Skip to content

Installing the fm CLI

fm is a single self-contained binary for Linux, macOS, and Windows. All downloads are served from the EU at get.frostmoln.cloud and signed with minisign. Always verify the signature before running a binary (see Verify below).

Install script (Linux / macOS)

bash
curl -sSL https://get.frostmoln.cloud/cli | sh

The script downloads the right archive for your platform, verifies its minisign signature against a pinned key, and installs fm to /usr/local/bin. It requires minisign and fails closed if it is missing. Options: --version vX.Y.Z, --dir DIR, --no-sudo.

Linux package repositories (apt / dnf)

On Debian/Ubuntu and RHEL/Fedora, add the GPG-signed Frostmoln repository once, then install and update fm with your native package manager.

Debian / Ubuntu (apt)

Uses the deb822 .sources format with a signed-by keyring (no apt-key):

bash
sudo install -d -m 0755 /etc/apt/keyrings
sudo curl -fsSL -o /etc/apt/keyrings/frostmoln.gpg https://get.frostmoln.cloud/deb/frostmoln.gpg
sudo curl -fsSL -o /etc/apt/sources.list.d/frostmoln.sources https://get.frostmoln.cloud/deb/frostmoln.sources
sudo apt-get update && sudo apt-get install fm

RHEL / Fedora (dnf)

bash
sudo curl -fsSL -o /etc/yum.repos.d/frostmoln.repo https://get.frostmoln.cloud/rpm/frostmoln.repo
sudo dnf install fm

Alpine / one-off packages

There is no apk repository yet — and to install a specific version directly, download the package from https://get.frostmoln.cloud/cli/<version>/:

bash
sudo apt-get install -y ./fm_*.deb           # Debian / Ubuntu
sudo dnf install -y ./fm_*.rpm               # RHEL / Fedora
sudo apk add --allow-untrusted fm_*.apk      # Alpine

Homebrew (macOS)

bash
brew install frostmoln/tap/fm

Homebrew ships as a cask, so it is macOS-only. Linux users use a package, the tarball, or the install script.

Scoop (Windows)

powershell
scoop bucket add frostmoln https://github.com/Frostmoln/scoop-bucket
scoop install fm

Verify

Each release ships checksums.txt and a minisign signature (checksums.txt.minisig). Verify the signature with the signing key (ID 4AD2B4503B12240F), then confirm the binary:

bash
minisign -Vm checksums.txt -x checksums.txt.minisig \
  -P RWQPJBI7ULTSSrQ4+wVG0gUucAQG2cBbrD/dseYvWoOrq1Q6V+IRcx0p
fm version

The authoritative key is the literal value above. A copy is published at get.frostmoln.cloud/cli/fm-cli-release.pub for convenience only — never trust a key fetched from the network as the verification root.

Update

Re-run the install script, or brew upgrade fm / scoop update fm, or reinstall the package. Run fm version to confirm.

Next steps