CLI Installation - Chainloop Documentation

You can install the Chainloop CLI using one of the following methods:

Chainloop SaaS
On-Prem
Manual Download

The install script comes pre-configured for Chainloop Cloud.

curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s

Advanced Options

you can install a specific version with

curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --version vx.x.x

and customize the install path (defaults to /usr/local/bin)

curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --path /my-path

To install without sudo, provide a user-accessible path:

curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --path ~/.local/bin

if cosign is present in your system, in addition to the checksum check, a signature verification will be performed. This behavior can be enforced via the —force-verification flag.

curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --force-verification

To install the open-source edition instead:

curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --oss

Two things have to be true before the CLI can talk to your instance: the binary is installed, and it points at your instance’s endpoints. Installing from your own instance’s domain does both in a single command.

Download and configure the CLI

Install from your own instance’s domain and the CLI is automatically configured to talk to it — there is nothing else to set up. Copy the exact command from the Chainloop web UI — click the terminal (>_) icon in the top-right corner — or replace YOUR_INSTANCE_DOMAIN below with your own.

curl -sfL https://YOUR_INSTANCE_DOMAIN/cli/install.sh | bash -s

Terminal icon in the top-right corner of the Chainloop web UI that opens the CLI installation dialog

Advanced Options

you can install a specific version with

curl -sfL https://YOUR_INSTANCE_DOMAIN/cli/install.sh | bash -s -- --version vx.x.x

and customize the install path (defaults to /usr/local/bin)

curl -sfL https://YOUR_INSTANCE_DOMAIN/cli/install.sh | bash -s -- --path /my-path

To install without sudo, provide a user-accessible path:

curl -sfL https://YOUR_INSTANCE_DOMAIN/cli/install.sh | bash -s -- --path ~/.local/bin

if cosign is present in your system, in addition to the checksum check, a signature verification will be performed. This behavior can be enforced via the —force-verification flag.

curl -sfL https://YOUR_INSTANCE_DOMAIN/cli/install.sh | bash -s -- --force-verification

To install the open-source edition instead:

curl -sfL https://YOUR_INSTANCE_DOMAIN/cli/install.sh | bash -s -- --oss

Point the CLI at your instance — only if you installed it another way

Skip this if you used the command above. Run it when the CLI came from somewhere else — dl.chainloop.dev, a package manager, or a Manual Download — or when you want to switch an existing install to a different instance.

chainloop config save \
  --control-plane my-controlplane.acme.com:443 \
  --artifact-cas cas.acme.com:443 \
  --platform my-platform.acme.com:443

Confirm which instance the CLI is talking to with chainloop config view.

Download the CLI binary directly and verify its SHA256 against the published checksums.txt. Use this when piping a script into bash is not an option, or when binaries need to be validated out-of-band.

v1.116.1

OS	Architecture	Download	SHA256
Linux	Intel (amd64)	chainloop-linux-amd64	`584a8855f4c9414492d3412c411613159a3710e71f208614f6685a21b0f1d19d`
Linux	ARM64	chainloop-linux-arm64	`c0671f3bcac1c7bb1e02f0bad2b2e249a720fa243d894f767e9ed8a886fc9c47`
macOS	Intel (amd64)	chainloop-darwin-amd64	`9f3b65d125bb71918345c22a450ebf2d9502a25caea6112d624298deb471fe44`
macOS	Apple Silicon	chainloop-darwin-arm64	`687518cb8b4846cac4a5da9b09f56b80c66cfe9ec9f53f548b5b4ac27d007138`
Windows	Intel (amd64)	chainloop-windows-amd64.exe	`0e8cb7e5242510d4f8d1a6e8f7d1d7619a7d1ecde5aad816bf88bb144fa3fc15`
Windows	ARM64	chainloop-windows-arm64.exe	`0424672308809066169c5220e238b0a3d8828c20263c1f059c6ac4a550b3092f`