Linux CMND v0.7.2 — installer completion and readiness fixes

Linux CMND v0.7.2 — installer completion and readiness fixes

Complete Ubuntu evaluation installation download: the original Philips CMND
7.5.9 applications are included, along with the Linux installer, .deb, source,
update manifest and checksums. No separate Windows payload is required.

Fresh Ubuntu 24.04 installation

Use a dedicated amd64 machine/VM with at least 6 GiB RAM, a 40 GiB disk and
27.82 GiB free filesystem space before downloading (default upload allowance).
Do not run the fresh installer over an existing CMND installation.

sudo apt update
sudo apt install -y python3 curl ca-certificates
curl --fail --location --proto '=https' --proto-redir '=https' \
  -o bootstrap.py https://github.com/MusicCityTelecom/linux-cmnd/releases/download/v0.7.2/bootstrap.py
sudo python3 bootstrap.py --execute --release v0.7.2

Enter the server's stable IPv4 address and accept the legacy evaluation runtime.
The script downloads and verifies the bundled applications and installs Java 17,
Apache, Docker, pinned Tomcat/MySQL and PHP dependencies. OpenSSH is optional and
only needed for remote administration. Python 3.11+ is required; Ubuntu 21.04 is
not supported. Debian 12/13 are accepted but not runtime-qualified by this release;
Debian 13 needs a separately supplied Java 17 runtime.

At the very end, successful installation plainly prints the configured web
addresses, admin username, actual generated initial password, ports, certificate
guidance and diagnostic paths. The initial password is random in this compatibility
release, not tpvision. Keep the console output private. No success banner
is printed for incomplete readiness. Display the receipt again with:

sudo cmndctl install-summary
# Alias: sudo cmndctl show-login
sudo cmndctl native-health --seconds 120

Default management: https://SERVER-IP:8444/linux-cmnd/.
Philips TV management: https://SERVER-IP:8443/SmartInstall/.
SmartCMS: https://SERVER-IP:8444/SmartCMS/.
Ports come from /etc/cmnd/cmnd.toml: Tomcat 8080/8443, Apache 8082/8444,
private MySQL 3306; internal PHP/admin 9000/9078 remain loopback-only.
Trust the generated /etc/cmnd/tls/ca.crt on your workstation to remove the
expected certificate warning; never distribute server private keys.

Already installed v0.7.1?

Do not reinstall the OS or rerun bootstrap just to fix missing login output.
Retrieve the existing initial credential with:

sudo cat /var/lib/cmnd-deployment/initial-admin.json; printf '\n'
sudo cmndctl native-health --seconds 120

If the installation works, upgrade in place during a maintenance window. Pause
scheduled TV jobs and retain an independent backup/VM snapshot first:

sudo cmndctl --updates
# Review the release and type: INSTALL 0.7.2
dpkg-query -W linux-cmnd
sudo cmndctl install-summary
sudo cmndctl native-health --seconds 120

The GitHub updater verifies the release, keeps configuration/database/prior-package
backups, restarts services and checks readiness. Existing passwords, configuration,
certificates, application files and data are preserved. The stored initial password
is historical: if you changed it, use your current password. Use the preview
update channel for these evaluation releases.

If v0.7.1 never completed and deployment state exists, preserve it and obtain
recovery help. An incomplete installation is not safely repaired by deleting
state or blindly forcing another install. See the detailed README instructions.

Fixes and qualification

• Centralized, root-only completion receipt and credential retrieval.
• Early per-filesystem storage checks and pending-reboot warning; no automatic
  repartitioning, reboot or shutdown.
• Expected MySQL/migration startup retries produce progress, not misleading errors;
  real deadline failures preserve the last diagnostic reason.
• Private preparation transcripts and deployment log; credential JSON ends with
  a newline. Existing logs are retained.
• Service-account home creation no longer produces the missing-home warning.
• All 218 Ubuntu tests pass, no skips, including isolated MySQL case behavior.
• Actual clean Ubuntu install, package install/reinstall/upgrade/purge, real
  Chromium management/CAS/SmartCMS logins, actual reboot, seven listeners/services,
  unchanged credentials/data and scoped firewall restoration passed.
• After publication, a second blank Ubuntu 24.04 VM installed successfully using
  only the public GitHub release artifacts, without a GitHub token or locally
  supplied application payload. Its final console printed the correct credential
  and ended in FINAL STATUS: PASS. Real browser logins and subsequent reboot
  recovery passed. All 218 tests also passed from the public source archive,
  with no skips (28.549 seconds).
• Actual public GitHub cmndctl --updates upgrade from v0.7.1 passed, including
  retained backups, unchanged credentials/configuration/data, subsequent reboot,
  all seven listeners/services and real management/CAS/SmartCMS browser logins.
• All ten published asset sizes and SHA-256 digests verified; the original
  v0.7.1 tag and release assets remain unchanged.

