• v0.5.0 08bf6649df

    sirius released this 2026-10-21 02:59:29 +00:00 | 30 commits to main since this release

    OnionWire v0.5.0

    Prebuilt Linux binaries. No tor package required — Arti runs in-process.

    # aarch64 (Raspberry Pi, ARM servers)
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.5.0/onionwire-aarch64-unknown-linux-gnu
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.5.0/onionwire-aarch64-unknown-linux-gnu.sha256
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.5.0/onionwire-aarch64-unknown-linux-gnu.minisig
    sha256sum -c onionwire-aarch64-unknown-linux-gnu.sha256
    chmod +x onionwire-aarch64-unknown-linux-gnu
    
    # x86_64 (most PCs / VMs)
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.5.0/onionwire-x86_64-unknown-linux-gnu
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.5.0/onionwire-x86_64-unknown-linux-gnu.sha256
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.5.0/onionwire-x86_64-unknown-linux-gnu.minisig
    sha256sum -c onionwire-x86_64-unknown-linux-gnu.sha256
    chmod +x onionwire-x86_64-unknown-linux-gnu
    
    ./onionwire-<target> --version
    

    Keep the asset filenames so sha256sum -c matches. The TLS stack is rustls and
    OpenSSL (for SQLCipher) is compiled in from vendored sources, so the binaries
    have no dynamic libssl dependency.

    Verify before you run it

    A .sha256 only proves your download matches this page. Both assets are also
    signed with minisign, and every binary is reproducible from the tag.

    # 1. The signature. Take the key from the repo, not from this page:
    #    a signature checked against a key fetched from the same place it is
    #    supposed to vouch for proves nothing.
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/raw/branch/main/scripts/onionwire-signing.pub
    minisign -Vm onionwire-x86_64-unknown-linux-gnu -p onionwire-signing.pub
    
    # 2. The bytes: rebuild this tag and compare, byte for byte.
    git clone https://forgejo.siriusdevops.com/sirius/onionwire
    cd onionwire && git fetch --tags
    scripts/verify-reproducible.sh v0.5.0
    

    build-info-<target>.txt, attached to this release, records the commit, the
    source date epoch, the toolchain and the builder image digest behind each hash —
    so a mismatch can be diagnosed instead of merely reported.

    Full walkthrough, including what these checks do and do not prove:
    docs/VERIFY.md.

    Building from source is covered in the README install guide.

    Downloads