Installation¶

From Source (Go Install)¶

If you have Go 1.24+ installed:

go install git.bnerd.net/cloud/app/cli@latest

This installs the bnerd binary to $GOPATH/bin. Make sure this directory is in your PATH.

Build from Source¶

git clone https://git.bnerd.net/cloud/app/cli.git
cd cli
make build

The binary is created as ./bnerd in the project root.

Build for All Platforms¶

make build-all

This produces binaries in the build/ directory for:

Platform	Architecture	Binary
Linux	amd64	`bnerd-linux-amd64`
Linux	arm64	`bnerd-linux-arm64`
macOS	amd64 (Intel)	`bnerd-darwin-amd64`
macOS	arm64 (Apple Silicon)	`bnerd-darwin-arm64`
Windows	amd64	`bnerd-windows-amd64.exe`

Pre-built Binaries¶

Pre-built binaries are available from the GitLab Package Registry for each tagged release.

Linux (amd64)Linux (arm64)macOS (Apple Silicon)macOS (Intel)Windows

curl -L -o bnerd https://git.bnerd.net/cloud/app/cli/-/packages/generic/bnerd/<VERSION>/bnerd-linux-amd64
chmod +x bnerd
sudo mv bnerd /usr/local/bin/

curl -L -o bnerd https://git.bnerd.net/cloud/app/cli/-/packages/generic/bnerd/<VERSION>/bnerd-linux-arm64
chmod +x bnerd
sudo mv bnerd /usr/local/bin/

curl -L -o bnerd https://git.bnerd.net/cloud/app/cli/-/packages/generic/bnerd/<VERSION>/bnerd-darwin-arm64
chmod +x bnerd
sudo mv bnerd /usr/local/bin/

curl -L -o bnerd https://git.bnerd.net/cloud/app/cli/-/packages/generic/bnerd/<VERSION>/bnerd-darwin-amd64
chmod +x bnerd
sudo mv bnerd /usr/local/bin/

Download bnerd-windows-amd64.exe from the package registry and add it to your PATH.

Replace <VERSION> with the desired release tag (e.g., v0.1.0).

Verifying a download¶

Each tagged release publishes a SHA256SUMS file alongside the binaries and an bnerd-<VERSION>.cdx.json CycloneDX SBOM.

To verify a downloaded binary or archive:

# Fetch the checksum manifest for the release
curl -L -o SHA256SUMS \
  https://git.bnerd.net/cloud/app/cli/-/packages/generic/bnerd/<VERSION>/SHA256SUMS

# Verify the artifact you downloaded (run from the directory containing both files)
sha256sum -c --ignore-missing SHA256SUMS

The CycloneDX SBOM lists every transitive Go module that went into the build:

curl -L -o bnerd-<VERSION>.cdx.json \
  https://git.bnerd.net/cloud/app/cli/-/packages/generic/bnerd/<VERSION>/bnerd-<VERSION>.cdx.json

Signed checksums

SHA256SUMS is not yet signed. The decision between cosign keyless OIDC and a managed GPG key is tracked on the roadmap. Until then, verifying checksums proves integrity against the file you fetched but not provenance against a publisher key.

Verify Installation¶

bnerd --version