Node Manager 0.3.1-rc.1 (release candidate)

Release candidate for Sentinel Node Manager 0.3.1 (Solana devnet). Built from one commit for every OS: the app bundle is byte-identical on all 6 OS/CPU builds.

System	File
Windows 10/11 x64	Sentinel-Node-Manager-0.3.1-rc.1-win-x64-setup.exe (or -win-x64-portable.exe)
Windows 11 arm64	Sentinel-Node-Manager-0.3.1-rc.1-win-arm64-setup.exe
macOS Apple silicon / Intel	…-mac-arm64.dmg / …-mac-x64.dmg (or .zip)
Ubuntu / Debian	…-linux-amd64.deb / …-linux-arm64.deb
Fedora / RHEL	…-linux-x86_64.rpm / …-linux-aarch64.rpm
Any Linux x64	…-linux-x86_64.AppImage

Node image 0.3.7 (also on release node-image-0.3.7); the app downloads it and checks the pinned SHA-256. Check any file with sha256sum -c --ignore-missing SHA256SUMS.

• HNS Resolver works for the node's users: with the switch on, a client connected over WireGuard,
  AmneziaWG or OpenVPN can open Handshake names (whatever DNS server it asked, port 53 goes to the
  node's resolver); ordinary names still go to 1.1.1.1. V2Ray, Xray and Hysteria2 nodes resolve
  destinations on the node, through the same resolver, and DNS a Hysteria2/V2Ray/Xray client sends to
  any server is answered by it too. Node page: "Routing users' DNS". Needs the new
  node image 0.3.7 (amd64 + arm64, SHA-256 pinned); turning HNS on moves a node to it. In that image
  an hnsd crash restarts hnsd only (upstream stops the whole node daemon when hnsd exits), and
  hnsd's per-block output (~500k lines while syncing) is summarised once a minute instead of
  filling the node log; hnsd keeps its chain checkpoint, so a restart no longer re-syncs
  the whole Handshake chain (~3 min) and leaves no temp files behind; its log can never stall it.
  After a node's first sync hnsd is restarted once from its checkpoint, which frees ~150 MB of
  memory for good (163 MB → 9.5 MB; measured cost of HNS on a 2 GB VPS: ~85 s and 210 MB download for
  the first sync, then ~0% CPU and ~1 MB/h).
  The node page shows the Handshake sync ("Syncing · 45%", and an error asking for outbound TCP
  when hnsd reaches no Handshake peer or gets no new block for 45 min; "Restarting…" during a
  restart) instead of "Routing users' DNS" as soon as a process named hnsd exists. The paid
  self-test checks HNS names on every protocol (V2Ray/Xray through their proxy).
  An HNS node on an older node image moves to the current one at its next Restart, protocol switch
  or price change (the page says "Restart to update the node image"), so it gets these fixes.
• Chain actions without Docker on this computer: withdraw, bond withdrawal, removal and test-escrow
  refunds run on one of your servers when Docker Desktop is off (Settings → Chain-call server). The
  removal card says why it is waiting and offers Start Docker Desktop / Use a server instead.
• Removal never dead-ends: Retry now, the cleanup reason, "Retry cleanup now" and "Server is gone";
  a local node whose Docker is gone is forgotten and its container deleted when Docker returns.
• Test escrow comes home by itself: the paid self-test starts the channel close right away and the
  app finishes it after the grace period (Wallet → Test escrow card, Reclaim now).
• Wallet: SOL Max leaves the fee and rent; errors on a node stay on its page (red card) instead of
  only in the log.
• Fixes: a damaged app data file is restored from a rolling backup instead of starting empty (that
  lost every node and its key); "getting the chain-call image" no longer repeats every minute with
  Docker off; the escrow sweep no longer writes the same log line every 10 minutes; node logs are
  capped at 3 × 20 MB (hnsd logs ~680k lines while syncing).
• Two changes on one node at once (e.g. a protocol switch and the HNS switch) are refused with
  "… is still running on this node" instead of racing; while a change restarts the node its page says
  "Switching protocol…" instead of "Listing expired", and a server node the app has no SSH access
  to after a restart reads "Not connected" (not "Error") until Reconnect, without a "not live" alert
  or a Docker install hint at every launch.
• After a deploy, the button reads "Save phrase to open node" until the recovery phrase is saved; the
  tour explains the 0.06 SOL per node (0.05 to the node key + fees). Live sessions no longer lists
  sessions the node has already closed (the paid self-test stayed there for an hour).

Tested: unit 407/407, end-to-end on devnet 109/0 (HNS on all six protocols) + refunds 21/0, clean installs and upgrades on Windows, macOS and Linux (data kept), a ~10 h soak on all three OS with paid tests, an OS reboot and a firewall block (red status, back to green within 60 s of unblocking).

