Repository navigation

Make AltServer-Linux run unattended: wireless refresh, a setup web UI, and website for setup and failure reporting - #138

Open

Ben-Diehlci wants to merge 123 commits into

NyaMisty:newfrom

Ben-Diehlci:new

Commits on Sep 14, 2026

ci: unbreak GitHub Actions build

bwdiehl
and
claude
committed
df570bd
ci: move first-party and docker actions to node24 majors

bwdiehl
and
claude
committed
6cd382a
ci: replace third-party uploader with actions/upload-artifact@v7

bwdiehl
and
claude
committed
8494e36
buildenv: fix two of three corecrypto build failures (does NOT close #111)

bwdiehl
and
claude
committed
a266861
anisette: make Linux anisette failures legible, and fix two real bugs

bwdiehl
and
claude
committed
b885501
daemon: warn at startup when no anisette server is configured, and add REVIVAL.md

bwdiehl
and
claude
committed
301eb8b
REVIVAL.md: record the actual deployment target

bwdiehl
and
claude
committed
6be911b
REVIVAL.md: fix TODO numbering

bwdiehl
and
claude
committed
d674cd1
REVIVAL.md: network topology resolved -- VM is bridged, same segment as the phone

bwdiehl
and
claude
committed
8674780
REVIVAL.md: multicast confirmed, and mDNS advertisement fails silently

bwdiehl
and
claude
committed
60c2c56
dnssd: detect and report mDNS advertisement failure instead of silently succeeding

bwdiehl
and
claude
committed
04e928a
REVIVAL.md: fill in the commit SHA for the dnssd fix

bwdiehl
and
claude
committed
cc011dd
gitignore: ignore macOS .DS_Store and AppleDouble files

bwdiehl
and
claude
committed
ebfbc5b
REVIVAL.md: record two future goals -- self-contained deploy, and a web UI

bwdiehl
and
claude
committed
fa1a0a0
REVIVAL.md: correct the refresh-path analysis -- #131 is bootstrap-only, and 2 lines

bwdiehl
and
claude
committed
6663597
REVIVAL.md: record the full deployment research -- prereqs and silent failures

bwdiehl
and
claude
committed
d094368
ldid: fix the iOS 26 hash-agility truncation (issue #131)

bwdiehl
and
claude
committed
0e8090b
REVIVAL.md: correct the #131 commit SHA

bwdiehl
and
claude
committed
ca2022c
Clear the last two bootstrap blockers: GSA client-info, and argv parsing

bwdiehl
and
claude
committed
04dd7ee
REVIVAL.md: record the bootstrap-blocker commit SHA

bwdiehl
and
claude
committed
907e7fe
buildenv: fix corecrypto layer 3, and add BOOTSTRAP.md

bwdiehl
and
claude
committed
790973d
REVIVAL.md: corecrypto fully builds -- #111 closed

bwdiehl
and
claude
committed
dbb9977
BOOTSTRAP.md: do not enable usbmuxd on Ubuntu -- it is udev-activated

bwdiehl
and
claude
committed
cd137ba
BOOTSTRAP.md: install jq, which the Phase 2 anisette checks use

bwdiehl
and
claude
committed
bbb3c03
BOOTSTRAP.md: how to get the binary onto the VM, and what belongs in Portainer

bwdiehl
and
claude
committed
6bad8a9
BOOTSTRAP.md: Safari auto-expands the artifact, and how to verify the binary

bwdiehl
and
claude
committed
fe5cda3
argv: register --help as a long option

bwdiehl
and
claude
committed
061af4c
REVIVAL.md: record bootstrap progress -- phases 0, 1 and 3 complete

bwdiehl
and
claude
committed
957f903
BOOTSTRAP.md: the anisette persistence check could report success on no data

bwdiehl
and
claude
committed
b49d922
Phase 2: a Portainer stack for anisette, and the volume path the docs get wrong

bwdiehl
and
claude
committed
3cd30ac
REVIVAL.md: anisette deployed and verified; the GSA sanitizer is load-bearing

bwdiehl
and
claude
committed
2fd4a92
BOOTSTRAP.md: make the Phase 4 command paste-safe, and keep the password out of history

bwdiehl
and
claude
committed
9fbf8b7
altsign: report a non-200 from Apple's auth endpoint instead of "invalid response"

bwdiehl
and
claude
committed
118e9fb
argv: accept credentials from the environment, not only from argv

bwdiehl
and
claude
committed
4f40fdd
Containerise AltServer: image, combined stack, and a publish workflow

bwdiehl
and
claude
committed
1fe89a3
REVIVAL.md: PR #135's GSA client-info block is CONFIRMED against real Apple infra

