- Install: download the latest package from mudfish.net, verify the
Makeself MD5, unpack the bzip2 tar ourselves (no installer script is
executed; path traversal and links rejected) into /opt/mudfish/<ver>.
- Update: checked at most daily; button-only; refused while the tunnel is
up; carries the saved login (.conf, .conf.db) into the new version,
restarts the daemon and keeps only the previous version.
- Remove: button with confirmation, and automatically when the plugin is
uninstalled: VPN off, daemon stopped, mudfish-tap removed,
/opt/mudfish deleted, plugin settings cleared.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
When autologin is rejected the panel offers '휴대폰으로 로그인 (QR)'. It opens
a 5-minute LAN relay to the launcher UI guarded by a one-time token (first
phone to open the QR URL is the only client allowed) and shows the URL as a
QR code. The relay closes as soon as a new session appears, on cancel, on
expiry, and on unload.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Detect resume (boottime-monotonic jump) and tear down the tunnel: on wake
NetworkManager drops Mudfish's relay route and all traffic black-holes.
- Turn the tunnel off on plugin unload (Deck shutdown/restart).
- One verified teardown path for disconnect, connect failure/timeout and
node-change failure; keep the route snapshot if tap0 stays up.
- Toggle can always turn off a stuck tunnel; status failure with tap0 up
is reported as an error, not off.
- Re-sign in once when the cloud rejects an expired jwt.
- Expire cached pings after 10 minutes.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Prepare signs in on load (never connects), system CA bundle for HTTPS,
root-owned deploy extraction.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ysj7705andClaude Opus 5.5