Known: after an app restart a server node needs Reconnect before its chain actions run; the app runs one short-lived helper container per chain read while a node page is open. Devnet only; tokens on Solana devnet have no value.

Node Manager 0.3.0 — installers for Windows, macOS and Linux

Node Manager 0.3.0: installers for Windows, macOS and Linux. Sentinel Solana devnet only, unsigned builds.

Install the app, create a wallet, fund it, choose this computer or a server over SSH, and deploy. No source code and no build step: the app downloads the node image once (about 90 MB), checks its SHA-256 against the hash pinned in the app, and loads it into Docker.

System	File
Windows 10/11 x64	Sentinel-Node-Manager-0.3.0-win-x64-setup.exe (one click, no admin prompt)
Windows 11 arm64	Sentinel-Node-Manager-0.3.0-win-arm64-setup.exe
Windows, no install	Sentinel-Node-Manager-0.3.0-win-x64-portable.exe
macOS Apple silicon / Intel	Sentinel-Node-Manager-0.3.0-mac-arm64.dmg / -mac-x64.dmg (zip also)
Ubuntu / Debian	Sentinel-Node-Manager-0.3.0-linux-amd64.deb / -linux-arm64.deb
Fedora / RHEL	Sentinel-Node-Manager-0.3.0-linux-x86_64.rpm / -linux-aarch64.rpm
Any Linux x86_64	Sentinel-Node-Manager-0.3.0-linux-x86_64.AppImage

Unsigned: on Windows choose More info → Run anyway; on macOS right-click the app → Open the first time.

Node server files: sentinel-dvpnd (daemon) and sentinel-dvpn (CLI) for Linux amd64/arm64, and the node images sentinel-dvpnd-image-0.3.0-linux-{amd64,arm64}.tar.gz, built from fork cut fork-cb33-4-final6.5 (90014b2) of sentinel-official/sentinel-solana. BUILD-MANIFEST.txt has the details.

Verify: sha256sum -c --ignore-missing SHA256SUMS (SHA256SUMS and the files in one folder).

Tested on this build:

• Install on clean systems: Windows 11 (3 clicks, no admin prompt), macOS 14, Ubuntu 24.04, Debian 12 and Fedora 41 (x86_64 and arm64), AppImage. Uninstall leaves no program files, services or start-up entries; the wallet and settings stay.
• From install to a node listed on chain on each OS, with a paid session through the node; real outside clients over all six protocols.
• Upgrade from 0.2.0 keeps the wallet and settings.
• From download to a listed node: about 10 clicks in the app, plus the OS prompts for an unsigned app.
• Unit suite 266/266, including a check that every protocol tile ships its logo.

See the results table.

Not tested on hardware: Windows arm64 and macOS arm64 are checked as packages (CPU type of every native module, contents), not run on a device.

Known issues: known issues.

Node image 0.3.7 (for Node Manager 0.3.1)

Node images for Sentinel Node Manager 0.3.1 (Solana devnet). The app downloads the file for the host's CPU, checks its SHA-256 against the hash pinned in the app, and loads it into Docker, so a node can be deployed without the source or a build.

File	CPU
sentinel-dvpnd-image-0.3.7-linux-amd64.tar.gz	x86_64
sentinel-dvpnd-image-0.3.7-linux-arm64.tar.gz	arm64

• Contents: the same daemon as 0.3.0 (sentinel-dvpnd + sentinel-dvpn, Sentinel dVPN daemon cut final6.5, commit 90014b2, devnet identity linked in) with the protocol binaries (WireGuard, AmneziaWG, Xray/V2Ray, OpenVPN, Hysteria2).
• New in this image: the HNS resolver layer. When a node has HNS on, hnsd (v2.0.0) resolves Handshake names and dnsmasq + unbound send every other name to 1.1.1.1. Users' DNS is routed through it on every protocol. A supervisor keeps hnsd's checkpoint, reports sync status, and trims its memory after the first sync (about 10 MB steady). Licence texts are inside the image at /usr/share/licenses/node-image.
• Manual use: sha256sum -c --ignore-missing SHA256SUMS then docker load -i <file> → tag node-manager/dvpnd:prebuilt-0.3.7.
• Devnet only. Tokens on Solana devnet have no value.

Node Manager 0.2.0

Node Manager 0.2.0: final release. Sentinel Solana devnet only, unsigned builds.

Promotes the release candidate v0.2.0-rc1 unchanged: same source and same binaries. Built against fork cut fork-cb33-4-final6.1 (02b22fc) on public upstream sentinel-official/sentinel-solana 26de5240.

Why final6.1 and not final6.5: the apps' last cut, final6.5 (90014b2), changed client-side code only (status honesty, stall detection, client CLI commands). No node or server code changed between final6.1 and final6.5, so this tool keeps the daemon and CLI it was tested with.

