makima

Install or update

curl -fsSL https://raw.githubusercontent.com/justin06lee/makima/master/dist/install.sh | sh

What's changed

• makima possess asks just huiyunlee's password: — no address, no makima-… ID in the prompt. makima asks on ssh's behalf, with the typing hidden as usual, and hands what was typed straight to ssh.
• No more Permanently added 'makima-…' to the list of known hosts on first contact. A host key that really changes still warns.
• makima reset's tests no longer reach the real /var/lib/makima-tor.

Full Changelog: https://github.com/justin06lee/makima/compare/v0.4.2...v0.4.3

Install or update

curl -fsSL https://raw.githubusercontent.com/justin06lee/makima/master/dist/install.sh | sh

Run it on every machine — the one holding the network included, since it is the one that passes each machine's owner on to the others.

What's fixed

• No more "REMOTE HOST IDENTIFICATION HAS CHANGED" from makima possess after a network is started over. Host keys are remembered per machine (by its node key, as makima-… in ~/.ssh/known_hosts), not per address — addresses are handed out again. A host key that really changes on the same machine still warns.
• makima possess logs in as the other machine's owner by default. Every machine now tells the network whose it is, so a shell from a Jetson to a Mac asks for the Mac account's password, not one for an account named after whoever is typing. Before ssh asks, it says whose password it wants; makima possess NAME@machine picks another.
• A machine that takes no ssh at all now says so, and how to switch it on, instead of "Connection refused".

Full Changelog: https://github.com/justin06lee/makima/compare/v0.4.1...v0.4.2

Install

curl -fsSL https://raw.githubusercontent.com/justin06lee/makima/master/dist/install.sh | sh

What's new

• The desktop app is in the release, and the installer puts it in place: /Applications on Apple Silicon Macs, and through apt on Debian and Ubuntu desktops (amd64 and arm64, built on 22.04 — Jetsons included), which brings tor along. Servers with no desktop get the binaries alone; MAKIMA_APP=0 / MAKIMA_APP=1 override that.
• Run the installer again to update. What was running is stopped for the replacement and started again, the way make does it.
• The release's app shows initials rather than device faces; a build from source still has them.
• Intel Macs and Linux without apt get the binaries alone, and build the app from source.

Full Changelog: https://github.com/justin06lee/makima/compare/v0.4.0...v0.4.1

Install

curl -fsSL https://raw.githubusercontent.com/justin06lee/makima/master/dist/install.sh | sh

Downloads the archive for this machine, checks it against SHA256SUMS, and puts makima, makimad, makima-server and makima-relay in /usr/local/bin. Then makima up. For reaching the network from anywhere, install tor too (sudo apt install tor / brew install tor). The desktop app is not in this release; build it from source.

What's new since v0.3.0

• Reach the network from anywhere through tor. The machine holding the network publishes it as an onion service: no port forward, no public address, works behind CGNAT. Only coordination goes over tor; WireGuard traffic stays direct. DuckDNS is gone.
• makima reset starts a machine over, and a machine can take itself off the network.
• Desktop app: a monochrome look, device faces, first-run setup that can take over a network, and Linux support (tray, .deb/.rpm packaging).
• Network lock: signatures are bound to one network, the signing key can be rotated, and signing follows the signed history rather than the server's word. Machines still on v0.3.0 keep working with upgraded peers.
• Expired machines leave every netmap; rate limits behave behind reverse proxies; DNS, port-mapping, exit-node and policy fixes.
• make installs Go from go.dev when it is missing or too old.

Full Changelog: https://github.com/justin06lee/makima/compare/v0.3.0...v0.4.0

Full Changelog: https://github.com/justin06lee/makima/compare/v0.2.0...v0.3.0