Install

Install the rolle desktop app with Homebrew, a signed DMG, the Windows installer, or the Linux AppImage, plus the CLI.

brew install --cask nateships/tap/rolle

The cask installs the desktop app and puts the rolle command on your PATH. The command ships inside the app bundle and updates with the app.

Or download rolle.dmg from the releases page. The app is signed and notarized. It needs macOS 12 or later, on Apple silicon or Intel. Install command, in the last onboarding step and in Settings → General, links the rolle command into /usr/local/bin. When rolle is already on your PATH, from Homebrew for example, the app says so and leaves it alone.

Download rolle-installer.exe from the releases page. One installer covers x64 and Arm64. It installs for the current user under %LOCALAPPDATA%\Programs\rolle. Installation and updates need no administrator.

Install command, in the last onboarding step and in Settings → General, writes the rolle command to %LOCALAPPDATA%\rolle\bin and adds that folder to your user PATH. Open a new terminal afterwards. Each app update updates the command.

The Windows build is not code signed. SmartScreen shows a warning on first launch.

Download rolle-linux-amd64.AppImage or the .deb package from the releases page. The app needs GTK 4 and WebKitGTK 6.0.

The deb installs the rolle command in /usr/local/bin. With the AppImage, Install command in the last onboarding step and in Settings → General writes it to ~/.local/bin, unless a rolle from the deb is already on your PATH. Each app update updates the command. For machines without the app, the CLI ships as rolle-cli_<version>_linux_<arch>.tar.gz.

CLI archives

Every release ships rolle-cli_<version>_<os>_<arch>.tar.gz (zip on Windows) for darwin, linux, and windows on amd64 and arm64, with a checksums.txt. Put the rolle binary on your PATH. The rolle-update-* zips are for the desktop app’s self-update, not for download.

checksums.txt carries a keyless Sigstore signature from the release workflow. To verify a download, put checksums.txt and checksums.txt.sigstore.json next to it and run:

cosign verify-blob checksums.txt \
  --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/nateships/rolle/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --check --ignore-missing checksums.txt

checksums.txt also lists rolle.dmg, the Windows installer, the AppImage, the deb, and manifest.json. Every file in it has a build provenance attestation:

gh attestation verify rolle.dmg --repo nateships/rolle

Updates

The changelog has the release notes and an RSS feed.

The desktop app checks for a signed update after launch and every six hours. When one exists, an Update button appears at the bottom of the sidebar. It opens the release notes and installs when you confirm. Settings → General → Automatic updates turns the check off. With Homebrew, brew upgrade --greedy rolle updates the app and the command. A plain brew upgrade skips the app.