Matthew John Cheetham (mjcheetham) · Oct 12, 2026 · Oct 12, 2026 · Oct 12, 2026 · Oct 12, 2026 · Oct 12, 2026
diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
@@ -160,12 +160,12 @@ extends:
                   inputs:
                     azureSubscription: $(esrpAppConnectionName)
                     addSpnToEnvironment: true
-                    scriptType: ps
+                    scriptType: bash
                     scriptLocation: inlineScript
                     inlineScript: |
-                      Write-Host "ESRP connection details:"
-                      Write-Host "ClientId: $env:servicePrincipalId"
-                      Write-Host "TenantId: $env:tenantId"
+                      echo "ESRP connection details:"
+                      echo "ClientId: $servicePrincipalId"
+                      echo "TenantId: $tenantId"
 
       - stage: build
         displayName: 'Build'
@@ -719,7 +719,8 @@ extends:
               #   5. `make pkg` -> unsigned .pkg in disk-image/.
               #   6. ESRP-sign and ESRP-notarize the .pkg in place.
               #   7. `make image` wraps disk-image/ contents in a DMG.
-              #   8. Stage the .pkg and .dmg under _final/ for upload.
+              #   8. Archive build-artifacts/ as a binary .tar.gz and
+              #      stage it with the .pkg and .dmg under _final/ for upload.
               steps:
                 - checkout: self
                 - task: Bash@3
@@ -1028,28 +1029,32 @@ extends:
                       VERSION="$(git_version)"
                       export VERSION
 
-                      # Builds git-<version>-$(cc_arch).dmg from disk-image/,
-                      # which contains the signed and notarized .pkg.
+                      # Wrap the signed and notarized .pkg from disk-image/
+                      # in git-<version>-macos-$(cc_arch).dmg.
                       make -C .github/macos-installer V=1 ARCH_UNIV=$(cc_arch) image
                 - task: Bash@3
-                  displayName: 'Stage installer artifacts for upload'
+                  displayName: 'Stage release artifacts for upload'
                   inputs:
                     targetType: inline
                     script: |
                       set -euo pipefail
 
-                      mkdir -p "$(Build.ArtifactStagingDirectory)/_final"
+                      final_dir="$(Build.ArtifactStagingDirectory)/_final"
+                      mkdir -p "$final_dir"
                       ls -la .github/macos-installer/ \
                              .github/macos-installer/disk-image/ || true
                       # The .pkg lands either directly under disk-image/
                       # or, after ESRP MacAppNotarize re-packs it, inside
                       # disk-image/<uuid>.zip.unzipped/. Find it.
                       pkg=$(find .github/macos-installer/disk-image \
-                              -name "git-*-$(cc_arch).pkg" -type f \
+                              -name "git-*-macos-$(cc_arch).pkg" -type f \
                               | head -1)
-                      mv .github/macos-installer/git-*-$(cc_arch).dmg \
+                      mv .github/macos-installer/git-*-macos-$(cc_arch).dmg \
                          "$pkg" \
-                         "$(Build.ArtifactStagingDirectory)/_final/"
+                         "$final_dir/"
+                      tar -czf \
+                        "$final_dir/git-$(git_version)-macos-$(cc_arch).tar.gz" \
+                        -C .github/macos-installer/build-artifacts usr
                 # Validate the freshly built pkg in-place: install it,
                 # assert `git --version`, and confirm the binary contains
                 # only the specific architecture. Folded into the build job
@@ -1061,9 +1066,9 @@ extends:
                       brew uninstall git || true
                     fi
                     pkg=$(find "$(Build.ArtifactStagingDirectory)/_final" \
-                      -name "git-*-$(cc_arch).pkg" -type f | head -1)
+                      -name "git-*-macos-$(cc_arch).pkg" -type f | head -1)
                     if [ -z "$pkg" ]; then
-                      echo "No git-*-$(cc_arch).pkg found in _final" >&2
+                      echo "No git-*-macos-$(cc_arch).pkg found in _final" >&2
                       exit 1
                     fi
                     echo "Installing $pkg"
@@ -1151,7 +1156,7 @@ extends:
                       echo "$BUILD_VERSION" >version
                       make GIT-VERSION-FILE
 
