-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

We have upgraded/changed our webhosting server, so expect errors and outages
for a day starding July 14th, 2024, and should be resolved by end of day July
15, 2024. Everything should be settled by then. This is planned maintence
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQ8xI1Id47chv/iKHtcpwK2aiJysQUCZpRIuwAKCRBcpwK2aiJy
seIwAP9VqulA7aIKwULT8VjhFv57JUWwJ5kj2BApAAgGE6G6/AD9GPNA6pWSET6U
01YKESeC0m87765nT5ePby2eABJKqAY=
=PU8n
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Ninja OS will not feature new releases, but we will continue to update the
repository. So, for this, we have created a new "Continuation GPG Key", for
both signed messages on this page, and for use with the Ninja OS repo. This is
done so that the old key can be retired and removed from active keyrings.

There is not going to be a new version of Ninja OS. The new key will NOT be used
to sign new versions. Only verified comms, and package signing. Existing
versions of Ninja OS will be signed with one of the old keys, and should NOT be
trusted otherwise.


May 2023 Contiutation key
Fingerprint:	3CC4 8D48 778E DC86 FFE2 287B 5CA7 02B6 6A22 72B1
Download:	https://cdn.downloads.ninjaos.org/may_2023_continuation_key.gpg
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQQ8xI1Id47chv/iKHtcpwK2aiJysQUCZGLDvgAKCRBcpwK2aiJy
sauNAP45ECijB3s1sAHzkPs899TqXp51aMPayA7KRhvRpHY0fgD/Sfet0gNjiH+a
uJdrC0BIW49+BGaZ1tBjuASGT7shlQA=
=seRI
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Ninja OS is officially being discontinued. This is a personal decision, and
while I won't say marks the end of an era, has to due with eras being ended.
Development releated to releasing new versions will cease, and the crypto-currency
donation links have been removed.(we recieved precisely zero donations over the 
years).

HOWEVER, the Arch Linux repos for [ninjaos] and [ninjaos-kernel] will continue
to be maintained.

This website, archives, repos, will continue to be maintained, and continue to
be made available under the same GPLv3 license that has existed since the
beginning. There simply put: won't be new versions.

Everything is being kept in place, and if anyone wants to fork and keep going,
by all means are welcome.

There are a few reasons for this:

First, the toolchain has bitrot to the point of unusability some time ago. Larch
lacking systemd hooks is an annoyance, but being based on python2 and qt4, two
pieces of unsupported software, as well as no uEFI support. It was also a mess.
I would need to re-write from scratch mostly.

Second, no uEFI support. Computers are starting to ship without BIOS or CSM for
booting BIOS expecting OSes. Most computers make it harder and harder to boot
a USB stick. Making a dual BIOS/uEFI USB stick with a boot menu will take work.

Third, I haven't used Ninja OS for anything other than testing the software for
many years. Its clear that Live OSes are not the be all for privacy anymore as
some amazing work in virtualization and containers has been done in the meantime
Much of the role of the LiveOS is now done by VMs.

Last, The amount of contributions to Ninja OS has been low. We've recieved
exactly ONE bug report. Other contributions have been limited to artistic and
a few procedural checks on software. In addition to the tooling re-write, we
have precisely no support, and no interest in helping develop it. I have other
things in my life besides throwing more time and energy at this, and I feel its
exceedingly diminished returns.

Ninja OS [ 2010 -> 2022 ]
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTGWx84OkbDij08/fnGHsaBoUivUQUCYx9mHQAKCRDGHsaBoUiv
UWR0AQDA1x4tdYOO2dHeZ0bYte12J0yBXw8PIYgUG/zUQVCtgQD8CQCoECxb5K+9
lXPzv+wBNxU1t2dgBp47Bm5/w6phugI=
=BU7u
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Update: https has been successfully restored. No further outages are planned
in the foreseable future. Everything should now function normally
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTGWx84OkbDij08/fnGHsaBoUivUQUCYjTwSQAKCRDGHsaBoUiv
UXqFAP4wjFvR4/D5EUtBck4B1Bkf0PyWSBcWdyV3PqLFwXOJUQD/aMMbDqF8Ftcs
SEB1PsW6Y+75DM3zSm/CTlyzn+KUxQk=
=ZrL1
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

We are upgrading our infrastructure, and the front facing webserver has a
a new IP address. The DNS must propigate for before we can renew TLS certs.
ninjaos.org will be http-only until then, should be about a day. HTTPS will be
restored as soon as possible.
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTGWx84OkbDij08/fnGHsaBoUivUQUCYjPXBQAKCRDGHsaBoUiv
UX1AAQCr5UyjiCpZsd1vmil3jZqNnWCm0QFzxkNnS1qV/VwIJwD8CM/qfQXjwUXE
2dLsdye+5mP89DKlV8HLggpCSwG2mw4=
=yhEV
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

In this latest version bump of the [ninjaos] repo, we've forked the
metadata-cleaner package off into metadata-cleaner1 that follows the 1.x branch
that depends on gtk3. The mainline package following 2.x that depends on gtk4
will continue to be available as well.

