cortex-releases

Install

Linux:

curl -fsSL -o install.sh https://raw.githubusercontent.com/codesidian/cortex-releases/main/install.sh
sudo bash install.sh --code <ENROLLMENT_CODE> --fingerprint <FINGERPRINT>

Windows (elevated PowerShell):

irm https://raw.githubusercontent.com/codesidian/cortex-releases/main/install.ps1 -OutFile install.ps1
.\install.ps1 -Code <ENROLLMENT_CODE> -Fingerprint <FINGERPRINT>

Verify

minisign -Vm manifest.json -p minisign.pub   # or minisign-next.pub (backup key)
sha256sum cortex-agent-*   # compare with manifest.json

Publish

Releases are built by codesidian/cortex-agent's release workflow from a v* tag and land here as a draft. The owner reviews and signs the draft's manifest.json with the release YubiKey, which publishes it:

python sign-release.py v0.1.8      # codesidian-infra/release/

On publish, floor opens a PR raising the installers' MIN_VERSION and verify re-checks the release against the pinned keys (also daily).