Skip to content

v0.4.1

Choose a tag to compare

View all tags
@fr34aky fr34aky released this 15 Sep 18:42
· 73 commits to main since this release
v0.4.1
4f6273a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bug-fix release: the app picker now saves what it shows. Installs in place over any earlier release via the automatic update prompt, Check for updates, or sideload — identity, settings and app data are kept.

Changes since v0.4.0

  • App selection is saved on every toggle. The picker used to persist the selection only on Save; leaving with Back discarded the change while the rows still showed it, so an app could look selected that the tunnel never captured (#26). Every tap is now written immediately, and the bottom button just closes the screen (Done).
  • A note while connected. The tunnel takes the selection only when it is established, so a change made while the mesh is connected does not apply until the next connect. The picker now says so above Done whenever the node is running, and the note clears by itself after a disconnect.
  • The set the tunnel was built from is logged at connect (mesh apps: [...]), so a "my app is not captured" report can be settled from logcat.

No change to the embedded fips daemon (still android-hooks @ cc03494, upstream v0.5.1+22) or to any other screen. Repository-side, the CI build was repaired after Google retired the legacy tools SDK package, and the automated security-review workflow was removed in favour of manual review.

Install

Sideload the APK matching your device (adb install -r or open it on the phone); min SDK 26 (Android 8.0). Verify the download against the matching .sha256, or update from within the app.

  • universal — all three ABIs in one file. Installs anywhere; larger. Use this if unsure.
  • arm64-v8a — every 64-bit ARM phone from roughly 2016 on; the device-verified build.
  • armeabi-v7a — old 32-bit phones. Compiles and packages; not exercised on real 32-bit hardware.
  • x86_64 — Android emulator, Chromebooks.

Release APKs are signed with the key whose certificate SHA-256 is
aa905e32bd0058874d252990abba26c78ddd8fca018195ebd1cd232a99a7a8e1 — check a
fresh download with apksigner verify --print-certs <apk>. This matters most on a
first install: there is no previously installed signature for Android to
compare against, so the checksum and this fingerprint are the only things
identifying a genuine build. Subsequent updates are enforced against the key
automatically.

Caveats

Only arm64-v8a is exercised on real hardware; this release's picker changes were verified on the Android 16 emulator. armeabi-v7a compiles and packages but has not been run on a 32-bit device; x86_64 is emulator-verified.

Assets 11
Loading