This is pending this issue:
https://gitlab.com/rmnvgr/metadata-cleaner/-/issues/18

where upstream gtk4 doesn't handle drag and drop correctly anymore. While this
is planning on being fixed, in the meantime, we are just going to support
version 1.x until this feature lands

Also of note, log4j is in fact in the repo, and this latest update fixes
the vulerable version.
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTGWx84OkbDij08/fnGHsaBoUivUQUCYbP9dQAKCRDGHsaBoUiv
UTxhAP4xI1oabXDowMeZFGzxRVocgBRle4ZMhrJ6cyhmOxnfxAD/bBNYn9Ru2oMq
XISN/cS2xMcvJrMAg/BkxBUYGiKtQgM=
=eb1c
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

We are adding a new GPG key as part of a security strategy. We now have a "head
key" that functions as a CA. The sole purpose of this key is to sign other keys.
All Ninja OS keys will be signed with this key, and nothing else will be. Thus
it will allow creation of new ninjaos keys that can be verified only by looking
for this signature on the key. This key is kept offline, in an arrangement that
it will not be loaded in day to day operations.

Bullet points

* This key is used to prove other keys belong to Ninja OS
* All Ninja OS keys will be signed by this key, do not trust anything not
* It will do nothing else
* It is kept offline

The GPG page is updated with both headkey, and signed versions of existing keys
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTGWx84OkbDij08/fnGHsaBoUivUQUCYSU5zQAKCRDGHsaBoUiv
UY2XAQC+cl27RvIErrQER0dhSjGYXgE2sO6ROguVbpuSXs3XtQEAs/igOz9E/upI
NeaeJ2rSfDFnVcjXKv0C388ZHQT7nQo=
=zG7W
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

As of today, we are chosing to support the Raedeon Open Compute Module. I am
uncertain why this is unsupported upstream in ArchLinux, but I suspect quality
might have something to do with it. However, after some basic testing, it
appears to compile and run. What this means is there is an entire Free Open
Source GPGPU solution that includes an OpenCL solution, and allows you to use
AMDGPU compatible graphics cards for general compute purposes.

Also supported are the llvm-amdgpu and rocm-cmake for compiling things against
ROCm, as well as the OpenCL runtime.
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTGWx84OkbDij08/fnGHsaBoUivUQUCYQmE7AAKCRDGHsaBoUiv
UdmMAP43/TGUh49RSf7XrGEmjs9XmObjHxHak2aYP513DJE2DAD/TlFhfXqSwBXf
818sAeJk1cP67D56S8KgiBufztMFfgw=
=svB7
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

After a long time, darkice frontend "darksnow" is being replaced with the
package "butt" in the [ninjaos] Arch Linux repository. "darksnow" is being
removed entirely, and if you have this package installed it is recommended to

pacman -Rs darksnow

pacman -Syu butt

Butt stands for "Broadcast Using This Tool", has support for icecast and
shoutcast, and pulse audio. The GUI itself is superior and still maintained, and
is all around supperior to Darksnow. The "darkice" package will linger in the
[ninjaos] repository for now.
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTGWx84OkbDij08/fnGHsaBoUivUQUCYP7oBwAKCRDGHsaBoUiv
UWaVAP9wGRYwx6G8p4DejruS1xt5kC4t/Y4DYrPhK54y8A0XjwEAl/jyBIetoF8r
+qt05KQL/TuX5rrZMyMjF7FOFIQb5gE=
=emBz
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The chirp-daily package is getting yeeted off [ninjaos] repository. Unforunately
there is nothing to replace it with, and this is unfortunate, as it is a rather
useful piece of software for sync'ing baofeng and other small portable ham
radios to the computer, editing settings and storing settings/frequencies on the
computer for later use.

CHIRP is written in python2, which as you know was finally EOL'd back in January
2020. The announcement to EOL it was made in 2010, and its original EOL date of
January 2015 was pushed back 5 years to give programmers time to port. Python3
was released originally in 2006. It is now 2021, 6 years after the original EOL
date for python, and a full 11 years after the announcement was made.

As such, upstream Arch has been removing unused python2 dependencies and slowly
depreciating removing python2 support. We have been actively seeking
replacements for all python2 software in use with the [ninjaos] repo and by
Ninja OS itself. Our policy being: If its not essential, it gets removed.

The final straw for CHIRP was that its two py2 dependencies python2-lxml, and
python2-pyserial have been dropped by upstream Arch Linux. to maintain them,
we'd have to pull an increasing amount of python2 packages previously been
purged, and pull in more packages we'd need to support.

When CHIRP gets ported to python3 it will be added back. We apologize for the
inconvience.
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTGWx84OkbDij08/fnGHsaBoUivUQUCYJ6G0wAKCRDGHsaBoUiv
UV65AP9akp4C4F6F6EpAn7koKxL8qOHb7EKVfepiQSpUDGbCNwEAq3nDu6IQeZN7
wC9NLtdH+rU6sOf2hB2wgTAe8CZPrAE=
=I+I5
-----END PGP SIGNATURE-----