Debian

What is new

• Added phone invite delivery receipts and bounded retransmission.
• Duplicate and delayed canceled-call invitations do not reopen the call window.
• The node reports encryption and signal send failures instead of false success.

Compatibility

Install both packages of the same version together. Android: 1.0.0 build 9.

Installation

1. Download both files into one folder: yandi-node_*.deb and yandi-desktop_*.deb.
2. Optional, check the files:

   sha256sum yandi-node_*.deb yandi-desktop_*.deb

   and compare with the sums above.
3. Install both packages with one command (APT will resolve the dependencies):

   sudo apt install ./yandi-node_*.deb ./yandi-desktop_*.deb

4. Start the shell: the YANDI icon in the “Internet” menu, or the command yandi-desktop. On the first start it offers to set a password and create the private environment.
5. To keep the node running as a system service and to open the firewall ports, follow the guide installed with the package: /usr/share/doc/yandi-node/DEPLOYMENT.md.

Server without the shell (console only)

The shell (the window) is optional: the node can be fully set up and managed from a terminal. This is how a node is usually installed on a server.

1. Install the node only

Download only yandi-node_*.deb (the yandi-desktop package is needed just for the management window) and install it:

sudo apt install ./yandi-node_*.deb

2. First setup

Run it as a regular user (not root): the node data lives in that user's home directory. The wizard asks for the language and the seed phrase length (24 words by default; 12 or 18 are possible), sets the owner password, shows the seed phrase, offers an optional control word, creates the private environment and asks where to keep backups of the links:

yandi setup

Write the seed phrase on paper and check it. It is shown once; with it (and the control word, if you set one) the node is fully restored on any machine: the same identity, the same trust. The control word is one word (8–64 characters, case matters) that you invent and keep apart from the seed phrase; without it the seed will not restore the node, and if you forget it the node cannot be brought back. The node number for checking at restore is shown at setup. Without a terminal: yandi setup --seed-file seed.txt --password-stdin --backup-dir /media/user/FLASH --yes (the phrase goes to a new file with mode 0600).

3. Backups of the links and restore

Backups (paired phones, contacts, groups) are written to the chosen place, into a yandi-node folder; the node checks the write itself and warns if the place is on the system disk. 7 automatic backups are kept; a backup is made within 10 minutes of a change. Later: yandi admin backup status | set-dir PATH | now. Restore on a new machine: yandi setup --restore (seed phrase, control word, the node number to compare, optionally a .yandibak file or the yandi-node folder); check a phrase and word without changing anything: yandi setup --check.

4. Service and ports

The package itself enables and starts the systemd service yandi-node@YOUR_USER for the user who installed it through sudo: the node runs in the background and comes up after a reboot. Until yandi setup it just waits for the first setup. Check:

systemctl status yandi-node@$USER
journalctl -u yandi-node@$USER -f

# if the service was not enabled automatically (for example, the package was not installed through sudo):
sudo systemctl enable --now yandi-node@$USER

Open the ports (an example for ufw; for nftables see /usr/share/doc/yandi-node/DEPLOYMENT.md): 8444/TCP — entrance for the phone app; 9000/UDP and 10000/UDP — the node network. We also recommend bigger network buffers (otherwise the kernel drops UDP packets under load; the node warns at start if the receive buffer is under 4 MB): 64 MB for receiving and sending and a longer queue of packets from the network card. The last command shows the values in effect: 67108864, 67108864 and 5000.

sudo ufw allow 8444/tcp
sudo ufw allow 9000/udp
sudo ufw allow 10000/udp

printf 'net.core.rmem_max=67108864\nnet.core.wmem_max=67108864\nnet.core.netdev_max_backlog=5000\n' | sudo tee /etc/sysctl.d/99-yandi.conf
sudo sysctl --system

# проверка / check
cat /proc/sys/net/core/rmem_max /proc/sys/net/core/wmem_max /proc/sys/net/core/netdev_max_backlog

Optional: the ring buffer of the network card itself is set with ethtool -g (show) and ethtool -G eth0 rx 4096 tx 4096 (set, within the limits the card reports); many cards, for example Realtek r8169, do not allow changing it.

5. Managing from the console

yandi admin asks for the administrator password (a 15-minute session). Without arguments it opens a menu; the main commands:

• yandi admin status — node status
• yandi admin devices — devices and users
• yandi admin pairing owner --host YOUR_ADDRESS — code and QR to pair a phone
• yandi admin invites show — invitation policy
• yandi admin device-promote ID — confirm an invited user
• yandi admin device-remove ID — unpair a device
• yandi admin vault status — private environment: lock, change password
• yandi admin bootstrap applications — applications from new nodes (for the owner of the entry-node list)

6. Connecting a phone

Run yandi admin pairing owner --host YOUR_PUBLIC_ADDRESS: the node prints a pairing code and a QR. On the first screen of the YANDI app point the camera at the QR or paste the code text (it starts with YANDI-PAIR-1:). The code is single-use.

7. Language

Console language: the --lang ru|en option, the YANDI_LANG=en variable or the saved choice (~/.config/yandi/lang). Without a choice the system language is used.

8. Log, updating, removal

• Service log: journalctl -u yandi-node -f.
• Updating: install the new package over the old one (sudo apt install ./yandi-node_*.deb), then sudo systemctl restart yandi-node. The data is kept.
• Removing the program but keeping the data: sudo apt remove yandi-node. Complete removal together with the data (wiped without a trace): sudo apt purge yandi-node; make sure the seed phrase is written down first.

Notes

• Requires Debian 12 (bookworm) or newer, 64-bit (amd64): glibc 2.36 or newer.
• Updating: install the new files the same way, over the old ones. The data is kept.
• Removing: sudo apt remove yandi-desktop yandi-node. The data stays in the user directory until you delete it yourself.