bwdiehl
and
claude
committed
6e2d81d
web: status dashboard -- slice 1 of the setup portal

bwdiehl
and
claude
committed
5b4fe84
web: pairing wizard, and a draft confirmation for upstream PR #135

bwdiehl
and
claude
committed
af35345
README: correct the parts that were actively wrong, document what is actually needed

bwdiehl
and
claude
committed
725677d
web: pairing wizard detects an existing backup instead of nagging

bwdiehl
and
claude
committed
3f29bcb
altsign: give every GrandSlam request its own connection (the 429 fix)

bwdiehl
and
claude
committed
eb053f1
docs: zero-credential probe for the GrandSlam connection-reuse theory

bwdiehl
and
claude
committed
24fbae9
docs: the probe must skip TLS validation, as AltServer does

bwdiehl
and
claude
committed
1b9b8d5
REVIVAL.md: connection-reuse cause PROVEN, at zero cost to the Apple ID

bwdiehl
and
claude
committed
887d459
ci: do not cancel sibling build legs when one fails

bwdiehl
and
claude
committed
38bddab
deploy: named volumes, so the stack needs no host prep at all

bwdiehl
and
claude
committed
7f2032e
image: fetch the current AltStore IPA automatically on start

bwdiehl
and
claude
committed
215885a
web: install flow with 2FA entry -- slice 3, the setup portal is complete

bwdiehl
and
claude
committed
5e41eee
ci: build amd64 only on branch pushes, all four on tags

bwdiehl
and
claude
committed
023755c
deploy: run the web UI as a stack service, reachable at http://<host>:8099

bwdiehl
and
claude
committed
663cfaf
README: rewrite for the current state of the fork

bwdiehl
and
claude
committed
f6e98de
web: serve concurrently, and make install errors visible

bwdiehl
and
claude
committed
9baa62b
web: auto-populate the device UDID on the install page

bwdiehl
and
claude
committed
d7e3da5
web: fix two status checks that were reporting nonsense

bwdiehl
and
claude
committed
a79aab5
deploy: mDNS from a container needs AppArmor rules -- ship a tested profile

bwdiehl
and
claude
committed
70b646e
REVIVAL.md: bring the log up to date through the AppArmor finding

bwdiehl
and
claude
committed
45486e5
web: fix a JavaScript syntax error that broke every page script

bwdiehl
and
claude
committed
501e40f
ci: rebuild the image when web/, the entrypoint or the submodule change

bwdiehl
and
claude
committed
f7f3130
REVIVAL.md: record the stale-image and JS-escape findings

bwdiehl
and
claude
committed
503225f
Add two CI guards for the failures that reported success

bwdiehl
and
claude
committed
cfda5b2
Add netmuxd: wireless device transport for unattended refresh

bwdiehl
and
claude
committed
e21b261
Bump runtime base to trixie: netmuxd needs glibc 2.38

bwdiehl
and
claude
committed
3cefd9e
REVIVAL.md: record the refresh-path investigation

bwdiehl
and
claude
committed
06f0314
Fix duplicate depends_on key, and guard against the class

bwdiehl
and
claude
committed
3616c91

Commits on Sep 15, 2026

Fix wireless refresh: parse usbmux network addresses in both sockaddr layouts

bwdiehl
and
claude
committed
033cb73
Rebuild the image when libraries/ changes, and derive that rule from the makefiles

bwdiehl
and
claude
committed
55bf6be
Require a bare filter entry for submodules that are themselves compile inputs

bwdiehl
and
claude
committed
25cc99e
Wireless refresh confirmed working on the deployed stack

bwdiehl
and
claude
committed
ef5deec
Fix a reachability check that could never pass, and put nav tabs on every page

bwdiehl
and
claude
committed
b7da4ea
Drop the 4-hourly scheduled build

bwdiehl
and
claude
committed
dbd1df2
Merge pull request #2 from Ben-Diehlci/bd/revival
Ben-Diehlci
authored
9eca755
REVIVAL.md: record the post-merge repository audit as a tracked checklist

bwdiehl
and
claude
committed
b4767eb
Redact the anisette identifiers the install page was printing, and scrub personal data

bwdiehl
and
claude
committed
9b6d0c0
Repair the commit SHAs the history rewrite invalidated

bwdiehl
and
claude
committed
e6f3d2d
REVIVAL.md: record where credentials actually live, on the server not in the repo

bwdiehl
and
claude
committed
ccb2489
gitignore: refuse the file classes that would leak credentials or identity

bwdiehl
and
claude
committed
9cd0399
Rewrite BOOTSTRAP.md as a guide someone else can actually follow

bwdiehl
and
claude
committed
2f07f58
Close the remaining audit items, and tidy the repository layout