This release changes deployment tooling, not the vendor applications or
decompiled sources. v0.7.1 remains unchanged. The separate native product and
0.8.x work are not part of this release. Firmware/customer backups, site credentials,
generated certificates/identities, private logs and database dumps are not bundled.

This is a fully downloadable evaluation release, not certification of every
Windows feature or a production-security endorsement. No physical TV was contacted
for this fix. Physical-TV workflows, issued license activation, RF/DekTec/MGate and
Debian runtime qualification remain outside these tests. PHP 5.6/MySQL 5.7 are legacy
compatibility dependencies: do not expose CMND directly to the public Internet.

Documentation and assets

• README: fresh install and v0.7.1 recovery/upgrade
• Detailed Ubuntu walkthrough
• Storage, logs and completion receipts
• Qualification evidence
• Post-publication GitHub-only install and updater evidence

Download assets from this release only. SHA256SUMS covers the .deb, bootstrap,
full installer, source archive, evaluation guide, configuration example, update
manifest, vendor ZIP and vendor manifest. Vendor bundle SHA-256 remains
9c7ce2a4c60a639b654203d099b93f39fa704fb1537a95fe2699ad3ad2ce0a6d.

Philips/TPVision/CMND remain the property of their respective owners. This Linux
adaptation is provided free of charge; vendor notices/licensing remain applicable.
Distribution does not imply vendor endorsement.

CMND 7.5.9 source-recovery research snapshot (not an installer)

CMND 7.5.9 source-recovery research snapshot

For development and inspection only. Not an installer, update, or working
replacement for the original applications. The compatibility installer release
and its update channel are unchanged.

Editable recovered code is on codex/java-native-rewrite, under recovered/.
Clone this branch to inspect or develop against the preserved baseline:

git clone -c core.longpaths=true --branch codex/java-native-rewrite https://github.com/MusicCityTelecom/linux-cmnd.git
cd linux-cmnd
python3 scripts/verify_recovered_source.py

On Windows, use a short checkout path (for example C:\src\linux-cmnd) because
the original Java package paths are deep. For the exact snapshot rather than the
moving research branch, check out this release's tag after cloning.

Complete original inputs and current recovery outputs

• original-master-installer.exe: unchanged original CMND 7.5.9 Windows installer.
  Reference input, not a Linux executable. Do not run it on production systems
  merely to inspect it.
• original-installer-tree.zip: all 175 extracted original installer files,
  including the vendor applications, nested libraries, resources and RF/DekTec
  components. No component was excluded because of low development priority.
• original-inventories.zip: file/archive/native/source inventories and normalized
  Java recovery plans, including work still pending.
• managed-project-resources.zip: complete current recovered managed projects,
  including project/resource files, with a content manifest.
• research-compiled-output.zip: all current compiler outputs. Successful direct
  builds and selected-class comparisons are separated from partial-not-usable/.
  None of these outputs is runtime-qualified or suitable for deployment.
• SHA256SUMS: hashes for the preceding release assets.
• original-notice-binaries.zip: six original compiled classes whose names
  matched the notice collector. Their exact bytes and eight archive-origin
  records are preserved here rather than being committed as source documents.

Java source from independent CFR/Vineflower passes, recovered C#/IL, original
source/headers/maps, native disassembly/pseudocode and provenance are committed
on the research branch. The complete originals are retained even when recovery
is incomplete. The snapshot's recovery-status.json records its exact scope;
later recovery batches will be added in subsequent commits/snapshots.

