Desktop builds of Tenebra for Windows, macOS and Linux.
Windows is user-ready：run the installer (SmartScreen warns on an
unsigned build -> More info -> Run anyway); it sets up the background
service, and the in-app updater keeps both app and service current.
macOS is for advanced users, not click-to-run yet. The DMG alone
will NOT give you a working tunnel：macOS needs a root helper daemon
that is currently installed by hand with a sudo script
(scripts/macos/install-daemon.sh), and the build is unsigned (first
launch：System Settings -> Privacy & Security -> Open Anyway). Read
the "macOS note" in the README before downloading. A signed,
click-to-run macOS build is planned.
Linux：the Arch package (.pkg.tar.zst) is the click-to-run one
— pacman -U installs the app, the core and the systemd unit, and
systemctl enable --now tenebra starts the tunnel service. The .deb
and the AppImage install only the app and the core：the privileged
service still has to be set up once by hand with
scripts/linux/install-daemon.sh, because the Debian bundle cannot run
a post-install script. Updates for a packaged install come from your
package manager, not the in-app updater, which only works for the
AppImage.
Updates are delivered in-app and verified against the project's
minisign key before they install (on macOS the updater refreshes the
app, not the hand-installed daemon).
