Linux desktop docs only advertise a mutable latest/ .deb; checksum-pinned packagers break on overwrite
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 2/5
- 预计耗时
- 1-3 小时
- 新手友好度
- 68/100
- Issue 类型
- 文档
- 描述清晰度
- 描述清楚
- 活跃度
- 活跃
- 技术栈
- debian, linux
- 领域
- documentation, release
调研方向
从 issue 中链接的 Desktop app (Linux) 页面开始，将其可变的 latest/ 链接与提供的版本化 pool URL 和 APT Packages 索引进行比较。在便捷链接旁记录稳定的版本化路径和校验和来源，同时保留所述的文件名约定。完成的标准是，下游打包者无需依赖被覆盖的 latest/ blob，即可找到版本和 SHA256 信息。
由索引模型根据 Issue 内容生成。
描述
What is the type of issue?
- Documentation is missing
- Documentation is confusing
What is the issue?
The Linux desktop install docs point packagers and users at a mutable blob:
https://persistent.oaistatic.com/codex-app-prod/linux/deb/latest/chatgpt_amd64.debhttps://persistent.oaistatic.com/codex-app-prod/linux/deb/latest/chatgpt_arm64.deb
That path is overwritten in place. On 2026-08-13 20:11 UTC, latest/chatgpt_amd64.deb changed from 26.803.81509 (sha256 a9bf91a3…) to 26.810.41047 (sha256 78715fa3…, 391786694 bytes). Any PKGBUILD / Nix FOD / Guix origin that pins sha256 against latest/ fails with FAILED on the next makepkg.
The durable contract already exists and works. It is just not documented on the Linux install page:
| What | URL |
|---|---|
APT Packages (includes Version + SHA256) |
https://persistent.oaistatic.com/codex-app-prod/linux/deb/dists/stable/main/binary-amd64/Packages |
Versioned pool .deb |
https://persistent.oaistatic.com/codex-app-prod/linux/deb/pool/main/c/chatgpt/chatgpt_26.810.41047_amd64.deb |
Verified today against that Packages file:
Package: chatgpt
Version: 26.810.41047
Filename: pool/main/c/chatgpt/chatgpt_26.810.41047_amd64.deb
Size: 391786694
SHA256: 78715fa3cd136ff67070daa76819adaecc5b42e99851559659645dce1fbf2af3
This is not a request for an official Arch/Nix package. Downstream packagers can pin the official signed .deb if the versioned pool path and per-arch SHA256 stay published.
Suggested docs/packaging contract (small, already almost there):
- Document the versioned pool URL and the
Packagesindex on Desktop app (Linux), next to the conveniencelatest/links. - Keep
pool/main/c/chatgpt/chatgpt_${version}_${arch}.debstable across releases (a rename breaks every pin at once). - Optional but useful: publish a
SHA256SUMS(or a small versions JSON) next tolatest/, so packagers do not have to scrapePackages.
Where did you find it?
- Docs: https://learn.chatgpt.com/docs/codex/linux/linux-app
- Same
latest/URLs are what AURopenai-codex-desktopcurrently vendors: https://aur.archlinux.org/packages/openai-codex-desktop - Checksum failure already reported there on 2026-08-13 (comment by hbarcelos) after
latest/was overwritten - Related ask on the closed Linux-app request, not filed as its own issue: https://github.com/openai/codex/issues/11023#issuecomment-5284456387
Downstream workaround (AUR)
Pin the versioned pool URL instead of latest/. Tested on Arch x86_64: openai-codex-desktop 26.810.41047-1 builds and the bundled binary reports 26.810.41047.
-pkgver=26.803.81509
-pkgrel=8
+pkgver=26.810.41047
+pkgrel=1
source_x86_64=(
- "${_deb_x86_64}::https://persistent.oaistatic.com/codex-app-prod/linux/deb/latest/chatgpt_amd64.deb"
+ "${_deb_x86_64}::https://persistent.oaistatic.com/codex-app-prod/linux/deb/pool/main/c/chatgpt/chatgpt_${pkgver}_amd64.deb"
)
source_aarch64=(
- "${_deb_aarch64}::https://persistent.oaistatic.com/codex-app-prod/linux/deb/latest/chatgpt_arm64.deb"
+ "${_deb_aarch64}::https://persistent.oaistatic.com/codex-app-prod/linux/deb/pool/main/c/chatgpt/chatgpt_${pkgver}_arm64.deb"
)
-sha256sums_x86_64=('a9bf91a368f9f7c4eea38082a9fb8fb46b8d005b719a6d7715d2e5a1982c38eb')
-sha256sums_aarch64=('f38fcc194eca9ab0327dc10c92340681eae77c5d75164df700384ce2adaccbc1')
+sha256sums_x86_64=('78715fa3cd136ff67070daa76819adaecc5b42e99851559659645dce1fbf2af3')
+sha256sums_aarch64=('996f793ca0397676fcb9cd002114c97755cc3741907c400f7f5ddcf6c70c0a4e')
SHA256 values taken from the official Packages index (amd64 + arm64), not from hashing latest/.
- 主要语言
- Rust
- 星标
- 130k
- 派生
- 20.5k
- 平均合并
- 1 分钟
- 30 天内合并 PR
- 996
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
openai/codex 的其他 Issue
-
bug CLI config
难度 2/5 1-3 小时 新手友好度 75/100
维护者通常 1 天内回复
-
Clarify session recovery differences between daemon restart and stop/start可能已有人在做 @akhil9tiet 于 1 天前认领。 未关闭app-server CLI documentation
难度 2/5 1-3 小时 新手友好度 74/100
维护者通常 1 天内回复
-
CLI enhancement TUI
难度 2/5 1-3 小时 新手友好度 76/100
维护者通常 1 天内回复
-
CLI documentation skills
难度 2/5 1-3 小时 新手友好度 76/100
维护者通常 1 天内回复
-
[BUG] Linux codex stucks when ~/.codex/.env is a directory.可能已有人在做 @akhil9tiet 于 1 天前认领。 未关闭bug CLI config performance
难度 2/5 1-3 小时 新手友好度 67/100
维护者通常 1 天内回复
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 70/100
FavioVazquez/mollify#62 ·
-
难度 2/5 1-3 小时 新手友好度 61/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 62/100
fendouai/awesome-deepseek-harness#125 ·
维护者通常 4 天内回复
-
难度 2/5 1-3 小时 新手友好度 84/100
rust-embedded/heapless#694 ·
-
难度 1/5 1 小时以内 新手友好度 75/100
维护者通常 1 天内回复