umbree

Install

The installer detects your OS and architecture, verifies the download end-to-end (minisign signature → SHA-256 → unzip), then runs the inner installer. There is no dispatcher — the binary is invoked directly.

umbree lands in $HOME/.local/bin.

umbree is what you run on the machine you browse from; umbreed is what you run on the machine you want to exit through. umbreed installs itself as a system service (needs root once) so the exit survives logout and reboot.

Requirements

umbree's carrier delegates to the burrowee daemon at runtime. The installer ensures burrowee-cli is present, installing it from burrowee's own public channel if missing:

curl -fsSL --proto '=https' --tlsv1.2 https://release.burrowee.com/cli/install.sh | sh

Nothing is bundled — umbree and burrowee are verified and installed separately.

Verify by hand

Every release ships SHA256SUMS.txt and a minisign signature. The signing public key lives at /umbree-release.pub — it is also baked into the installer, which is the trust anchor that verifies each download automatically:

untrusted comment: minisign public key 491D58DE25ADC819
RWQZyK0l3lgdSYfj8VXhoTWlVVVcRqfnuVROJzloNrw9NBFm11IeD3HN

To check a download yourself:

minisign -V -P "$(cat umbree-release.pub | tail -n1)" -m SHA256SUMS.txt -x SHA256SUMS.txt.minisig
f=<file>                                      # the file you downloaded
want=$(awk -v f="$f" '{ n = $2; sub(/^\*/, "", n); if (n == f) { print $1; exit } }' SHA256SUMS.txt)
got=$(shasum -a 256 "$f" | awk '{print $1}')  # sha256sum "$f" on Linux
if   [ -z "$want" ];        then echo "NO ENTRY for $f in SHA256SUMS.txt — do not install"
elif [ "$want" = "$got" ];  then echo "OK $f"
else                             echo "MISMATCH for $f — do not install"; fi

A failed signature check means the bytes are untrusted — do not install them.

Supported platforms

Windows is not supported.