Skip to content
weld_
Account

Install

Requirements, install commands and the first steps. The hash of each script is shown beside its command: check it before you run.

Requirements

Linux x86-64

  • TPM 2.0
  • User in the tss group, otherwise ENR-005
  • Secret Service: GNOME Keyring or KWallet, otherwise REL-TUF-001
  • git

Sign-in needs a browser on any device. macOS and ARM are not in the first release.

Install

Check the hash and run it. The installer signs in to your account with a short code and installs your personal weldctl head.

Linux
curl -fsSLO https://weld.naasson.com/install.sh
echo "a13585cea11c3d7ff5f2af0cd142821eb6d199200d3518a164e790ff720bd4f3  install.sh" | sha256sum -c -
WELDCTL_INSTALL_SHA256=a13585cea11c3d7ff5f2af0cd142821eb6d199200d3518a164e790ff720bd4f3 sh install.sh

SHA-256 install.sha13585cea11c3d7ff5f2af0cd142821eb6d199200d3518a164e790ff720bd4f3

Then

<data-dir> is a new directory for the device project, <device-name> is the device name, <grant-id> comes from rights.json or the account page.

  1. Update the head. Do this before activation.

    weldctl
    weldctl release update head upgrade --registry-url https://weld.naasson.com

  2. Save your rights to a file.

    weldctl
    weldctl release update head rights --registry-url https://weld.naasson.com --out rights.json

  3. Enroll the device. It takes one seat.

    weldctl
    weldctl release update head enroll --root <data-dir> --rights rights.json --name <device-name>

  4. Activate the device.

    weldctl
    weldctl release update head activate --root <data-dir> --edition installer --owner-grant-id <grant-id>

  5. Fetch the body of your set. Updates arrive through the same command.

    weldctl
    weldctl release update body fetch-remote --registry-url https://weld.naasson.com --root <data-dir>