get.sh - storage.yandexcloud.net is blocked under corporate proxies about multiwerf HOT 2 OPEN

thanks @distorhead I'll give trdl a try as well. Feel free to close the issue or manage it however it seems fit.

from multiwerf.

Hi, @epappas!

First of all thanks for your interest in werf project.

There is a new generation package manager for werf called trdl ("true delivery" :)): https://github.com/werf/trdl.
We are currently use this package manager internally (alpha testning phase).
Starting with coming weeks we are going to make this package manager as main way to use werf. Multiwerf installations will still be active, these will be migrated to trdl smoothly a little bit later.

Trdl uses S3 compatible storage to store packages for a project in a TUF-repository format: https://theupdateframework.io/
This is way more secure than an approach currently used by the multiwerf.

Werf project releases already published into tuf-repository, which is located in the google-storage currently (we have been moved away from storage.yandexcloud.net).

You can easily use trdl instead of multiwerf like that:

# install trdl client (this is a cli-tool similar to multiwerf, which could download packages releases from TUF-repositories)
curl https://tuf.trdl.dev/targets/releases/0.1.3/linux-amd64/bin/trdl --output /tmp/trdl && chmod +x /tmp/trdl && mkdir -p ~/bin && mv /tmp/trdl ~/bin/trdl

# add werf official TUF repository into your system
trdl add werf https://tuf.werf.io 1 b7ff6bcbe598e072a86d595a3621924c8612c7e6dc6a82e919abe89707d7e3f468e616b5635630680dd1e98fc362ae5051728406700e6274c5ed1ad92bea52a2

# use werf similarly to multiwerf
source $(trdl use werf 1.2 ea)

Some more details about trdl add params. These are sort of "fingerprints" of trusted tuf-repository:

trdl add werf https://tuf.werf.io 1 b7ff6bcbe598e072a86d595a3621924c8612c7e6dc6a82e919abe89707d7e3f468e616b5635630680dd1e98fc362ae5051728406700e6274c5ed1ad92bea52a2
# 1 stands for a version of root.json tuf metadata file: https://tuf.werf.io/1.root.json
# hash is a sha512 of root.json tuf metadata file: https://tuf.werf.io/root.json

Upd. It is better to use tuf.werf.io instead of storage.googleapis.com/werf-tuf directly and tuf.trdl.dev instead of storage.googleapis.com/trdl-tuf

from multiwerf.