Every Guard build, every platform

Verify a download

1. Check the hash

Run the command for your platform. The output must match the sha256 listed above for your file.

# Mac
shasum -a 256 "CodeMarine Guard-0.7.9-arm64-7b0a68c846db.dmg"

# Linux
sha256sum codemarine-guard_0.7.9_amd64.deb

# Windows PowerShell
Get-FileHash -Algorithm SHA256 ".\CodeMarine Guard Setup 0.7.9.exe"

2. Check the signature

Every checksums.sha256 list is signed with Ed25519. These commands check the list for 0.7.9. A good list prints Signature Verified Successfully. Then compare your hash with the line for your file.

curl -fsSLO https://codemarine.ai/guard-release-signing.pub
curl -fsSL -o checksums.sha256 "https://releases.codemarine.ai/guard/builds/0.7.9/9832c2c9-20260929T121936Z/checksums.sha256"
curl -fsSL -o checksums.sha256.sig "https://releases.codemarine.ai/guard/builds/0.7.9/9832c2c9-20260929T121936Z/checksums.sha256.sig"
openssl pkeyutl -verify -pubin -inkey guard-release-signing.pub -rawin \
  -in checksums.sha256 -sigfile checksums.sha256.sig

Needs OpenSSL 3 or later. The openssl that ships with macOS is LibreSSL and will not run this, so use the one from Homebrew. The public key is on this site at /guard-release-signing.pub so it does not come from the same host as the files it checks.

Install with apt

curl -fsSL https://releases.codemarine.ai/apt/codemarine-archive-keyring.gpg \
  | sudo tee /usr/share/keyrings/codemarine-archive-keyring.gpg >/dev/null
echo "deb [signed-by=/usr/share/keyrings/codemarine-archive-keyring.gpg arch=amd64] https://releases.codemarine.ai/apt stable main" \
  | sudo tee /etc/apt/sources.list.d/codemarine.list
sudo apt update && sudo apt install codemarine-guard

Debian and Ubuntu on amd64. Signed with key 1D17 4A38 048A 8768 01D3 3E9C 486A 5617 EA35 00AC. The apt repository is on 0.6.11. The .deb download is on 0.7.9.