Contr packages

Signed APT and DNF repositories for Contr. stable holds releases; testing also holds prereleases. Until Contr's first release, only testing has packages. Browse apt/, rpm/ and checksums/. The contr desktop app is built for Ubuntu 26.04 and Fedora 44; contr-daemon, the daemon and CLI, needs glibc 2.39 or newer.

Ubuntu and Debian

sudo curl -fsSo /usr/share/keyrings/contr.gpg https://contr-hq.github.io/contr-packages/contr.gpg
echo "deb [signed-by=/usr/share/keyrings/contr.gpg] https://contr-hq.github.io/contr-packages/apt testing main" |
  sudo tee /etc/apt/sources.list.d/contr.list
sudo apt update && sudo apt install contr

Fedora

sudo curl -fsSo /etc/yum.repos.d/contr-testing.repo https://contr-hq.github.io/contr-packages/rpm/contr-testing.repo
sudo dnf install contr

Contr is in preview, so these commands use testing; replace it with stable once Contr has a release. The signing key is KEY.asc, fingerprint B947 5E35 EE33 A932 9127 2EFB 2EE1 E61A DBE8 7687.

Verify a download

Every release's SHA256SUMS is signed with the same key, at checksums/<repository>/<tag>/, for example checksums/contr/v0.1.0-alpha.1/.

curl -fsSO https://contr-hq.github.io/contr-packages/checksums/contr/<tag>/SHA256SUMS
curl -fsSO https://contr-hq.github.io/contr-packages/checksums/contr/<tag>/SHA256SUMS.asc
curl -fsS https://contr-hq.github.io/contr-packages/KEY.asc | gpg --import
gpg --verify SHA256SUMS.asc SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS

GitHub also attests where each release file was built: gh attestation verify <file> --repo contr-hq/contr.