attest

Closed-source attestation helper used by euri-mklive when building Euri Linux ISOs.

What it does

When the ISO builder runs, it may download this binary and execute it. The binary prints a single JSON line on stdout, for example:

{"official":true,"builder":"...","application":"..."}

• exit code 0 + "official":true → the build is treated as an official Euri Linux release and stamped into the ISO's xorriso metadata (publisher / application / preparer).
• any other result (missing binary, network failure, non-zero exit, "official":false) → the ISO is labeled euri-mklive (unverified build).

It does not install software, modify the ISO contents, or phone home. It only inspects the local environment and prints JSON.

Why closed source

This repository ships binaries only.

The checks are intentionally not published as readable source. Publishing the exact predicates would let anyone rebuild a tool that always answers official:true, which would make the ISO provenance stamp meaningless.

• The binary is public here so anyone can verify what the builder fetches and run it themselves.
• The build inputs and full source are not part of this repository.

If you need to audit behavior beyond running the binary, treat the published artifact as the specification: dump strings, disassemble, or run it under a tracer — the output contract is the JSON line above.

Download

Latest release asset (Gitea download path):

https://git.euri.pl/Euri-Linux/attest/releases/download/latest/attest-x86_64

Related

• euri-mklive — multi-distro ISO builder used for Horizon