Get PubSalvage

Version 1.0.0 is an early-access release candidate. This page says what exists today, what doesn't yet, and how to check a download before you run it.

• Availability
• Linux requirements
• Verify your download
• Check it on your machine

Availability

There is nothing to download from this site yet. The installers are larger than this site can host, so the download links will point to a separate download host, which this page will name together with the checksums, once there is one. Contact details are coming soon; until then there is no way to request early access.

Package	What it is	State
Windows installer (x64)	The command-line program, the desktop app and the layout engine, with fonts and notices. Supports a silent install for IT teams.	Development builds only so far; not code-signed yet.
Linux AppImage (x86_64)	Desktop app and command-line program in one file.	Development builds only so far.
Linux archive (x86_64, .tar.gz)	The command-line program, libraries, fonts and notices, runnable from any folder.	Development builds only so far.
macOS	Not built. Planned for version 1.1 with its own sandbox.	Planned.

Development builds carry -DEV- and a commit name in the file name and a DEVELOPMENT-BUILD.txt file. They have no production licence key built in, so they stay on the Free edition. A release build has neither marking.

Linux requirements

• A 64-bit Intel or AMD system (x86_64) with glibc 2.38 or newer: Ubuntu 24.04 or newer, Debian 13, or Fedora 39 or newer. Older systems such as Ubuntu 22.04, Debian 12 and RHEL or AlmaLinux 9 can't start it yet.
• The AppImage needs FUSE 2: install libfuse2t64 on Ubuntu 24.04 (libfuse2 on distributions that still use that name). Without FUSE, run the AppImage with --appimage-extract-and-run, or use the .tar.gz archive, which needs no FUSE.
• The desktop app needs a graphical session. The command-line program does not.

How to verify your download

Every package comes with a .sha256 file that holds its SHA-256 checksum. The checksum shows that your copy is exactly the file that was published and wasn't damaged or altered on the way. It doesn't show who made it: for that you need a signature, and these don't exist yet (see below).

Windows (PowerShell)

Get-FileHash .\PubSalvage-Setup-1.0.0.exe -Algorithm SHA256

Compare the printed hash, letter for letter, with the one in the .sha256 file and the one published on this page.

Linux

sha256sum -c PubSalvage-1.0.0-x86_64.AppImage.sha256

It prints OK for a file that matches. Put the package and its .sha256 file in the same folder first.

Signatures

• Windows: the installer isn't code-signed yet, so Windows SmartScreen shows an "unknown publisher" warning. That is expected for now. Check the checksum before you choose to run it anyway.
• Linux: detached signatures will be added if a signing key is published here. Until then, the checksum is the check.
• When signing exists, this page will say so and show how to check it.

Get the checksum from this page (over HTTPS), not from the same place as the package: a checksum from the same place only protects against a damaged download.

Check it on your machine

• pubsalvage --selftest-sandbox starts a deliberately hostile engine on your machine and reports whether each attempt to write files, reach the network, start programs or use too much memory was stopped. Run it first, especially on Windows, where we have not re-run it since the 1.0 changes.
• pubsalvage status shows which edition is in use. A new install is Free.
• pubsalvage licences lists every third-party component and its licence.
• Block the program in your firewall, or unplug the network, and run it on a few files. It works the same.

See the security overview for how each of these promises is enforced, and the release notes for what is in this version.