Install

From zero to your first server

The on-server companion is rootmote-agent, a single Go binary that binds only to loopback. The app reaches it through an SSH tunnel; nothing new is exposed to the internet.

  1. 01

    Install the agent on a Linux VPS

    Run as root on the server:

    Linux (systemd)
    $ curl -fsSL https://raw.githubusercontent.com/rockclaver/rootmote-agent/main/scripts/install.sh | sudo bash

    The installer creates a rootmote system user, drops the binary at /usr/local/bin/rootmote-agent, installs and starts the systemd unit, and prints the installed version. To pin a release:

    Pin a specific version
    $ curl -fsSL https://raw.githubusercontent.com/rockclaver/rootmote-agent/main/scripts/install.sh | sudo bash -s -- --version 0.1.17

    Prefer to read it first? Download the script, inspect it, then run it yourself:

    Inspect first
    $ curl -fsSL https://raw.githubusercontent.com/rockclaver/rootmote-agent/main/scripts/install.sh -o rootmote-install.sh

    Then sudo bash rootmote-install.sh. The whole agent is reviewable on GitHub.

  2. 02

    Reach servers away from home

    For remote access, prefer a private overlay network such as Tailscale over public port-forwarded SSH:

    Install Tailscale (Linux)
    $ curl -fsSL https://tailscale.com/install.sh | sh

    Then add the server in the app using its Tailscale IP or MagicDNS name. A Mac on the same network as your phone needs no overlay; direct LAN SSH works.

  3. 03

    Add the server in the app

    Host, port 22, your SSH username, and the public key the app shows you. The agent listens only on 127.0.0.1:7676; the app opens an SSH tunnel to reach it. Never expose port 7676 on a public interface.

Server ready. Grab the app.

Add the host in rootmote; infrastructure changes still wait for your fingerprint.

Download on theApp StoreGet it onGoogle Play

Want to read what you just piped into sudo? rootmote-agent on GitHub · the security model