Fluxion::CompiledBinaryStep
Inherits Fluxion::Step < Reference < Object
type: compiled-binary โ download, verify, and install a pre-built binary.
This is the kind with the most trust surface, so it carries the most
structure: a mandatory TrustAnchor, an exact archive member path rather
than a basename guess, and an atomic replace that only happens after mode
and symlink are staged successfully.
Constants
Streaming limits. Artifacts and signatures cap at 1 GiB, checksum documents at 1 MiB, and a decompressed tar stream at 2 GiB including headers, padding, GNU long-name records, and PAX metadata.
Constructors
Instance methods
Exact post-strip member path inside the archive. Required for archives; Fluxion never falls back to matching by basename, because two members can share one.
Supplemental checksum document. Never a trust anchor on its own โ it is served by the same host as the artifact โ so it is only meaningful alongside a signer-bound signature.
binstaller has no equivalent of tar's strip-components, so a delegated
install with a nonzero value would silently select a different member.
Refusing is the only honest answer.
Keyed by install path rather than binary name: two steps may both install
something called dotbot, and the path is what actually collides.