Only the reload helper and SmartCMS direct classes have passed full compilation.
Seven selected outer classes also compiled with matching public/protected APIs.
The other application builds remain incomplete. Native pseudocode is not original
or buildable C/C++ source, and no reconstructed application was executed or tested
against TVs. Tool success is not proof of lossless recovery or behavioral parity.

Vendor ownership, licenses and notices remain applicable; repository tooling
licenses do not relicense Philips/TPVision or third-party components. Distribution
is provided free of charge and does not imply vendor endorsement. See repository
disclaimer and notices. Original reviewed vendor constants remain unchanged;
customer/site data and locally generated credentials are not included.

Editable native CMND project — Linux compiler milestone (research only)

Editable CMND native development project — research only

Not an installer, compatibility update or production-ready native application.
The existing v0.7.1 compatibility release and its update channel are unchanged.

Source and instructions:
https://github.com/MusicCityTelecom/linux-cmnd/tree/codex/java-native-rewrite/native-project

This snapshot contains a complete recovered-source catalog (42,143 distinct
files / 42,349 provenance records), six editable Java modules (2,352 primary
source files), source-repair mappings, original/non-Java inventories, web and
supporting-distribution resource catalogs, and repeatable offline build tools.
RF/DekTec/native code remains included; its rewrite is not complete.

All six Java modules compiled under native Debian 13 Linux using JDK 17.
Original/rebuilt offline launcher contracts passed, five selected API checks
matched, and 21 focused tooling tests passed. Thirteen original class-name
differences are recorded; all are marked synthetic in original bytecode, but
complete behavioral/linkage equivalence still needs validation.

cmnd-native-research-builds.zip includes the six successful Linux class JARs,
all class/JAR outputs from the three selected development build attempts
(including partial/failed attempts and offline contract fixtures), exact hashes
and qualification evidence. Do not deploy these JARs as a CMND installation.
Compiler logs, customer/site data and generated application identities are not
included. SHA256SUMS verifies the downloadable archive.

vendor-notices.zip retains the unchanged original vendor/third-party notice
texts and their archive-origin records. Verify it with
vendor-notices.SHA256SUMS. Applicable notices accompany these research outputs;
they do not relicense the vendor applications under the tooling license.

All original vendor installer/resources, managed resources and earlier recovery
outputs remain available in the preceding research snapshot:
https://github.com/MusicCityTelecom/linux-cmnd/releases/tag/research-recovery-2026-09-12

Still required: complete application/WAR assembly, Linux-specific host adapters,
full API/behavior checks, isolated service/browser/backup/licensing validation,
and explicitly approved TV testing. Research builds do not contact TVs.

Philips/TPVision and other vendors retain ownership and applicable licenses.
The Music City Telecom tooling license does not relicense vendor code. Provided
free of charge; distribution does not imply endorsement. Repository disclaimers
remain in documentation, not in application UI.

Linux CMND 0.7.1 - Settings and Channels compatibility fix

Linux CMND 0.7.1 — Settings/Channels compatibility fix

Fixes Settings and Channels remaining on “Loading…” after uploading packages or
a full clone. The files were imported; Windows/Linux MySQL table-name casing
prevented the native lists from loading.

Includes the same complete original Philips CMND 7.5.9 application bundle as
0.7.0. No customer data, VPN credentials or generated installation identities are
included. Vendor files retain their original ownership and licensing terms.

Existing installation — update, then repair

Schedule a short maintenance window and pause jobs/uploads:

sudo cmndctl --updates
# Install 0.7.1 using the preview channel.
sudo cmndctl native-database-case
sudo cmndctl native-database-case --execute
sudo cmndctl native-health --seconds 120

Then refresh Settings/Channels and log in again if needed. Do not delete or
re-upload the packages. The repair checks identifiers, keeps a private cold
database backup, checks package counts, and restarts CMND services. Tooling
updates do not silently modify the running database; the repair is explicit.

Fresh Ubuntu 24.04 amd64 installation

Dedicated VM/server, 6 GiB RAM, 40 GiB disk, stable IPv4, Internet/DNS and sudo:

sudo apt update
sudo apt install -y python3 curl ca-certificates
curl --fail --location --proto '=https' --proto-redir '=https' -o bootstrap.py https://github.com/MusicCityTelecom/linux-cmnd/releases/download/v0.7.1/bootstrap.py
sudo python3 bootstrap.py --execute --release v0.7.1

Java 17 and application dependencies are installed by the Ubuntu installer.
OpenSSH is optional, only needed for remote administration. The approximately
473 MB vendor archive downloads automatically. Fresh installs receive the case
fix during database initialization; no repair command is needed.

