca.io/gpg-key.asc
EOF
sudo dnf install rooca-agent
curl -fsSLO https://packages.rooca.io/rooca-agent/latest/rooca-agent-linux-amd64.tar.gz
curl -fsSLO https://packages.rooca.io/rooca-agent/latest/checksums.txt
curl -fsSLO https://packages.rooca.io/rooca-agent/latest/checksums.txt.asc
gpg --verify checksums.txt.asc checksums.txt
sha256sum -c checksums.txt --ignore-missing
tar xzf rooca-agent-linux-amd64.tar.gz
Service images live at registry.rooca.io and require a customer access token. Signatures verify against the Cosign public key:
cosign verify \
--key https://packages.rooca.io/cosign-pub.key \
registry.rooca.io/rooca/<service>:<tag>