PandaLink Edge — Releases

Signed runtime manifests and artifacts.

Current release — 1.0.0

curl -fsSL https://get.pandalinkedge.com/edge | bash

Or install a specific version:

pandalink install \
  --manifest-url https://releases.pandalinkedge.com/edge/1.0.0/manifest.json \
  --artifact-url https://releases.pandalinkedge.com/edge/1.0.0/runtime.tar

Files

PathSize
1.0.0/manifest.json695 B
1.0.0/manifest.signed.json421 B
1.0.0/manifest.sig64 B
1.0.0/runtime.tar457.39 MB
1.0.0/public-key.pem918 B
1.0.0/verify-release.mjs—
latest.json798 B

Verify a download

Every manifest is Ed25519-signed. The signing key is pinned inside the Installer, so a tampered download will not install. To verify by hand:

curl -fsSLO https://releases.pandalinkedge.com/edge/1.0.0/manifest.signed.json
curl -fsSLO https://releases.pandalinkedge.com/edge/1.0.0/manifest.sig
curl -fsSLO https://releases.pandalinkedge.com/edge/1.0.0/public-key.pem
openssl pkeyutl -verify -pubin -inkey public-key.pem \
        -rawin -in manifest.signed.json -sigfile manifest.sig

Trust anchor

Key id: pandalink-release-ed25519-v1
Fingerprint: sha256:d0ee84b7125abc311bca5bd8405ca2d199d5f86ac0f9e20581965c6312cdf1ab

The same key is served from keys.pandalinkedge.com.