Skip to content

PowerDeck 2.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Oct 17:53
· 7 commits to main since this release
v2.1.0
e9b42a1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security groundwork before PowerDeck can reset a frozen computer through a KVM.

Update the phone app first. The 2.0 app can't pair with a 2.1 helper.

  • Owner devices. A helper trusts the phones and computers that scanned its code, not every device on your Tailscale account. Upgraded helpers keep the old rule until the updated app claims them, which it does on its own. The code is now in every QR code. Owner devices are listed, and can be removed, on the device's page in the app, in the PC window and with powerdeck-helper owner list|add|rm.
  • Phones on another account that pair with the code can turn that device on and off, but no longer change its settings, keys or updates.
  • Helpers reach each other with peer keys (status, wake, power only) that the app sets up, instead of as you.
  • Listening: the helper listens only on loopback and its Tailscale addresses, never on every network card, and follows Tailscale when it starts late or changes address.
  • Updates are staged: a release installs on its own 3 days after it's published, and you can pause that for 7 days in the app or the PC window. The PC window has an automatic-updates switch. New Linux installs (servers) start with automatic updates off. SECURITY.md explains the signing-key risk.
  • App: no plain HTTP except to Tailscale names. NanoKVMs are linked by their Tailscale name; ones linked by IP address are renamed on their own. MagicDNS must be on. A NanoKVM that refuses an action now says so, and long presses wait long enough.

Install

  • Phone (Android): download PowerDeck.apk on your phone and open it.
  • Windows: run PowerDeck-Setup.exe, or in PowerShell: irm https://github.com/ProjectZero02/powerdeck/releases/latest/download/install.ps1 | iex
  • Linux (systemd): curl -fsSL https://github.com/ProjectZero02/powerdeck/releases/latest/download/install.sh | sh (as root, or any user with sudo)

Verify a download: gh attestation verify <file> --repo ProjectZero02/powerdeck

Assets 16
Loading