-
Notifications
You must be signed in to change notification settings - Fork 0
Quick Start
Kris Armstrong edited this page May 19, 2026
·
1 revision
# Download the latest .pkg from Releases:
gh release download --repo krisarmstrong/seed --pattern '*-darwin-arm64.tar.gz'
tar -xzf seed-*-darwin-arm64.tar.gz
sudo ./seedThe binary listens on https://localhost:8443 with a self-signed certificate. Your browser will warn — accept the exception once. (mkcert-style trusted local certs are tracked as a follow-up.)
Pick the package matching your distro:
# Ubuntu / Debian
gh release download --repo krisarmstrong/seed --pattern '*_amd64.deb'
sudo dpkg -i seed_*_amd64.deb
# Fedora / RHEL
gh release download --repo krisarmstrong/seed --pattern '*.x86_64.rpm'
sudo rpm -ivh seed-*.x86_64.rpmBoth packages install a systemd unit; the service starts automatically. Visit https://<host>:8443.
gh release download --repo krisarmstrong/seed --pattern "*-windows-amd64.zip"
Expand-Archive .\seed-*-windows-amd64.zip
.\seed.exe- Navigate to
https://localhost:8443/(or wherever you installed it). - The setup wizard appears. The backend pre-generates a strong password — accept it or set your own. The wizard also displays the admin username (default:
admin). - Save. You're logged in.
The Roots dashboard is the default landing. From there:
- Roots — path / hop analysis from this host outward
- Canopy — Wi-Fi planning + scan
- Shell — security posture (open ports, missing patches, weak ciphers)
- Sap — live telemetry stream
- Harvest — saved snapshots / reports
-
Raw socket privileges: ICMP traceroute + ARP discovery need
CAP_NET_RAW. The.deb/.rpminstall handles this via systemdAmbientCapabilities. For the dev binary, see Contributing —make dev-runsets the cap for you. - Network access: plug into the network you want to diagnose. Seed auto-selects the most "interesting" interface but you can change it in Settings.
curl -sk https://<host>:8443/__version | jqExpected response:
{
"version": "vX.Y.Z",
"commit": "abcd1234",
"buildTime": "2026-05-18T22:42:09Z",
"uiBuildHash": "f51f1faf43d456d984f528c66a89f3d0"
}uiBuildHash non-empty confirms the React frontend was embedded (i.e., a real make build, not a backend-only make quick).