Assets: the node daemon sentinel-dvpnd and CLI sentinel-dvpn this tool drives, third-party notices, the build manifest and SHA256SUMS. The tool itself runs from source (see the README). Verify with sha256sum -c --ignore-missing SHA256SUMS.

Tested on this build: local suite 70 passed, 0 failed, 2 skipped; remote deploy/test/remove suite 76 passed, 0 failed, 1 skipped; live busy-node answer PASS. See the results table.

Known issues: known issues. Node payments can still lose up to one voucher step when a session ends mid-step (needs an on-chain program change, proposed upstream).

SHA256SUMS (file SHA-256 42cd6df6d06a88960d157b9e44964a4c35369686bfe9c687bc1f3d4557e967aa)

0fbd947e41ad641f43e76261f4c07ac2241d045152277d457748a61d5714570a *sentinel-dvpnd-linux-amd64
a702e2b6d1f4de3a006dd7a89a57f5675677fa48dead1afe62b790ba1b6ad8cd *sentinel-dvpnd-linux-arm64
b0247dc5643eb72a1e316296af64fe2d20b4f0b7bc9002f11ea5669fbe0fe25e *sentinel-dvpn-linux-amd64
059ae2442438f09bee84e827703eea2fd5cf65a76b1626698fa648dbb984cbe9 *sentinel-dvpn-linux-arm64
caff768d7be3acf85be76908b05228cea94801f41d0b2c5966afa1ab02cf6e38 *sentinel-dvpn-THIRD-PARTY-NOTICES.txt
faa4d851c4bba49e7b2ed7a8e3f2410561a96aea3dca73b3f5e80e81079726e7 *dvpnd-THIRD-PARTY-NOTICES.txt
23632a5b12ba820c425db3659f1e08eabe921d002d835b40d451f2acf59b8f4f *BUILD-MANIFEST.txt

License

Sentinel dVPN License.

Node Manager 0.2.0 RC1

Node Manager 0.2.0, release candidate 1. Devnet only, unsigned builds.

RC2 status: there is no RC2 build of this product. The RC1 build is unchanged and is re-published as the current candidate (tag v0.2.0-rc1).

Built against: fork cut fork-cb33-4-final6.1 (02b22fc) on public upstream sentinel-official/sentinel-solana 26de5240.

Assets: the node daemon sentinel-dvpnd and CLI sentinel-dvpn this product drives, third-party notices, the build manifest and SHA256SUMS. The product itself runs from source (see the README). Verify with sha256sum -c --ignore-missing SHA256SUMS.

What was tested: remote deploy/test/remove suite on final6.1: 76 passed, 0 failed, 1 skipped; wallets swept after the run. See the testing-tools repo.

Known issues: docs/known-issues-rc1.md

SHA256SUMS

0fbd947e41ad641f43e76261f4c07ac2241d045152277d457748a61d5714570a *sentinel-dvpnd-linux-amd64
a702e2b6d1f4de3a006dd7a89a57f5675677fa48dead1afe62b790ba1b6ad8cd *sentinel-dvpnd-linux-arm64
b0247dc5643eb72a1e316296af64fe2d20b4f0b7bc9002f11ea5669fbe0fe25e *sentinel-dvpn-linux-amd64
059ae2442438f09bee84e827703eea2fd5cf65a76b1626698fa648dbb984cbe9 *sentinel-dvpn-linux-arm64
caff768d7be3acf85be76908b05228cea94801f41d0b2c5966afa1ab02cf6e38 *sentinel-dvpn-THIRD-PARTY-NOTICES.txt
faa4d851c4bba49e7b2ed7a8e3f2410561a96aea3dca73b3f5e80e81079726e7 *dvpnd-THIRD-PARTY-NOTICES.txt
23632a5b12ba820c425db3659f1e08eabe921d002d835b40d451f2acf59b8f4f *BUILD-MANIFEST.txt

Node image 0.3.0 (for Node Manager 0.3.0)

Node images for Sentinel Node Manager 0.3.0 (Solana devnet). The app downloads the file for the host's CPU, checks its SHA-256 against the hash pinned in the app, and loads it into Docker, so a node can be deployed without the source or a build.

File	CPU
sentinel-dvpnd-image-0.3.0-linux-amd64.tar.gz	x86_64
sentinel-dvpnd-image-0.3.0-linux-arm64.tar.gz	arm64

• Contents: sentinel-dvpnd + sentinel-dvpn built from the Sentinel dVPN daemon cut final6.5 (commit 90014b2), devnet identity linked in, plus the protocol binaries (WireGuard, AmneziaWG, Xray/V2Ray, OpenVPN, Hysteria2). Licence texts are inside the image at /usr/share/licenses/node-image.
• Manual use: sha256sum -c --ignore-missing SHA256SUMS then docker load -i <file> → tag node-manager/dvpnd:prebuilt-0.3.0.
• Devnet only. Tokens on Solana devnet have no value.