v0.1.0

Katacomb VPN 0.1.0

A desktop client for the Sentinel decentralized VPN network. Pick a node, pay for a session on-chain, and tunnel through WireGuard, AmneziaWG, OpenVPN, V2Ray, XRAY or Hysteria2.

What's New

• Six protocol support: WireGuard, V2Ray, XRAY, OpenVPN, AmneziaWG, Hysteria2
• Kill switch, split tunneling, DNS privacy (DoH on V2Ray-family), and auto-reconnect
• Multi-wallet support with BIP-39 import; seeds encrypted with OS keyring (libsecret)
• Provider console: register providers, create plans, lease and link nodes
• Map view with per-country node counts; virtualized table with filtering and latency probes
• Live traffic stats, real egress IP/geo check, tray integration

Platform Support

Linux x86_64 only. Tested on Debian 11+, Ubuntu 20.04+, and derivatives (Mint, Pop!_OS, Zorin).

Installation

Recommended: .deb

sudo apt install ./katacomb-vpn_0.1.0_amd64.deb

Includes a root daemon so connect/disconnect are password-free (after one re-login).

Alternative: AppImage

chmod +x katacomb-vpn-0.1.0.AppImage
./katacomb-vpn-0.1.0.AppImage

No install needed; each operation prompts for password.

Verifying Your Download

sha256sum -c SHA256SUMS --ignore-missing
gpg --verify SHA256SUMS.asc SHA256SUMS  # if signed

⚠️ Important

• Connecting spends real funds — sessions are blockchain transactions priced in udvpn.
• AppImage on Ubuntu 22.04/24.04: needs libfuse2 or the APPIMAGE_EXTRACT_AND_RUN=1 workaround (see README).
• Ubuntu 24.04+ AppImage: runs with Chromium sandbox disabled; prefer the .deb there.

Security Model

Node operators are treated as adversaries. All handshake data is validated through config-guard before being handed to privileged operations. See CLAUDE.md for full threat model and architecture.

License

GPL-3.0-or-later. Bundled binaries (v2ray, xray, hysteria, awg, tun2socks, openvpn) are under their respective licenses; see THIRD-PARTY-LICENSES.md.