Package mirror

Install JACO from the official mirror

Every published JACO release is mirrored to pkgs.jaco.sh as signed APT, DNF, and Alpine repositories. Add the repo once and JACO upgrades with the rest of your system.

§ 01Add the repository

01 / 02
Debian / Ubuntuapt
curl -fsSL https://pkgs.jaco.sh/jaco.gpg \
  | sudo tee /etc/apt/keyrings/jaco.gpg > /dev/null
echo "deb [signed-by=/etc/apt/keyrings/jaco.gpg] https://pkgs.jaco.sh/apt stable main" \
  | sudo tee /etc/apt/sources.list.d/jaco.list
sudo apt update && sudo apt install jaco
Fedora / RHEL / CentOSdnf
sudo tee /etc/yum.repos.d/jaco.repo <<'EOF'
[jaco]
name=JACO
baseurl=https://pkgs.jaco.sh/rpm
enabled=1
gpgcheck=0
repo_gpgcheck=1
gpgkey=https://pkgs.jaco.sh/jaco.gpg
EOF
sudo dnf install jaco
Alpineapk
sudo curl -fsSL https://pkgs.jaco.sh/jaco.rsa.pub \
  -o /etc/apk/keys/jaco.rsa.pub
echo "https://pkgs.jaco.sh/alpine/v3" \
  | sudo tee -a /etc/apk/repositories
sudo apk update && sudo apk add jaco

Each snippet installs the signing key, registers the repo, and installs jaco. Browse the trees at pkgs.jaco.sh.

§ 02How it works

02 / 02

The mirror tracks GitHub Releases and rebuilds signed repository metadata as new versions land. Packages are verified against each release's SHA256SUMS before they are published, and the indices are signed with project-held keys — apt, dnf, and apk all verify those signatures, so a tampered mirror can't slip you a bad binary.

Once installed, JACO upgrades through your package manager like anything else: apt upgrade, dnf upgrade, or apk upgrade. To pin a specific version, install jaco=<version> (apt), jaco-<version> (dnf), or jaco=<version> (apk) — every release is kept forever.