-                      PKGNAME="microsoft-git_${VERSION}_$(deb_arch)"
+                      PKGNAME="microsoft-git_${VERSION}_linux_$(deb_arch)"
                       PKGDIR="$(Build.ArtifactStagingDirectory)/pkgroot"
                       rm -rf "$PKGDIR"
                       mkdir -p "$PKGDIR/DEBIAN"
@@ -1208,14 +1213,18 @@ extends:
                           }
                         ]
                 - task: Bash@3
-                  displayName: 'Stage Debian package for upload'
+                  displayName: 'Stage release artifacts for upload'
                   inputs:
                     targetType: inline
                     script: |
                       set -euo pipefail
-                      mkdir -p "$(Build.ArtifactStagingDirectory)/_final"
-                      mv "$(Build.ArtifactStagingDirectory)/app/microsoft-git_$(git_version)_$(deb_arch).deb" \
-                        "$(Build.ArtifactStagingDirectory)/_final/"
+
+                      staging_dir="$(Build.ArtifactStagingDirectory)"
+                      mkdir -p "$staging_dir/_final"
+                      pkg_name="microsoft-git_$(git_version)_linux_$(deb_arch)"
+                      mv "$staging_dir/app/$pkg_name.deb" "$staging_dir/_final/"
+                      tar -czf "$staging_dir/_final/$pkg_name.tar.gz" \
+                      -C "$staging_dir/pkgroot" usr
                 # Validate the freshly built .deb in-place: install it
                 # and assert `git --version`. Folded into the build job
                 # so it runs on the same agent without the 1ES job-

diff --git a/.github/macos-installer/Makefile b/.github/macos-installer/Makefile
@@ -121,6 +121,8 @@ disk-image/VERSION-$(VERSION)-$(ARCH_UNIV):
 	mkdir disk-image
 	touch "$@"
 
+pkg_file := disk-image/git-$(ORIGINAL_VERSION)-macos-$(ARCH_UNIV).pkg
+
 pkg_cmd := pkgbuild --identifier com.git.pkg --version $(VERSION) \
 	--root $(ARTIFACTDIR)$(PREFIX) --scripts assets/scripts \
 	--install-location $(PREFIX)
@@ -129,12 +131,12 @@ ifdef APPLE_INSTALLER_IDENTITY
 	pkg_cmd += --sign "$(APPLE_INSTALLER_IDENTITY)"
 endif
 
-pkg_cmd += disk-image/git-$(ORIGINAL_VERSION)-$(ARCH_UNIV).pkg
+pkg_cmd += $(pkg_file)
 
-disk-image/git-$(ORIGINAL_VERSION)-$(ARCH_UNIV).pkg: disk-image/VERSION-$(VERSION)-$(ARCH_UNIV) symlinks
+$(pkg_file): disk-image/VERSION-$(VERSION)-$(ARCH_UNIV) symlinks
 	$(pkg_cmd)
 
-git-%-$(ARCH_UNIV).dmg:
+git-%-macos-$(ARCH_UNIV).dmg:
 	hdiutil create git-$(ORIGINAL_VERSION)-$(ARCH_UNIV).uncompressed.dmg -fs HFS+ -srcfolder disk-image -volname "Git $(ORIGINAL_VERSION) $(ARCH_UNIV)" -ov 2>&1 | tee err || { \
 		grep "Resource busy" err && \
 		sleep 5 && \
@@ -144,9 +146,9 @@ git-%-$(ARCH_UNIV).dmg:
 
 payload: $(BUILD_DIR)/git-$(VERSION)/osx-installed $(BUILD_DIR)/git-$(VERSION)/osx-built-assert-$(ARCH_UNIV)
 
-pkg: disk-image/git-$(ORIGINAL_VERSION)-$(ARCH_UNIV).pkg
+pkg: $(pkg_file)
 
-image: git-$(ORIGINAL_VERSION)-$(ARCH_UNIV).dmg
+image: git-$(ORIGINAL_VERSION)-macos-$(ARCH_UNIV).dmg
 
 ifdef APPLE_APP_IDENTITY
 codesign:
@@ -159,6 +161,6 @@ endif
 ifdef APPLE_KEYCHAIN_PROFILE
 notarize:
 	@$(CURDIR)/../scripts/notarize.sh \
-		--package="disk-image/git-$(ORIGINAL_VERSION)-$(ARCH_UNIV).pkg" \
+		--package="$(pkg_file)" \
 		--keychain-profile="$(APPLE_KEYCHAIN_PROFILE)"
 endif
diff --git a/README.md b/README.md
@@ -48,7 +48,13 @@ Downloading and Installing
 If you're working in a monorepo and want to take advantage of the performance boosts in
 `microsoft/git`, then you can download the latest version installer for your OS from the
 [Releases page](https://github.com/microsoft/git/releases). Alternatively, you can opt to install
-via the command line, using the below instructions for supported OSes:
+via the command line, using the below instructions for supported OSes.
+
+Binary `.tar.gz` archives are also available for Linux (x64 and ARM64) and
+macOS (ARM64). They contain the installers' `usr/local` tree and can be
+extracted at the filesystem root. Linux archives require the same runtime
+dependencies as the Debian package; they do not make older distributions
+compatible.
 
 ## Windows