bwdiehl
and
claude
committed
5db98d1
REVIVAL.md: close the wireless-refresh TODO, which was confirmed two days ago

bwdiehl
and
claude
committed
5702f8a
Make rewrite_altserver_source.py fail loudly, the last rewriter that did not

bwdiehl
and
claude
committed
e991c23
Build the sub-make once, give Linux recovery advice, and ship a credential-hygiene tool

bwdiehl
and
claude
committed
326bbc6
credential-hygiene: fix a double-counted grep result, and label skipped sections

bwdiehl
and
claude
committed
94493ed
buildenv: push to the repo owner's namespace, not a hardcoded one

bwdiehl
and
claude
committed
eccd51b
buildenv: build amd64 first, so a QEMU failure does not cost the image CI needs

bwdiehl
and
claude
committed
adce684
Build against this fork's own toolchain images, not another account's

bwdiehl
and
claude
committed
b1ec101
Stop credentials reaching docker logs, and bound the logs that remain

bwdiehl
and
claude
committed
39b2263
credential-hygiene: stop counting redacted lines as leaks

bwdiehl
and
claude
committed
104a98c
stack: select the AppArmor profile by variable instead of by editing the file

bwdiehl
and
claude
committed
2c7109f
apparmor: verify the profile loaded against the kernel, not against a count

bwdiehl
and
claude
committed
14e3bde
tests: use synthetic fixtures -- the old ones were a real anisette identity

bwdiehl
and
claude
committed
27b0d33
web: look for the phone on both transports, not just USB

bwdiehl
and
claude
committed
c94b31f
web: live log view on the status page, for watching a refresh happen

bwdiehl
and
claude
committed
fbcd9ca

Commits on Sep 16, 2026

Commits on Sep 22, 2026

README: document building for the other three architectures

bwdiehl
and
claude
committed
f94de36
README: how to tag, and the inherited-tags trap

bwdiehl
and
claude
committed
a04a894
ci: make the toolchain namespace a repository variable, not a file edit

bwdiehl
and
claude
committed
40d2ea5
README: document the Raspberry Pi path, and make the stack's build fallback arch-aware

bwdiehl
and
claude
committed
41c1c59
README: one platform guide, organised by what the reader has

bwdiehl
and
claude
committed
643fc84
README: armv7 and i386 need a cable, not a rescue

bwdiehl
and
claude
committed
2eec26d
README: a device table, because nobody knows their architecture offhand

bwdiehl
and
claude
committed
666daa6
README: state the values, and put the AppArmor how-to where everyone reads it

bwdiehl
and
claude
committed
a077ee3
README: define anisette, link the issues, signpost non-amd64 readers

bwdiehl
and
claude
committed
cf5452f
Spell every dash in ASCII, and guard it

bwdiehl
and
claude
committed
2558acc

Commits on Sep 25, 2026

mDNS: re-register the advertisement when it disappears

bwdiehl
and
claude
committed
89c160d
Report failures to machines, not just to a human reading the page

bwdiehl
and
claude
committed
0ea8528

Commits on Sep 26, 2026

Make a rewriter edit rebuild, and stop the clock check reporting OK for work it skipped

bwdiehl
and
claude
committed
297aa01
Close the last four: make a broken deployment visible as broken

bwdiehl
and
claude
committed
a000f87
Healthcheck the server, not whether the phone is home

bwdiehl
and
claude
committed
2e56f30
Status history: answer "when did this start", not just "is it broken"

bwdiehl
and
claude
committed
d0a4e1b
Do not blame the pairing record for a phone that is simply unreachable

bwdiehl
and
claude
committed
ac4c9e9
Fix the CI-red guard: my pairing test depended on undeclared host state

bwdiehl
and
claude
committed
f65d6b6
Stop the 5-minute healthcheck provisioning against Apple

bwdiehl
and
claude
committed
20ab925
Judge the status code on the server, and stop polling Apple's provisioning route

bwdiehl
and
claude
committed
0b4e931
Stop reporting inconclusive probes as confident outages

bwdiehl
and
claude
committed
efc3c3d
Diagnosis audit, batch 2: stop inventing causes across the remaining checks

bwdiehl
and
claude
committed
ba3edc7
README: fix what the audit found, and make documentation executable

bwdiehl
and
claude
committed
0bad864
README: the last two audit items, and a copy-paste trap found while fixing them

bwdiehl
and
claude
committed
7e0719a
REVIVAL: write up the two audits

bwdiehl
and
claude
committed
ef4e3a3
Restore the clock check on the polled path, via the HTTP Date header

bwdiehl
and
claude
committed
ca2a3ac
History timeline: hover a bar to see when that check ran

bwdiehl
and
claude
committed
04d9854