Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
apt		apt
gpg		gpg
rpm		rpm
scripts		scripts
.gitignore		.gitignore
.nojekyll		.nojekyll
CLAUDE.md		CLAUDE.md
LICENSE		LICENSE
README.md		README.md
apt-ftparchive.conf		apt-ftparchive.conf
index.html		index.html

Repository files navigation

Vouch Packages

APT, YUM/DNF, Homebrew, and winget packages for Vouch — hardware-backed identity for developers.

Hosted at packages.vouch.sh.

Installation

APT (Debian / Ubuntu)

curl -fsSL https://packages.vouch.sh/gpg/vouch.asc \
  | gpg --dearmor \
  | sudo tee /usr/share/keyrings/vouch-archive-keyring.gpg > /dev/null

echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/vouch-archive-keyring.gpg] https://packages.vouch.sh/apt stable main" \
  | sudo tee /etc/apt/sources.list.d/vouch.list > /dev/null

sudo apt-get update && sudo apt-get install -y vouch

YUM / DNF (Fedora / RHEL)

sudo tee /etc/yum.repos.d/vouch.repo << 'EOF'
[vouch]
name=Vouch
baseurl=https://packages.vouch.sh/rpm/$basearch/
gpgcheck=1
gpgkey=https://packages.vouch.sh/gpg/vouch.asc
enabled=1
EOF

sudo dnf install -y vouch

Homebrew (macOS)

brew install vouch-sh/tap/vouch

winget (Windows)

winget install SmokeTurner.Vouch

Packages

Package	Type	Architectures
vouch	APT (.deb)	amd64, arm64
vouch	RPM (.rpm)	x86_64, aarch64
vouch-server	RPM (.rpm)	x86_64, aarch64
vouch-sh/tap/vouch	Homebrew	macOS
SmokeTurner.Vouch	winget	amd64

GPG Verification

All packages and repository metadata are signed. The public key is available at /gpg/vouch.asc.

Repository Structure

apt/
  pool/main/          .deb packages
  dists/stable/       APT repository metadata
rpm/
  x86_64/             x86_64 .rpm packages + repodata
  aarch64/            aarch64 .rpm packages + repodata
gpg/
  vouch.asc           GPG public key