Installation

From pip

If you are using python you can install the latest release with:

$ pip install dfetch

Or install the latest version from the main branch:

$ pip install git+https://github.com/dfetch-org/dfetch.git@main#egg=dfetch

Binary distributions

Each release on the releases page provides pre-built installers for all major platforms, so no compilation is required.

Each installer package has a name in the format <version>-<platform>.

  • <version> shows the software version:

    • If it includes dev, it is a development release (for testing).

    • If it is only numbers (e.g. 0.13.0), it is an official release.

  • <platform> indicates the system the installer is for: nix (Linux), osx (Mac), or win (Windows).

The version is automatically determined from the project and used to name the installer files.

Download the .deb or .rpm package from the releases page and install it.

Debian / Ubuntu (.deb):

$ sudo dpkg -i dfetch-<version>-nix.deb

RPM-based distributions (.rpm):

$ sudo dnf install dfetch-<version>-nix.rpm
# or
$ sudo rpm -i dfetch-<version>-nix.rpm

Validating Installation

Run the following command to verify the installation

$ dfetch environment

Verifying release integrity

Every dfetch release is signed with SLSA provenance attestations. To verify an installed package, use the GitHub CLI:

For pip installations:

$ gh attestation verify --cert-identity https://github.com/dfetch-org/dfetch/.github/workflows/python-publish.yml@refs/tags/v<version> \
    --cert-oidc-issuer https://token.actions.githubusercontent.com \
    ~/.local/lib/python3.x/site-packages/dfetch-<version>.dist-info/

For binary installers:

$ gh attestation verify dfetch-<version>-nix.deb --repo dfetch-org/dfetch

See GitHub artifact attestations for details.