osss RPM repository rpm.osss.net

Install the osss command-line tools on Fedora and RHEL-family distributions straight from dnf. The repository is osss-signed and serves prebuilt x86_64 packages; each is a single static binary with no dependencies, so it installs cleanly anywhere.

Requires EL9+ or Fedora

The repository is signed with an Ed25519 key, which older rpm releases cannot verify. The boundary below was measured by installing from this repository on each distribution, not inferred from version numbers:

Fedora rpm 6.x
Supported.
RHEL / Rocky / Alma 9 rpm 4.16.1.3
Supported. EdDSA verification is backported, so the 4.16 version number understates what it can do.
RHEL / Rocky / Alma 8 and older rpm 4.14
Not supported — reports Header DSA signature: BAD (invalid OpenPGP signature).

On EL8 or older, use the static binary tarball from the tool's release page — it has no dependencies and runs on any Linux.

Set it up

1. Trust the signing key

sudo rpm --import https://rpm.osss.net/osss-rpm.asc

2. Add the repository

sudo tee /etc/yum.repos.d/osss.repo >/dev/null <<'REPO'
[osss]
name=osss tools
baseurl=https://rpm.osss.net/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://rpm.osss.net/osss-rpm.asc
REPO

gpgcheck verifies each package; repo_gpgcheck verifies the repository metadata as well. Both are on deliberately — leave them on.

3. Install

sudo dnf install postgres-sql-formatter postgres-schema-management \
                 postgres-schema-to-directory postgres-test worktree

Install only what you want — each package stands alone. Packages use the full project name (so they don't collide with unrelated packages); the command you run is the short name.

Packages

postgres-sql-formatter → pgsf
Format PostgreSQL SQL to match style-guide conventions.
postgres-schema-management → pgsm
Diff, plan, apply, and verify a PostgreSQL schema against a declarative repository.
postgres-schema-to-directory → pgstd
Extract a PostgreSQL schema into structured SQL files.
postgres-test → pgt
A Postgres testing framework: SQL-native assertions run by a Rust harness.
worktree → wt
Manage the per-branch git worktree checkouts of a multi-repo workspace.
dmarc-tlsrpt-exporter
Poll a mailbox for DMARC aggregate and SMTP TLS-RPT reports and export them as Prometheus metrics.

Left is the package you install (hyphenated, as both RPM and Debian spell it; the project, FreeBSD port and Homebrew formula use underscores); right is the command it provides. A tool appears here once it has cut a release carrying an .rpm — browse /Packages/ for what is actually published right now.

Upgrades

sudo dnf upgrade picks up new releases as they ship — a new version lands in the repository within moments of its release. Hold a package at its current version with sudo dnf versionlock add <name>.

Verifying

Packages and repository metadata are both signed by the dedicated OSSS RPM key (rpm@osss.net), fingerprint:

6417 2B3E 9D59 AA7F D65B  BC36 1C07 B661 8671 E5D7

The public key is at rpm.osss.net/osss-rpm.asc. Check what your system trusts with rpm -qa gpg-pubkey --qf '%{SUMMARY}\n'. You can browse the repository tree under /Packages/ and /repodata/.