Docs

Verify a download

Each release directory carries per-file .sha256 lines, and the root carries the combined SHA256SUMS. The combined file is what most people want:

curl -O l.meldris.xyz/releases/SHA256SUMS
curl -O l.meldris.xyz/releases/quill-1.4.2.tar.gz
sha256sum -c SHA256SUMS 2>/dev/null | grep OK
# quill-1.4.2.tar.gz: OK

The 2>/dev/null is only to hide the lines for files you did not download. A mismatch is not a soft warning — treat the file as hostile and tell us which mirror served it.

Build from source

quill ships as a plain Python script; a compact C port is included for machines without Python (ASCII subset, same wrap rules). The test battery is the authority either way:

tar xzf quill-1.4.2.tar.gz
cd quill-1.4.2
make check          # 28 tests, ~2 s
sudo make install   # /usr/local/bin/quill + man page

foldctl is Python-only by design. Neither tool writes outside its output stream — there is no cache, no config file, nothing to clean up.

Reproducible tarballs

Tarballs are cut with fixed metadata so identical trees produce identical archives: zeroed mtimes, sorted entries, gzip name field stripped. The recipe is in tools/cut-release.sh inside every quill tarball, and it is boring on purpose:

LC_ALL=C tar --sort=name --mtime=0 --owner=0 --group=0 \
  --numeric-owner -cf - quill-1.4.2/ \
  | gzip -9n > quill-1.4.2.tar.gz

If your rebuild differs by even a byte, that is a bug worth an e-mail — reproducibility claims should be testable, or they are decoration.

Mirror the archive

The full tree is a few hundred kilobytes and grows by kilobytes, so mirroring is cheap and welcome. The rsync module is read-only and does not count against any quota:

rsync -rt --delete --stats \
  l.meldris.xyz::archive/ /srv/mirrors/l.meldris.xyz/

Two requests to mirror operators: keep --delete so retired files disappear the same day, and do not re-serve the tree under URLs that look like ours. Add your mirror to the public list by writing to keeper@l.meldris.xyz with your location and bandwidth ceiling.

Report a problem

Broken links, checksum mismatch, or a build failure on an unusual platform — all of it goes to keeper@l.meldris.xyz. Include the output of quill --version if the tool itself misbehaves; it prints the exact build flags, which saves a round trip.

We do not run a bug tracker on this host on principle: the archive serves files, the discussion lives where contributors already are.