• v0.6.0 4e8342b2d8

    OnionWire v0.6.0
    All checks were successful
    android-ci / android (push) Successful in 13m0s
    ci / test (push) Successful in 45m56s
    ci / sdk (push) Successful in 2m16s
    Stable

    sirius released this 2026-10-29 02:13:57 +00:00 | 14 commits to main since this release

    OnionWire v0.6.0

    Prebuilt Linux binaries. No tor package required — Arti runs in-process.

    # aarch64 (Raspberry Pi, ARM servers)
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.6.0/onionwire-aarch64-unknown-linux-gnu
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.6.0/onionwire-aarch64-unknown-linux-gnu.sha256
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.6.0/onionwire-aarch64-unknown-linux-gnu.minisig
    sha256sum -c onionwire-aarch64-unknown-linux-gnu.sha256
    chmod +x onionwire-aarch64-unknown-linux-gnu
    
    # x86_64 (most PCs / VMs)
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.6.0/onionwire-x86_64-unknown-linux-gnu
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.6.0/onionwire-x86_64-unknown-linux-gnu.sha256
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/releases/download/v0.6.0/onionwire-x86_64-unknown-linux-gnu.minisig
    sha256sum -c onionwire-x86_64-unknown-linux-gnu.sha256
    chmod +x onionwire-x86_64-unknown-linux-gnu
    
    ./onionwire-<target> --version
    

    Keep the asset filenames so sha256sum -c matches. The TLS stack is rustls and
    OpenSSL (for SQLCipher) is compiled in from vendored sources, so the binaries
    have no dynamic libssl dependency.

    Verify before you run it

    A .sha256 only proves your download matches this page. Both assets are also
    signed with minisign, and every binary is reproducible from the tag.

    # 1. The signature. Take the key from the repo, not from this page:
    #    a signature checked against a key fetched from the same place it is
    #    supposed to vouch for proves nothing.
    curl -fL -O https://forgejo.siriusdevops.com/sirius/onionwire/raw/branch/main/scripts/onionwire-signing.pub
    minisign -Vm onionwire-x86_64-unknown-linux-gnu -p onionwire-signing.pub
    
    # 2. The bytes: rebuild this tag and compare, byte for byte.
    git clone https://forgejo.siriusdevops.com/sirius/onionwire
    cd onionwire && git fetch --tags
    scripts/verify-reproducible.sh v0.6.0
    

    build-info-<target>.txt, attached to this release, records the commit, the
    source date epoch, the toolchain and the builder image digest behind each hash —
    so a mismatch can be diagnosed instead of merely reported.

    Full walkthrough, including what these checks do and do not prove:
    docs/VERIFY.md.

    Building from source is covered in the README install guide.

    Downloads