@node Download @unnumbered Download Preferable way is to download tarball with the signature from website and, for example, run tests with benchmarks: @verbatim $ [fetch|wget] http://gocheese.cypherpunks.ru/gocheese-2.2.0.tar.xz $ [fetch|wget] http://gocheese.cypherpunks.ru/gocheese-2.2.0.tar.xz.sig $ gpg --verify gocheese-2.2.0.tar.xz.sig gocheese-2.2.0.tar.xz $ xz -d < gocheese-2.2.0.tar.xz | tar xf - $ make -C gocheese-2.2.0 all test @end verbatim @multitable {XXXXX} {XXXX-XX-XX} {XXXX KiB} {link sign} {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx} @headitem Version @tab Date @tab Size @tab Tarball @tab SHA256 checksum @end multitable You @strong{have to} verify downloaded tarballs integrity and authenticity to be sure that you retrieved trusted and untampered software. @url{https://www.gnupg.org/, GNU Privacy Guard} is used for that purpose. For the very first time it is necessary to get signing public key and import it. It is provided below, but you should check alternative resources. @verbatim pub rsa2048/0xCD5CD01F55343D88 2019-12-08 [SC] 9B27640BA78437EC6D4ACA6CCD5CD01F55343D88 uid GoCheese releases @end verbatim @itemize @item @verbatim $ gpg --auto-key-locate dane --locate-keys gocheese at cypherpunks dot ru $ gpg --auto-key-locate wkd --locate-keys gocheese at cypherpunks dot ru @end verbatim @item @verbatiminclude PUBKEY.asc @end itemize You can obtain development source code with @command{git clone git://git.cypherpunks.ru/gocheese.git}.