Self-host Roost v0.5.0

macOS and Linux

Install the verified v0.5.0 binary

The script resolves your OS and architecture to one published release asset, downloads it with its .sha256 sidecar, refuses to install on a digest mismatch, and puts the binary in$HOME/.local/bin. Choose one of the two coordinator quickstart modes below after it finishes.

curl -fsSL https://raw.githubusercontent.com/cefege/roost/main/install-binary.sh | bash

macOS

Homebrew

brew install cefege/tap/roost

Automatic HTTPS

Let Tailscale Serve the coordinator

With no endpoint flags, quickstart discovers the coordinator's tailnet hostname, keeps its plaintext listener on loopback, provisions HTTPS on port 4102, and configures Tailscale Serve. The coordinator, workers, and browsers using this route join the same tailnet.

"$HOME/.local/bin/roost" quickstart

Direct HTTPS

Bring your own trusted hostname and certificate

Supply the coordinator URL, certificate, and key together. Direct coordinator quickstart does not resolve or call Tailscale; you own DNS, routing, firewall policy, and a certificate chain trusted by every browser and worker that connects to this origin.

"$HOME/.local/bin/roost" quickstart \
  --coordinator-url "https://roost.example.com:8443" \
  --tls-cert "$HOME/.config/roost/tls/fullchain.pem" \
  --tls-key "$HOME/.config/roost/tls/privkey.pem"

Release assets

One binary per host, each with a checksum

Every published asset ships a .sha256 sidecar, androost is byte-identical toroost-darwin-arm64 so older release links keep working. See the releases.

Next steps