Check against your doze

PostgreSQL

OfficialSigned

Real local Postgres, declared not scripted.

doze/postgres

$ doze add postgres

Newest: 0.2.4 · 2 Nov 2026
Needs: any doze
Runs: Postgres 14 – 18
Platforms: macOS arm64 · Linux arm64 · Linux x86_64
Licence: Apache-2.0
Source: doze-modules

postgres 0.2.4

Current

Release

Released: 2 Nov 2026
Needs: any doze
Plugin protocol: 1
Engines: Postgres 14–18
Platforms: 3 of 3
Advisories: None known

0.2.4 sets no oldest doze, so it runs on every doze (0.1.0 and up).

Release notes

View on GitHub

A console for Postgres: who is connected, what they are running, and a way to stop it.

An Activity tab: the counters, the sessions, the selected session's query, and Cancel or Terminate.
A databases table on the overview. System databases are left out.

Since 0.2.3 (3 Jul 2026). Upgrading from an older release: doze modules upgrade postgres. Your engine pins and data stay as they are.

Artifacts

One signed archive per platform. Files live on GitHub; the registry lists them and signs their checksums.

Platform	File (downloads from GitHub)	SHA-256	Signature (ed25519)
macOS arm64 aarch64-apple-darwin	postgres-plugin-0.2.4-aarch64-apple-darwin.tar.gz	`a07134d07cf988862f5b2d1a288cc43a40ace5b96e88e190b5d66ca8b207b89a`	`MiZYLas0…DyBQ==`
Linux arm64 aarch64-unknown-linux-gnu	postgres-plugin-0.2.4-aarch64-unknown-linux-gnu.tar.gz	`f29c48e5dab175d6f1b2991f274e2e5aedb55a9993eff90128feb423380fd2a2`	`IXVe5ReA…8vDw==`
Linux x86_64 x86_64-unknown-linux-gnu	postgres-plugin-0.2.4-x86_64-unknown-linux-gnu.tar.gz	`7c920599a5a52f4ed4306963797e88de7ed6beb0be130b8b1039f7c7d0354f68`	`M9zDXx5v…byDw==`

Every file is under https://github.com/doze-dev/doze-modules/releases/download/postgres/. Intel Macs and Windows have no build; WSL2 uses the Linux x86_64 file.

Signing

The index is signed as a whole, and each archive is signed. doze checks both before anything runs, and refuses a module whose checksum or signature doesn't match.

Key: Nu5y8mbj…Wjw=
Where the key lives: Compiled into doze. doze never fetches or trusts a key on first use.
Namespace: doze
Publisher: doze-dev Official
Index signature: 8aqfwb3Y…Cw==
What is signed: Each archive: its lowercase-hex SHA-256. The index: module, namespace, releases and channels as canonical JSON.
Not yet signed: The doze (oldest doze) field sits beside the signed part today. new The design moves it inside.

How signing works

Verify it yourself

[planned: doze modules verify] Today doze runs these checks itself on every download. The same checks by hand, for macOS arm64. Needs OpenSSL 3: the openssl that ships with macOS has no ed25519 (brew install openssl@3).

Checksum, then signature

# 1. download and hash; compare with the table above
$ curl -LO https://github.com/doze-dev/doze-modules/releases/download/postgres/postgres-plugin-0.2.4-aarch64-apple-darwin.tar.gz
$ shasum -a 256 postgres-plugin-0.2.4-aarch64-apple-darwin.tar.gz
a07134d07cf988862f5b2d1a288cc43a40ace5b96e88e190b5d66ca8b207b89a  postgres-plugin-0.2.4-aarch64-apple-darwin.tar.gz

# 2. the signature is over that hex string, with doze's public key
$ printf %s a07134d07cf988862f5b2d1a288cc43a40ace5b96e88e190b5d66ca8b207b89a > digest.txt
$ echo 'MiZYLas0hSExnTF4jGo17Do0qjJ+O4XbkzBxqs2oRSJn5FuVo6rl6jC069xgafSKSP/AI4mUAJitsNcsdbDyBQ==' | base64 -d > sig.bin
$ (printf '\x30\x2a\x30\x05\x06\x03\x2b\x65\x70\x03\x21\x00'; echo 'Nu5y8mbjYv7XEtNFBXwPVl+C8SBteVApIROefBwGWjw=' | base64 -d) > doze-key.der
$ openssl pkeyutl -verify -pubin -keyform DER -inkey doze-key.der -rawin -in digest.txt -sigfile sig.bin
Signature Verified Successfully

What doze.lock records for 0.2.4

A project pinned to 0.2.4 carries this entry. Every platform's checksum goes in, so a teammate on Linux verifies against the same pin you made on a Mac. Pinned and cached means no network at all.

The engine itself is pinned separately, under engines:. Engine versions

doze.lock

modules:
    doze/postgres:
        version: 0.2.4
        protocol: 1
        engines:
            - "14"
            - "15"
            - "16"
            - "17"
            - "18"
        hashes:
            aarch64-apple-darwin: sha256:a07134d07cf988862f5b2d1a288cc43a40ace5b96e88e190b5d66ca8b207b89a
            aarch64-unknown-linux-gnu: sha256:f29c48e5dab175d6f1b2991f274e2e5aedb55a9993eff90128feb423380fd2a2
            x86_64-unknown-linux-gnu: sha256:7c920599a5a52f4ed4306963797e88de7ed6beb0be130b8b1039f7c7d0354f68
        # no doze: line; 0.2.4 sets no oldest doze