1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Downloads — MeshBay</title>
<link rel="icon" href="/favicon.ico" sizes="16x16 32x32 48x48">
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
<link rel="stylesheet" href="/assets/site.css">
</head>
<body>
<nav class="site-nav">
<a class="site-nav-brand" href="/">MeshBay</a>
<div class="site-nav-links">
<a href="/about.html">About</a>
<a href="/downloads.html">Downloads</a>
<a href="/app">Open App</a>
</div>
</nav>
<div class="page">
<h1>Downloads</h1>
<p><strong>No packages are published yet.</strong> This page describes what is
coming and how you will be able to check that what you install is what we
published. Until a signing key is published here, nothing on this page is a
download link.</p>
<h2>Web client — available now</h2>
<p>Nothing to install. Open the <a href="/app">web app</a> in a modern browser.
Tested on Chrome and Firefox; Edge and Safari are expected to work.</p>
<p>Be aware of what this costs you: <strong>the web client's code is served by
this hub</strong>. A hub operator who wanted to read your content could do it
by serving you modified code, and no protocol design prevents that. It is the
convenience tier, not the secure tier. Everything else — your files, your
group keys, your messages — is unreadable to the hub, and the desktop client
below removes this last exception by shipping its code with the application
instead of receiving it from us.</p>
<h2>Desktop client — in development</h2>
<p>A desktop application that ships its own interface, keeps your keys on your
own machine, and can install and manage a node running on that machine. It
will not replace the web client: the same account works with both, on as many
devices as you like.</p>
<table class="pkg-table">
<thead>
<tr><th>Platform</th><th>Format</th><th>Status</th></tr>
</thead>
<tbody>
<tr><td>Ubuntu 24.04+</td><td>DEB, apt repository</td><td>In development</td></tr>
<tr><td>Fedora 44+</td><td>RPM, dnf repository</td><td>In development</td></tr>
<tr><td>Windows 10+</td><td>MSI (per-user, no administrator rights)</td><td>Planned, after Linux</td></tr>
</tbody>
</table>
<p>Updates will come through your distribution's package manager rather than a
built-in updater, so your system verifies the signature the same way it does
for every other package you have installed.</p>
<h2>Server packages — in development</h2>
<p>You do not need these to use MeshBay. They are for running your own node — the
machine that stores and serves your group's files — or your own hub.</p>
<table class="pkg-table">
<thead>
<tr><th>Package</th><th>Platform</th><th>Status</th></tr>
</thead>
<tbody>
<tr><td>meshbay-node</td><td>Fedora / RHEL (RPM)</td><td>In development</td></tr>
<tr><td>meshbay-node</td><td>Ubuntu / Debian (DEB)</td><td>In development</td></tr>
<tr><td>meshbay-hub</td><td>Fedora / RHEL (RPM)</td><td>In development</td></tr>
<tr><td>meshbay-hub</td><td>Ubuntu / Debian (DEB)</td><td>In development</td></tr>
</tbody>
</table>
<p>A node runs as a normal user account, not as root, and it stores its data
under that user's home directory. Running one on your own desktop needs no
administrator rights; running one on a server is an ordinary system service.
Python 3.12 or later is required.</p>
<h2>Android — planned</h2>
<p>An Android client is planned. It will be distributed as an APK from this site,
and on F-Droid if the project's requirements can be met.</p>
<h2>Verifying what you download</h2>
<p>Packages will be signed, and the repositories will be signed. That protects
you against everyone <em>except</em> whoever controls this website — including
us. If this site were compromised, it could serve you a modified package
<em>and</em> a matching fingerprint on this page, and both would look correct.</p>
<p>So the signing key's fingerprint will also be published somewhere this website
does not control, and you should compare the two before trusting a package.
The locations will be listed here once the key exists.</p>
<p>We would rather say this plainly than let a page of checksums imply a guarantee
it cannot give.</p>
<h2>Source code</h2>
<p>Clone the repository from
<a href="https://github.com/cbesson/meshbay">GitHub</a> and follow the README.
Building from source is the one path that depends on nothing published here.</p>
</div>
<footer class="site-footer">
<a href="/">Home</a> ·
<a href="/about.html">About</a> ·
<a href="https://github.com/cbesson/meshbay">GitHub</a>
</footer>
</body>
</html>
|