• Repair details and recovery precautions
• Detailed Ubuntu installation
• Configuration and ports
• Test results and limitations

The repaired Ubuntu VM passed native authenticated Settings/Channels list checks,
and the operator confirmed both lists work in the browser. Existing data was
preserved. No TVs were contacted or changed for this repair.

Evaluation release, not production certification or full Windows parity. PHP 5.6
and MySQL 5.7 remain legacy compatibility dependencies. Debian, licensed feature
activation, proprietary playout/packers and complete hardware behavior remain
separate qualification work. The fresh database initialization regression is not
a replacement for a complete fresh-0.7.1-install test.

Provided free of charge by Tommy Heggie / TechFinity Communications / Music City
Telecom. Philips, TPVision and CMND belong to their respective owners; no vendor
endorsement or new license grant is implied. See the repository disclaimer.

Linux CMND 0.7.0 - bundled application evaluation

Linux CMND 0.7.0 — bundled application evaluation

This release includes the original Philips CMND 7.5.9 application bundle and
Music City Telecom Linux deployment/update tooling. It no longer requires users
to obtain or extract a vendor payload separately. Original vendor ownership,
notices, licensing checks and installer-distributed defaults are retained.
Customer backups, live databases, VPN profiles, existing activation state and
site-generated credentials/certificates are not included.

Provided free of charge by Tommy Heggie / TechFinity Communications / Music City
Telecom. Philips, TPVision and CMND remain the property of their respective owners;
the original vendor terms still apply. Read the ownership, license and disclaimer.

Qualification in progress. Do not treat this candidate as production-certified.
See the exact-version test matrix before deployment. No full Windows parity,
physical-TV enrollment/push, or vendor-issued license activation is implied.

Fresh Ubuntu 24.04 amd64 installation

Use a dedicated server/VM: 6 GiB RAM, 40 GiB disk, stable assigned IPv4 address,
working Internet/DNS and sudo access. Keep the legacy runtime off the public Internet.

sudo apt update
sudo apt install -y python3 curl ca-certificates
curl --fail --location --proto '=https' --proto-redir '=https' -o bootstrap.py https://github.com/MusicCityTelecom/linux-cmnd/releases/download/v0.7.0/bootstrap.py
sudo python3 bootstrap.py --execute --release v0.7.0

OpenSSH is optional for CMND; install openssh-server only if you need remote SSH
administration. The installer downloads the approximately 473 MB vendor bundle,
checks GitHub digests and all 26 original input hashes, installs dependencies,
creates fresh databases/credentials/certificates and checks native readiness.
The vendor bundle is separate from the small .deb so tooling updates do not
need to download or overwrite the deployed Philips applications.

Existing installation updates

sudo cmndctl --updates

Use the preview channel for evaluation releases. Review/pause vendor jobs before
confirming INSTALL 0.7.0. Updates remain tooling-only: they preserve existing
site data and do not silently replace vendor WARs, rebuild PHP or migrate vendor
schemas. The update worker verifies package identity, retains configuration and
five-database backups, and checks readiness/attempts recovery on failure.

Licensing and testing

The original vendor code derives the license serial from the current CPU and
motherboard, not from our reference Windows installation. Give VMs distinct,
stable hardware identities. Admin > License retains activation-code validation
and vendor license requests; a code may be needed for licensed features.
sudo cmndctl license-network --execute explicitly permits only the fixed vendor
license HTTPS endpoint's resolved public addresses, preserving TV isolation.
It does not request or grant a license itself. Read the licensing guide first.

The original native Add/Detect enrollment behavior is preserved, including its
automatic configuration commands. It is not a read-only scan. Use individually
approved test targets, not an unrestricted customer subnet.

