Official compiled releases for Daoliyu Music Server.
This repository contains binary installers, package repository metadata and public signing keys only. The proprietary application source code is maintained in a separate private repository.
The canonical public download host is https://repo.daoliyu.cn. It is an
Alibaba Cloud ESA edge redirect and does not proxy package bodies through the
Daoliyu authentication service or origin server.
Release assets use this immutable URL format:
https://repo.daoliyu.cn/releases/<tag>/<asset-name>
For example:
https://repo.daoliyu.cn/releases/v0.3.4-beta/daoliyu-music-server-0.3.4-beta-windows-amd64-setup.exe
The edge only redirects /releases/ requests to the matching asset in this
repository's GitHub Release. A missing asset remains a 404. Repository metadata
under /apt/, /rpm/, and /keys/ is redirected to this repository's public
Git content. No private source repository token is needed by download clients.
The official website reads the public package catalog from:
https://repo.daoliyu.cn/catalog/releases.json
The catalog contains package metadata only and is maintained by the private release workflow.
Beta releases are for testing and may not yet carry production Windows Authenticode or Apple Developer ID signatures.
Always verify downloaded files against the published SHA256SUMS file before
installation.
Linux APT and RPM repository metadata is signed by the key published in
keys/daoliyu-archive-keyring.asc.
Primary key fingerprint:
B218 D900 62A6 E2B4 1389 47B0 1494 FE30 ABD9 F22F
Portable package manifests use a separate Ed25519 release key. Its public key
is published in keys/daoliyu-release-ed25519.pub.
The corresponding private keys and platform signing certificates are never
stored in this repository or attached to a release.
Release assets are immutable. A corrected build must use a new version instead of replacing files attached to an existing published tag.
Official website: https://daoliyu.cn
Canonical downloads and Linux repositories: https://repo.daoliyu.cn
Do not report keys, tokens, account data or security vulnerabilities in a
public GitHub issue. Contact support@daoliyu.cn.