Signed DEB + RPM · ARM64 + x86_64

Ryzhov Linux Package Repository

A small, auditable archive for RustDB/Rdynamo, rpgit, and rpichecksum. rpgit is built for Debian, Fedora, and openSUSE from one pinned source and offline Cargo vendor set; accepted packages are tested in disposable guests, signed on the VPS, and promoted as immutable releases.

OpenPGP signedSeven-target QADebian 12 + 13Fedora 44openSUSE Leap + TumbleweedAtomic publicationrpgit PDF guide

Debian 13 Trixie · ARM64

The Deb822 source format keeps the architecture, suite, and signing-key policy explicit.

sudo install -d -m 0755 /etc/apt/keyrings
curl -fsSL https://apt.ryzhov.website/rdynamo.gpg \
  | sudo tee /etc/apt/keyrings/ryzhov-archive.gpg >/dev/null

sudo tee /etc/apt/sources.list.d/ryzhov.sources >/dev/null <<'EOF'
Types: deb
URIs: https://apt.ryzhov.website
Suites: trixie
Components: main
Architectures: arm64
Signed-By: /etc/apt/keyrings/ryzhov-archive.gpg
EOF

sudo apt update
sudo apt install rdynamo rpgit rpichecksum

Debian 12 Bookworm · ARM64

The Bookworm suite contains rpgit only. It uses the same archive key and an independent immutable snapshot and package pool.

sudo install -d -m 0755 /etc/apt/keyrings
curl -fsSL https://apt.ryzhov.website/rdynamo.gpg \
  | sudo tee /etc/apt/keyrings/ryzhov-archive.gpg >/dev/null

sudo tee /etc/apt/sources.list.d/ryzhov-rpgit.sources >/dev/null <<'EOF'
Types: deb
URIs: https://apt.ryzhov.website/bookworm
Suites: bookworm
Components: main
Architectures: arm64
Signed-By: /etc/apt/keyrings/ryzhov-archive.gpg
EOF

sudo apt update
sudo apt install rpgit

Fedora 44 · ARM64 / x86_64

The repository definition enables both RPM-package and repository-metadata signature checks.

curl -fsSL \
  https://apt.ryzhov.website/rpm/fedora/44/ryzhov-rpgit.repo \
  | sudo tee /etc/yum.repos.d/ryzhov-rpgit.repo >/dev/null

sudo dnf install rpgit

Browse: ARM64 packages · x86_64 packages

openSUSE Leap 16.0 · ARM64 / x86_64

Zypper reads the signed RPM metadata and selects the directory matching the machine architecture.

curl -fsSL \
  https://apt.ryzhov.website/rpm/opensuse/leap/16.0/ryzhov-rpgit.repo \
  | sudo tee /etc/zypp/repos.d/ryzhov-rpgit.repo >/dev/null

sudo zypper --gpg-auto-import-keys refresh ryzhov-rpgit
sudo zypper install rpgit

Packages: ARM64 · x86_64

openSUSE Tumbleweed · ARM64 / x86_64

The rolling-distribution build is compiled from the same pinned source and Rust toolchain, then tested through a clean install, removal, and reinstall lifecycle.

curl -fsSL \
  https://apt.ryzhov.website/rpm/opensuse/tumbleweed/ryzhov-rpgit.repo \
  | sudo tee /etc/zypp/repos.d/ryzhov-rpgit.repo >/dev/null

sudo zypper --gpg-auto-import-keys refresh ryzhov-rpgit
sudo zypper install rpgit

Packages: ARM64 · x86_64

Rdynamo package contract

rdynamo installs the supported server and CLI split. The stable public paths are:

/usr/bin/rustdb-server
/usr/bin/rustdbctl
/usr/bin/rdynamo -> rustdbctl
/etc/default/rdynamo-server
/var/lib/rdynamo
/var/log/rdynamo

rpgit package contract

rpgit installs the terminal UI plus its optional isolated Codex launcher. Native Git remains authoritative, and Codex credentials are never included in the package.

/usr/bin/rpgit
/usr/bin/rpgit-agent

Verify after installation

systemctl status rdynamo-server
rustdb-server --version
rustdbctl --version
rdynamo --version
rpgit --version
cd /path/to/git/repository
rpgit doctor --json
rpgit-agent --help
rpichecksum info
printf 123456789 | rpichecksum crc32c -

The CRC32C known-answer result is e3069283.

Current support status

PackageVersionStatusPurpose
rdynamo1:3.0.0-1SupportedConvenience package for server and CLI
rdynamo-server1:3.0.0-1SupportedHardened systemd service and RustDB server
rdynamo-cli1:3.0.0-1Supportedrustdbctl and compatibility command
rpgit0.1.0-1SupportedDebian 12/13 ARM64; Fedora 44, Leap 16.0, and Tumbleweed ARM64/x86_64
rpichecksum0.1.3-1SupportedRuntime-dispatched CRC32C utility
rdynamo-3.01:3.0.0-1TransitionFile-light upgrade bridge; removable after migration
rdynamo-0.2, rdynamo-2.0historicalLegacySigned archive artifacts; no future fixes or releases

rpgit user guide and preview

Download the rpgit PDF tutorial (document version 0.2.0) for the project UI workflow. Package installation remains available through the signed Debian, Fedora, and openSUSE repositories above.

File
rpgit-user-guide-0.2.0.pdf
Version
0.2.0
Size
2.0 MB PDF
Updated
2026-08-25
SHA-256
6bc3b9604ac4b9b9cf727bfdffbe155c1626ee90865957613d06e5075369374a

APT and RPM trust anchor

Fingerprint
6D8B 3463 113E 6804 658D 97CB 95CD 40A6 1168 5FEE
Expires
2028-06-18 12:31:37 UTC
UID
Rdynamo APT Repository <apt@ryzhov.website>

Release channels

trixie and bookworm are production APT suites. trixie-preview remains opt-in. The /rpm link selects one immutable Fedora/openSUSE release; prior releases remain rollback targets.

Release evidence chain

  1. Upstream commits, source archives, Cargo lockfiles, and vendored dependencies are pinned by SHA-256.
  2. Debian 13 packages use native ARM64 clean builds. rpgit multi-distribution packages use publish-disabled OBS workers with frozen, offline Cargo input.
  3. A distinct Raspberry Pi validator key signs the QA manifest; the production archive key never leaves the VPS signer.
  4. Aptly publishes an immutable staging snapshot. A clean ARM64 guest verifies the served metadata and package behavior.
  5. Original OBS RPM hashes are retained; accepted copies and their repository metadata are signed on the VPS, then tested again.
  6. The exact tested APT snapshots and RPM release tree are promoted atomically; prior snapshots and releases remain available for rollback.