• Detailed Ubuntu walkthrough
• Installation options
• Licensing and VM identity
• Ports and configuration
• Current qualification evidence
• First-TV test procedure

PHP 5.6/MySQL 5.7 are legacy compatibility dependencies. Debian full-runtime
qualification, proprietary Windows-only packers/playout, production Windows
backup migration and full physical-TV behavior remain separately qualified work.
No Philips endorsement or new vendor license grant is implied by distribution.

Linux CMND 0.6.2 - TV clone readback fixes

Linux CMND 0.6.2 — TV clone readback fixes (evaluation)

Original Music City Telecom tooling for locally supplied Philips CMND 7.5.9.
This evaluation prerelease is not full Windows parity or production certification.
No Philips binaries, customer backups, VPN profiles or credentials are included.

Changes

• Match the vendor WIXP correlation-cookie range (0 through 99998), preserving strict response matching.
• Recognize TVChannelList uploads containing the observed nonempty ChannelList database and identifier.
• Document read-only scanning separately from native Add/Detect, which can send configuration commands automatically.

One approved physical TV delivered all eight advertised clone ZIPs, totaling
1,552,548 bytes. All passed integrity and safe-path checks. The original receiver
timed out on the channel-directory alias; offline validation with the correction
passed all eight. Automatic live completion with that correction has not been
retested. No settings, firmware, power, content push or native import was performed.

Release verification

All 187 Ubuntu tests passed; Windows passed 175 with 12 platform-specific skips.
All eight release assets were downloaded and verified against GitHub SHA-256
and size metadata. The test VM completed an actual public GitHub CLI upgrade
from 0.6.1 to 0.6.2, preserving configuration and CMS data, retaining five-database
and configuration backups, and passing all seven HTTPS contexts and migration
checks. Public bootstrap selection and package/installer download also passed.
This is upgrade qualification, not a new full clean-install or hardware-push test.

The original vendor GUI and automatic enrollment commands are preserved. Lab
network restrictions are separate from vendor enrollment behavior.

Installation command

Use a dedicated Ubuntu 24.04 amd64 VM/server (6 GiB RAM, 40 GiB disk).
Keep this legacy compatibility runtime off the public Internet.

curl --fail --location --proto '=https' --proto-redir '=https' -o bootstrap.py https://raw.githubusercontent.com/MusicCityTelecom/linux-cmnd/main/scripts/bootstrap.py
sudo python3 bootstrap.py --execute --release v0.6.2

The installer prompts for your private licensed vendor payload and assigned server
IPv4 address. It downloads verified tooling and dependencies, configures services,
and checks readiness. It does not download Philips software from this repository.

Update

sudo cmndctl --updates

Use the preview channel for evaluation releases. Confirm only when the prompt
identifies version 0.6.2 by typing INSTALL 0.6.2. Pause vendor jobs first.
The worker verifies the package, backs up configuration and databases, and checks
readiness. Updates are tooling-only: vendor WARs, databases and PHP images are
not migrated. Existing credentials and site configuration are preserved.

Scan and test safely

The separate cmndctl scan command performs read-only discovery using a reviewed
private config and an explicitly authorized target. It does not add TVs to the
native Philips inventory. Do not disable lab subnet or native egress guards.
Native GUI Add/Detect with auto-import can send enabler/settings/PMS commands;
it remains unqualified on physical hardware and is not a receive-only test.

Default ports: Java 8080/8443, CMS 8082/8444; MySQL 3306, PHP-FPM 9000 and
management 9078 stay loopback-only. Open https://SERVER_IP:8444/linux-cmnd/.
Initial credentials are private at /var/lib/cmnd-deployment/initial-admin.json.

• Quick install
• Installation and troubleshooting
• Ports and configuration
• Updates and channel configuration
• Test evidence and limitations
• Scoped hardware testing

Debian runtime, production Windows-backup restore, proprietary settings packers,
vendor certificate rotation and Windows-only MGate features remain unqualified.
PHP 5.6 and MySQL 5.7 are end-of-life dependencies. No Philips endorsement is implied.

Linux CMND 0.6.1 - Ubuntu evaluation

Linux CMND 0.6.1 — Ubuntu evaluation

Original Music City Telecom deployment/update tooling for locally supplied Philips
CMND 7.5.9. This is an evaluation prerelease, not full Windows parity or production
certification. Philips binaries, customer backups and credentials are not included.

