Repositories & status¶
Every Kiwi Network repository lives under
github.com/derlocke-ng. "Released" means the
repo has a version tag, which is what kiwi-updater installs. "Tracks main"
means kiwi follows the default branch, because there is no tag yet.
Active¶
| Repository | What it is | Release | In the catalog | License |
|---|---|---|---|---|
| kiwi-server | builds the network's machines: fleet file → scripts, configs, install ISOs | tracks main (2.2.0) |
no, use kiwi add |
GPL-3.0+ |
| kiwi-updater | installs and updates apps from git catalogs | v2.0.0 | yes | GPL-3.0+ |
| kiwi-catalog | the Kiwi app catalog | (a list) | n/a | |
| kiwi-killswitch | fail-closed VPN kill switch for GNOME | v0.2.2 | yes | GPL-3.0+ |
| ensconce | post-install setup for Bluefin-DX | v2.1.1 | yes | GPL-3.0+ |
| kiwi-fox | isolated browser identities in rootless Podman | v0.1.3 | yes | GPL-3.0+ |
| kiwi-plugin-tor | kiwi-fox provider: Tor | tracks main (0.1.0) |
yes | GPL-3.0+ |
| kiwi-plugin-vpn | kiwi-fox provider: gluetun VPN | tracks main (0.1.0) |
yes | GPL-3.0+ |
| kiwi-plugin-9proxy | kiwi-fox provider: 9proxy | tracks main (0.1.0) |
yes | GPL-3.0+ |
| kiwi-plugin-myst | kiwi-fox provider: Mysterium | tracks main (0.1.0) |
yes | GPL-3.0+ |
| kiwi-cli-tools-desktop | pweb, select-server, tethering |
v1.0.0 | yes | GPL-3.0+ |
| kiwi-gen | in-browser SSH/TLS key & certificate manager | web page (live) | no | MIT |
| kiwi-pentesting | authorized-testing suite on kiwi-fox | scaffold, not installable | no | GPL-3.0+ |
| kiwi-network | this website and documentation | n/a | n/a | AGPL-3.0 |
Older and superseded¶
| Repository | What it was | Now |
|---|---|---|
| kiwi-cloud | the v1 cloud-node compose stack (2025) | superseded by kiwi-server's node-cloud role, which is that stack taken apart into modules |
| kiwi-vpn-monitor | a GNOME extension that watched the gateway and DNS and brought up WireGuard (2025) | its gateway detection lives on in kiwi-killswitch |
| kiwi-blog | a small Markdown static-site generator (MIT, 2025) | standalone; this site's docs theme takes its colours from it |
| kiwi-network-welcome | a one-line placeholder (2025) | n/a |
| kiwi-modules, kiwi-stack | empty repositories | n/a |
Known gaps¶
These come straight from the repositories:
- kiwi-server: the first boot of each target end to end on real hardware is not yet verified from the new pipeline. The generators are tested in CI.
- kiwi-fox providers: they need kiwi-fox's provider subsystem, which is on
kiwi-fox
mainbut not in the v0.1.3 release (see the workaround). The VPN, 9proxy and Mysterium modules have not been validated end to end against a real account. - kiwi-updater: installing an app's kiwi-app dependencies first is on
main, after v2.0.0. A hosted registry of trusted catalogs (kiwi catalog browse) and tag signature verification are planned. - kiwi-pentesting: the CLI, GUI and installer are not written yet.