Install

Install the rolle desktop app with Homebrew, a signed DMG, a pkg for Jamf and other MDM tools, the Windows installer, or the Linux AppImage. Every package carries the rolle command.

brew install --cask nateships/tap/rolle

The cask installs the desktop app and puts the rolle command on your PATH. The command ships inside the app bundle and updates with the app.

Or download rolle.dmg from the releases page. For Jamf and other MDM tools, use rolle.pkg; see Managed Macs. The app is signed and notarized. It needs macOS 12 or later, on Apple silicon or Intel. Install command, in the last onboarding step and in Settings → General, links the rolle command into /usr/local/bin. When rolle is already on your PATH, from Homebrew for example, the app says so and leaves it alone.

Download rolle-installer.exe from the releases page. One installer covers x64 and Arm64. It installs for the current user under %LOCALAPPDATA%\Programs\rolle. Installation and updates need no administrator.

Install command, in the last onboarding step and in Settings → General, writes the rolle command to %LOCALAPPDATA%\rolle\bin and adds that folder to your user PATH. Open a new terminal afterwards. Each app update updates the command.

The installer, the app, and the rolle command carry an Authenticode signature from a Certum code signing certificate. SmartScreen can still warn on a new release until the certificate has earned a reputation; choose More info → Run anyway.

Download rolle-linux-amd64.AppImage or the .deb package from the releases page. The app needs GTK 4 and WebKitGTK 6.0.

The deb installs the rolle command in /usr/local/bin. With the AppImage, Install command in the last onboarding step and in Settings → General writes it to ~/.local/bin, unless a rolle from the deb is already on your PATH. Each app update updates the command. For a machine without the app, go install github.com/nateships/rolle/cmd/rolle@latest builds the command alone.

Managed Macs

For Jamf and other MDM tools, each release has rolle.pkg. The package is signed with a Developer ID Installer certificate and notarized. It installs rolle.app into /Applications and links the rolle command into /usr/local/bin. If /usr/local/bin/rolle is already there and is not a link into a rolle.app, the package does not change it.

The package installs on macOS 12 or later. It does not compare versions: an older rolle.pkg replaces a newer app, so you can roll back.

sudo installer -pkg rolle.pkg -target /

The package identifier is com.getrolle.app. The Team ID is AMR56F4NQB.

rolle keeps updating itself after a package install. Root owns the app then, so each update asks for an administrator to approve it. To deliver updates yourself instead, preset settings, or add your Identity Center portals and Entra ID tenants, see MDM profile.

Verify a download

Every release ships a checksums.txt that lists rolle.dmg, rolle.pkg, the Windows installer, the AppImage, the deb, and manifest.json. The rolle-update-* zips are for the desktop app’s self-update, not for download.

checksums.txt carries a keyless Sigstore signature from the release workflow. To verify a download, put checksums.txt and checksums.txt.sigstore.json next to it and run:

cosign verify-blob checksums.txt \
  --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/nateships/rolle/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --check --ignore-missing checksums.txt

Every file in checksums.txt has a build provenance attestation:

gh attestation verify rolle.dmg --repo nateships/rolle

Updates

The changelog has the release notes and an RSS feed.

The desktop app checks for a signed update after launch and every six hours. When one exists, an Update button appears at the bottom of the sidebar. It opens the release notes and installs when you confirm. Settings → General → Automatic updates turns the check off. With Homebrew, brew upgrade --greedy rolle updates the app and the command. A plain brew upgrade skips the app.