Skip to content
Formless Host

System requirements

Host

Section titled “Host”

Official production releases target Linux x86-64 with resource-enforced cgroup v2. The release contains Host, formless-pluginctl, the checksum-pinned qualified runsc, the narrow runtime adapter, and the system service. Podman packages are installed by the release installer when required.

Production qualification fails closed if runsc cannot create an enforced cgroup scope. runsc --ignore-cgroups is not an accepted fallback.

Click

Section titled “Click”

Use a current Chromium-family browser with WebAssembly, WebGL, IndexedDB, and WebSocket support. HTTPS or localhost is preferred because browser Web Crypto can keep the pairing key non-exportable. An explicitly enabled tailnet HTTP deployment uses an origin-bound P-256 software key in IndexedDB.

Click switches to touch presentation when the device’s shortest viewport side is below 700 CSS pixels. /mobile forces that presentation for testing or preference.

Network

Section titled “Network”
  • The browser must reach Host’s HTTP/WebSocket listener.
  • Host must reach approved OCI registries during installation or update.
  • A plugin has no network by default. Exact external destinations require an approved net.connect(host,port) grant.
  • HTTPS and WSS are both supported through that same end-to-end TLS egress path.

Development checkout

Section titled “Development checkout”

Repository development additionally uses Rust/Cargo, Node.js/npm, and the release-pinned Emscripten toolchain for Click runtime builds. End users do not need these tools.