Install Jonot

All Jonot native binaries are published to downloads.jonot.io. Every release ships both a versioned archive path (immutable, safe to pin) and a latest/ path (updated on each release, short cache TTL).

Jonot Host

The Jonot Host app runs on a back-office Linux machine and keeps queues running through internet outages, syncing automatically when connectivity returns.

Linux

Package	Link
Debian / Ubuntu (.deb)	jonot-host-linux.deb
Fedora / RHEL (.rpm)	jonot-host-linux.rpm

Install via apt (Debian / Ubuntu)

Add the Jonot repository once, then use apt upgrade for future updates:

curl -fsSL https://downloads.jonot.io/host/latest/jonot-host-public.asc \
  | sudo gpg --dearmor -o /usr/share/keyrings/jonot-host.gpg
echo "deb [signed-by=/usr/share/keyrings/jonot-host.gpg] https://downloads.jonot.io/host/apt stable main" \
  | sudo tee /etc/apt/sources.list.d/jonot-host.list
sudo apt update && sudo apt install jonot-host

Install via dnf/rpm (Fedora / RHEL)

Add the Jonot repository once, then use dnf upgrade for future updates:

sudo rpm --import https://downloads.jonot.io/host/latest/jonot-host-public.asc
sudo tee /etc/yum.repos.d/jonot-host.repo <<'REPO'
[jonot-host]
name=Jonot Host
baseurl=https://downloads.jonot.io/host/rpm
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://downloads.jonot.io/host/latest/jonot-host-public.asc
REPO
sudo dnf install jonot-host

macOS and Windows

Package	Link
macOS (.dmg)	JonotHost-latest.dmg
Windows (.msi)	JonotHost-latest.msi

The macOS and Windows builds update themselves in place once installed: Sparkle on macOS, WinSparkle on Windows. The Linux .deb / .rpm packages update through the apt/dnf repository configured above.

Jonot Kiosk, Desk, and Display desktop clients

The kiosk, desk, and display apps also run as native desktop clients (Windows, macOS, Linux). They embed the same kiosk/desk/display web app in an embedded Chromium-based browser engine (fetched once on first run), so they inherit branding, all supported languages, and live sync. The kiosk and desk clients add native capabilities the browser can’t: local receipt printing over TCP/9100 and automatic failover to an on-premises host during internet outages. The kiosk client also runs fullscreen with shortcut suppression and a PIN-gated exit. The display client is output-only — no printing, no PIN-gated exit — and keeps the screen awake automatically on macOS and Windows, without relying on the OS’s own power settings.

The clients update themselves in place once installed: Sparkle on macOS, WinSparkle on Windows. Linux .deb and .rpm are standalone packages with no managed repository — update by downloading and installing the new package.

Jonot Kiosk (desktop)

Package	Link
macOS (.dmg)	JonotKiosk-latest.dmg
Windows (.msi)	JonotKiosk-latest.msi
Debian / Ubuntu (.deb, amd64)	jonot-kiosk-linux-amd64.deb
Debian / Ubuntu (.deb, arm64)	jonot-kiosk-linux-arm64.deb
Fedora / RHEL (.rpm, amd64)	jonot-kiosk-linux-amd64.rpm
Fedora / RHEL (.rpm, arm64)	jonot-kiosk-linux-arm64.rpm

Jonot Desk (desktop)

Package	Link
macOS (.dmg)	JonotDesk-latest.dmg
Windows (.msi)	JonotDesk-latest.msi
Debian / Ubuntu (.deb, amd64)	jonot-desk-linux-amd64.deb
Debian / Ubuntu (.deb, arm64)	jonot-desk-linux-arm64.deb
Fedora / RHEL (.rpm, amd64)	jonot-desk-linux-amd64.rpm
Fedora / RHEL (.rpm, arm64)	jonot-desk-linux-arm64.rpm

Jonot Display (desktop)

Package	Link
macOS (.dmg)	JonotDisplay-latest.dmg
Windows (.msi)	JonotDisplay-latest.msi
Debian / Ubuntu (.deb, amd64)	jonot-display-linux-amd64.deb
Debian / Ubuntu (.deb, arm64)	jonot-display-linux-arm64.deb
Fedora / RHEL (.rpm, amd64)	jonot-display-linux-amd64.rpm
Fedora / RHEL (.rpm, arm64)	jonot-display-linux-arm64.rpm

For tamper-resistant public installs, layer an OS-level kiosk profile under the desktop kiosk — see Lock down the desktop kiosk.

Windows: getting past the security warnings

The Windows .msi installers are not yet code-signed (Authenticode signing is planned). Until they are, Windows shows the app as an “Unknown publisher”, and both Microsoft Edge and Microsoft Defender SmartScreen block the file the first time you download and run it. This is expected — it happens to every new, low-volume installer, not because anything is wrong with the download.

