Hosting your own signed DuckDB extensions on S3-compatible storage

DuckDB version 2.0 introduces custom extension repositories that allow users to sign and host their own extensions on S3-compatible storage using RSA keys. The author provides a detailed walkthrough covering extension file formats, hashing, signing with OpenSSL, repository layout, and uploading binaries to storage providers like Cloudflare R2 or MinIO. The guide also highlights key operational differences such as the lack of automatic loading and the requirement for explicit client-side key pinning. Open article →