Guided installation

Use a fresh dedicated Ubuntu 24.04 amd64 VM/server, 6 GiB RAM and 40 GiB disk
(approximately 26 GiB must remain free after dependency preparation at the default
upload setting). Keep this legacy compatibility runtime off the public Internet.

curl --fail --location --proto '=https' --proto-redir '=https' -o bootstrap.py https://raw.githubusercontent.com/MusicCityTelecom/linux-cmnd/main/scripts/bootstrap.py
sudo python3 bootstrap.py --execute --release v0.6.1

The script prompts for your private licensed payload directory/ZIP, the server's
assigned IPv4 address and legacy-runtime acceptance. It downloads and verifies
the tooling/dependencies, configures the five Java applications and SmartCMS,
initializes private databases/certificates/accounts and verifies service readiness.
No GitHub account is required. It never downloads Philips software from our repo.

• Prepare the private vendor payload and install
• Complete installation and troubleshooting guide
• Configuration, ports and resource limits
• Actual qualification evidence

Default application ports: 8080/8443 (Java), 8082/8444 (CMS). MySQL 3306,
PHP-FPM 9000 and internal management 9078 remain loopback-only. Open
https://SERVER_IP:8444/linux-cmnd/. Initial credentials are root-only at
/var/lib/cmnd-deployment/initial-admin.json; trust only the public CA certificate,
never distribute private keys. Choose custom ports in the configuration before
fresh installation; an in-place port migration is not automatic.

Updates

sudo cmndctl --updates

The installed command checks GitHub and asks for an exact INSTALL VERSION
confirmation. No update is installed merely by checking or opening the GUI.
Downloads are checked against GitHub SHA-256/size metadata and package identity.
The worker backs up configuration/databases and attempts recovery on failure.
Pause vendor jobs before confirmation: service restart can resume queued TV jobs.

Updates are tooling-only: they do not replace existing vendor WARs, migrate
databases, rebuild PHP images, or retrofit fresh-installer configuration fixes.
An older 0.5.0 site retains its existing runtime; use its management updater or
read-only cmndctl update-check until the new command is installed.
Update details and limitations.

Changes and test scope

Postrelease known issue: the independent WIXP CLI uses a correlation-cookie
range that a physical TV rejected. A source fix matches the original vendor
range and preserves strict response matching. Read-only identity and export
capability checks then passed; no clone transfer or TV changes were performed.
This fix is not in the v0.6.1 assets and does not alter the original vendor GUI.
See the current test-results document for the unreleased correction's scope.

• Exact-hash private Java adaptations for Linux 7-Zip and Java keytool paths.
• FFmpeg/ffprobe added to the PHP runtime; private disk upload storage and
  Windows-derived upload limits with Linux resource bounds.
• Existing native configuration is preserved during package setup.
• Ubuntu clean install, CA-verified HTTPS/migrations, original browser CAS/CMS
  login, synthetic CMS editor/export and native archive/keytool execution tested.
• Actual guest reboot: services, exact listener addresses, HTTPS/migrations and
  the synthetic CMS site recovered automatically. FFmpeg/ffprobe and ImageMagick
  processed generated media successfully.
• Real CLI worker package rollback passed after injected readiness failure,
  retaining backups and recovering the prior runtime with unchanged configuration,
  synthetic site and baseline package. This prepublication test uses synthetic
  release transport; actual GitHub upgrade evidence is recorded separately.
• Source suite: 183 passed on Ubuntu; Windows 183 run, 171 passed, 12 POSIX/root
  skips. Runtime, simulator, browser and hardware evidence remain separate.
• Postpublication qualification: the actual interactive CLI upgraded 0.6.0 to
  0.6.1 through public GitHub without a token. Cancel was non-mutating; install
  retained configuration, the synthetic CMS site and five-database backups,
  verified the released package hash, and passed HTTPS/migration readiness.
  Public bootstrap selection and package/installer downloads also passed.

Debian 12/13 detection is implemented but full Debian runtime is not qualified;
Debian 13 needs a separately supplied Java 17. Physical TVs, production Windows
backup restore, legacy proprietary settings packers, vendor certificate rotation
and additional Windows-only MGate functionality remain unqualified. PHP 5.6 and
MySQL 5.7 are end-of-life compatibility dependencies, not a secure public service.

