Release notes
View on GitHubNo notes for this release.
Since 0.1.1 (18 Jul 2026). Upgrading from an older release: doze modules upgrade kafka. Your engine pins and data stay as they are.
RegistryCheck against your doze
Check against your doze
Checking against doze
doze Kafka
OfficialSignedSingle-node Kafka-protocol broker, no JVM.
doze/kafka$ doze add kafka- Newest
- 0.1.2 · [date]
- Needs
- any doze
- Runs
- runs itself
- Platforms
- macOS arm64 · Linux arm64 · Linux x86_64
- Licence
- Apache-2.0
- Source
- on GitHub
kafka 0.1.2
Current- Released
- [date]
- Needs
- any doze
- Plugin protocol
- 1
- Engines
- Kafka protocol 1–4
- Platforms
- 3 of 3
- Advisories
- None known
0.1.2 sets no oldest doze, so it runs on every doze (0.1.0 and up).
Artifacts
One signed archive per platform. Files live on GitHub; the registry lists them and signs their checksums.| Platform | File (downloads from GitHub) | SHA-256 | Signature (ed25519) |
|---|---|---|---|
| macOS arm64 aarch64-apple-darwin | kafka-plugin-0.1.2-aarch64-apple-darwin.tar.gz | 743008ce131ad35ffd28c870856b752f648f1b88de29e0b928e3efad94ee39f7 | ZUgriVKB…jBBA== |
| Linux arm64 aarch64-unknown-linux-gnu | kafka-plugin-0.1.2-aarch64-unknown-linux-gnu.tar.gz | 6c0d3bf3d046371a452f6616f6fe7b7dbb7d0a90028ae84715f8f7db43f2f660 | C0CEkEOu…YABA== |
| Linux x86_64 x86_64-unknown-linux-gnu | kafka-plugin-0.1.2-x86_64-unknown-linux-gnu.tar.gz | af3ef68b36c546f034c0b13344bfcac5757fd6c9f4d85bce7e672bbd8f32d814 | rplSaQer…P1Ag== |
Every file is under https://github.com/doze-dev/doze-kafka/releases/download/kafka/. Intel Macs and Windows have no build; WSL2 uses the Linux x86_64 file.
Signing
The index is signed as a whole, and each archive is signed. doze checks both before anything runs, and refuses a module whose checksum or signature doesn't match.
- Key
Nu5y8mbj…Wjw=- Where the key lives
- Compiled into doze. doze never fetches or trusts a key on first use.
- Namespace
- doze
- Publisher
- doze-dev Official
- Index signature
19MD2zxM…CA==- What is signed
- Each archive: its lowercase-hex SHA-256. The index: module, namespace, releases and channels as canonical JSON.
- Not yet signed
- The
doze(oldest doze) field sits beside the signed part today. new The design moves it inside.
Verify it yourself
[planned: doze modules verify] Today doze runs these checks itself on every download. The same checks by hand, for macOS arm64. Needs OpenSSL 3: the openssl that ships with macOS has no ed25519 (brew install openssl@3).
# 1. download and hash; compare with the table above $ curl -LO https://github.com/doze-dev/doze-kafka/releases/download/kafka/kafka-plugin-0.1.2-aarch64-apple-darwin.tar.gz $ shasum -a 256 kafka-plugin-0.1.2-aarch64-apple-darwin.tar.gz 743008ce131ad35ffd28c870856b752f648f1b88de29e0b928e3efad94ee39f7 kafka-plugin-0.1.2-aarch64-apple-darwin.tar.gz # 2. the signature is over that hex string, with doze's public key $ printf %s 743008ce131ad35ffd28c870856b752f648f1b88de29e0b928e3efad94ee39f7 > digest.txt $ echo 'ZUgriVKB8GzfuMew6izeriX8RLYP7YAJbuNzJJOo4lC0ReutK6vS/thyfnfHuWznkuxFxU4UMazjYGZVMyjBBA==' | base64 -d > sig.bin $ (printf '\x30\x2a\x30\x05\x06\x03\x2b\x65\x70\x03\x21\x00'; echo 'Nu5y8mbjYv7XEtNFBXwPVl+C8SBteVApIROefBwGWjw=' | base64 -d) > doze-key.der $ openssl pkeyutl -verify -pubin -keyform DER -inkey doze-key.der -rawin -in digest.txt -sigfile sig.bin Signature Verified Successfully
What doze.lock records for 0.1.2
A project pinned to 0.1.2 carries this entry. Every platform's checksum goes in, so a teammate on Linux verifies against the same pin you made on a Mac. Pinned and cached means no network at all.
modules:
doze/kafka:
version: 0.1.2
protocol: 1
engines:
- "1"
- "2"
- "3"
- "4"
hashes:
aarch64-apple-darwin: sha256:743008ce131ad35ffd28c870856b752f648f1b88de29e0b928e3efad94ee39f7
aarch64-unknown-linux-gnu: sha256:6c0d3bf3d046371a452f6616f6fe7b7dbb7d0a90028ae84715f8f7db43f2f660
x86_64-unknown-linux-gnu: sha256:af3ef68b36c546f034c0b13344bfcac5757fd6c9f4d85bce7e672bbd8f32d814
# no doze: line; 0.1.2 sets no oldest doze