How to be sure the download is genuine

You don’t have to take the browser’s word for it. Every desktop release also publishes a signed SHA256SUMS file — follow Verify your download below to confirm the .msi is byte-for-byte what Jonot published before you run it.

Step 1 — allow the download in Microsoft Edge

Edge refuses to keep the file at first, showing “JonotDesk-x.y.z.msi isn’t commonly downloaded. Make sure you trust it before you open it.” (The exact filename depends on the link you used — the latest/ links download as JonotDesk-latest.msi.)

Open the Downloads panel (the ↓ icon in the toolbar), hover the blocked item, click the ⋯ (more actions) button next to it, and choose Keep.

Edge asks for one more confirmation — “Make sure you trust JonotDesk-x.y.z.msi before you open it.” Click the Keep anyway button (you may need to expand the split Delete button to reveal it).

The download is now kept and an Open file link appears. Click it to launch the installer.

Note

Other browsers show an equivalent prompt. In Chrome the blocked download has a Keep option in the same overflow menu; in Firefox, right-click the item and choose Allow download.

Step 2 — allow the app to run past SmartScreen

The first time the installer runs, Microsoft Defender SmartScreen stops it with “Windows protected your PC … prevented an unrecognised app from starting.” The Run anyway button is hidden — click the More info link to reveal it.

SmartScreen then shows the application name and publisher, and a Run anyway button appears next to Don’t run. Click Run anyway to start the installer.

The MSI installer then proceeds normally. You only see these prompts when you download and first run an installer — the installed app launches without them afterwards. In-place updates delivered by WinSparkle download outside the browser, so they skip the Edge download warning; SmartScreen may still prompt once for the updated installer until the app builds enough reputation. Both prompts should stop once the installers are code-signed and the signing certificate has built up SmartScreen reputation.

Android apps

Jonot Kiosk (Android)

Tablet self-check-in kiosk.

Install method	Link
Google Play (recommended)	Get it on Google Play
Direct APK (on-premises / MDM)	jonot-kiosk.apk

Jonot Desk (Android)

Staff desk app for calling and managing tickets.

Install method	Link
Google Play (recommended)	Get it on Google Play
Direct APK (on-premises / MDM)	jonot-desk.apk

Offline host after an unattended reboot

If you rely on the Android desk as your on-premises offline host (a desk-only location with no kiosk), note one edge case: after an unattended reboot while the internet is already down, the desk does not resume its host role until a staff member opens the app once. Outage failover while the desk is open and in use works normally — only the reboot-with-WAN-already-down case needs a single interaction to recover.

Jonot Display (Android)

Output-only queue display for TVs, monitors, and tablets, including Android TV and Fire TV.

Install method	Link
Google Play (recommended)	Get it on Google Play
Direct APK (on-premises / MDM)	jonot-display.apk

Verify your download

The desktop host, desktop kiosk, desktop desk, and desktop display each publish their own SHA256SUMS / SHA256SUMS.asc / Jonot<App>-public.asc under their respective <app>/latest/ paths (e.g. host/latest/jonot-host-public.asc, kiosk/latest/JonotKiosk-public.asc, desk/latest/JonotDesk-public.asc, display/latest/JonotDisplay-public.asc). All four are signed by the same Jonot release GPG key (C2EF 70E9 7821 0056 C5C8 2F42 E588 CB26 8697 F7C3). The detached signature lives in SHA256SUMS.asc. Verifying the signature proves the checksum file was published by Jonot; the checksum then proves your downloaded binary matches what was published.

Note: the .dmg is verified by macOS Gatekeeper and notarization rather than SHA256SUMS, so sha256sum -c --ignore-missing covers the .deb, .rpm, and .msi but not the .dmg.

The steps below use the host as the worked example. Substitute kiosk, desk, or display (and JonotKiosk-public.asc, JonotDesk-public.asc, or JonotDisplay-public.asc) for the other apps.

Step 1 — download the checksum file and public key

curl -fsSLO https://downloads.jonot.io/host/latest/SHA256SUMS
curl -fsSLO https://downloads.jonot.io/host/latest/SHA256SUMS.asc
curl -fsSLO https://downloads.jonot.io/host/latest/jonot-host-public.asc

Step 2 — import and verify the key fingerprint

gpg --import jonot-host-public.asc
gpg --fingerprint C2EF70E978210056C5C82F42E588CB268697F7C3

The fingerprint must match C2EF 70E9 7821 0056 C5C8 2F42 E588 CB26 8697 F7C3 exactly. If it does not, discard the download.

Step 3 — verify the checksum file signature

gpg --verify SHA256SUMS.asc SHA256SUMS

You should see Good signature from "Jonot Release <releases@jonot.io>".

Step 4 — verify your downloaded file

sha256sum -c SHA256SUMS --ignore-missing

An OK result confirms the file is intact.

Release notes

See the host changelog for per-version release notes. All native app releases are also listed on the GitHub Releases page.