Free conceptManaged installations
Staged tool installation
Download into a temporary area, verify the artifact, and expose it only after the complete result is ready.
Pin and verify the input
A managed tool definition pins the release identity, host asset, and expected checksum. The checksum verifies that the downloaded bytes are the artifact the definition selected.
Prepare away from the destination
Download and unpack into a temporary directory under the installation prefix. Cleanup traps can remove incomplete work, while the stable command path remains untouched during preparation.
Make publication the last step
After validation succeeds, a final placement step exposes the executable or release. Keeping staging on the same filesystem makes a rename available as the commit point for file placement.
1staging=$(mktemp -d "$prefix/.staging.XXXXXX")2curl --output "$staging/$archive" "$url"3sha256sum -c checksums.txt4mv "$staging/$binary" "$prefix/bin/$name"