umbree

Install

The installer detects your OS and architecture, verifies the download end-to-end (minisign signature → SHA-256 → unzip), then runs the inner installer. There is no dispatcher — the binary is invoked directly.

umbree lands in $HOME/.local/bin.

Requirements

umbree's carrier delegates to the burrowee daemon at runtime. The installer ensures burrowee-cli is present, installing it from burrowee's own public channel if missing:

curl -fsSL --proto '=https' --tlsv1.2 https://release.burrowee.com/cli/install.sh | sh

Nothing is bundled — umbree and burrowee are verified and installed separately.

Verify by hand

Every release ships SHA256SUMS.txt and a minisign signature. The signing public key lives at /umbree-release.pub — it is also baked into the installer, which is the trust anchor that verifies each download automatically:

untrusted comment: minisign public key 491D58DE25ADC819
RWQZyK0l3lgdSYfj8VXhoTWlVVVcRqfnuVROJzloNrw9NBFm11IeD3HN

To check a download yourself:

minisign -V -P "$(cat umbree-release.pub | tail -n1)" -m SHA256SUMS.txt -x SHA256SUMS.txt.minisig
shasum -a 256 -c SHA256SUMS.txt   # or sha256sum on Linux

A failed signature check means the bytes are untrusted — do not install them.

Supported platforms

Windows is not supported.