The first physical-TV test must download a clone FROM one individually approved
TV before any push. Installation grants no TV egress and contacts no TVs.
First-TV test.

Linux CMND 0.5.0 - Ubuntu evaluation

Linux CMND 0.5.0 — Ubuntu evaluation

This is an evaluation prerelease for a dedicated Ubuntu 24.04 amd64 VM, not production certification or full Windows-feature parity. It contains original Music City Telecom tooling only. Licensed Philips CMND application files must be supplied locally; vendor binaries, customer backups, firmware, keys and logs are not distributed.

Install

Download linux-cmnd_0.5.0_amd64.deb, install.sh, cmnd.example.toml, EVALUATION-GUIDE.md and SHA256SUMS. Verify the downloaded checksums, then follow the evaluation guide to prepare a private configuration and licensed extracted vendor directory.

sha256sum --ignore-missing -c SHA256SUMS
sudo sh ./install.sh --package ./linux-cmnd_0.5.0_amd64.deb \
  --payload /srv/private/cmnd-vendor --config /srv/private/cmnd.toml \
  --install-dependencies --accept-legacy-runtime --execute

Use at least 6 GiB RAM and 40 GiB disk. Choose the server bind/callback address and ports before fresh installation. Defaults are Java 8080/8443, CMS 8082/8444, private MySQL 3306. The management GUI is https://SERVER_IP:8444/linux-cmnd/; trust the generated public CA as described in the guide. Java cold startup can take about 11 minutes; verify with cmndctl native-health --seconds 900.

The .deb installs the same full installer as cmnd-install. Keep the matching .deb for update rollback. Fresh installs start with no TV control permissions. PHP 5.6/MySQL 5.7 are legacy compatibility dependencies: do not expose this evaluation to the public Internet.

Verified evidence

• Fresh Ubuntu application installation from standalone shell and .deb assets, including a non-loopback internal VM address; five original Java applications, native SmartCMS, TLS and expected database migrations.
• Automatic service startup after a real reboot in the installer qualification VM.
• Real browser management/CAS login, CMS single sign-on, synthetic editor creation and validated local content ZIP export.
• Native CMND Add/Detect imported one exact synthetic TV identity into Philips inventory. Room-clone package download/validation, callback, independent room readback, persisted room value and Standby passed against that simulator.
• GUI startup update offer and explicit confirmation, real systemd queue/worker, actual package installation, private five-database backup and success display passed using synthetic release transport. Real package rollback and recovered application readiness passed after an injected failure. Configuration and synthetic CMS data were preserved.
• Linux: all 144 source tests passed. Windows: 138 passed, six Linux-only skips.

Simulator and synthetic-release transport results are explicitly separate from real-TV and authenticated GitHub transport evidence. GUI updates cover original tooling only, not Philips payload upgrades or database migrations.

Important limits and first hardware test

• Physical TVs are not yet qualified. The first test must download a clone FROM one independently identified TV before any push/power/room/firmware changes. Native auto-import is not read-only: simulator qualification observed automatic settings/enabler/PMS commands. Follow docs/FIRST-TV-TEST.md and use the separate receive-only CLI first.
• A running CMND server already occupies port 8080. Use a separate approved, reachable receiver port for the first standalone export test; do not accidentally replace the native listener.
• Restarting vendor services can resume queued/scheduled TV jobs. Review and pause those jobs before updating an operational system; the updater itself sends no TV commands.
• This repository remains private. Authenticated GitHub access from the VM is a pending separate check. Configure a repo-scoped read-only token on the server as documented; no development-machine GitHub credential is included in any image or asset. A public repository will not require a token.
• Debian 12/13 detection is implemented, but full Debian runtime qualification is pending. Debian 13 needs an operator-supplied Java 17 runtime.
• Windows backup structure and isolated SQL migration were assessed; complete production backup restoration and disaster recovery are not certified.
• RF/DekTec/modulator workflows are explicitly outside scope. Additional MGate-dependent IP playout and model-specific legacy native helpers remain unqualified.

Keep the repository private until its entire development history has received a privacy review; clean current release assets do not redact older commits. Philips attribution is preserved and no Philips endorsement is implied.