The Mac download is signed and checked by Apple, so it opens normally — no security warnings, no right-click workaround. Every file comes with a fingerprint you can verify.
Apple Silicon Macs run everything · other systems connect to one
$ unzip kosa8_0.1.0_darwin_arm64.zip $ sudo mv kosa8 kosa8d /usr/local/bin/ $ kosa8 daemon start $ kosa8 run alpine echo hi hi
$ spctl -a -vv /usr/local/bin/kosa8d accepted source=Notarized Developer ID $ shasum -a 256 -c checksums.txt kosa8_0.1.0_darwin_arm64.zip: OK
don't take our word for it
Your Mac can confirm the download came from us and hasn't been altered. Run the command on the left. If it says anything other than Notarized Developer ID, don't run the program.
That output is from the actual published file, checked after downloading it.
which download
The part that actually runs programs uses a feature built into Apple Silicon Macs. On everything else, kosa8 becomes a remote control for a Mac that's doing the work.
| Your computer | File | Runs things itself? |
|---|---|---|
| Mac with Apple chip | darwin_arm64.zip | Yes — everything |
| Mac with Intel chip | darwin_amd64.zip | No — connects to one |
| Linux | .deb .rpm .apk .tar.gz | No — connects to one |
| Windows | windows_*.zip | No — connects to one |
We'd rather you knew this before downloading than after. On Windows or Linux you can still drive everything from your usual terminal — the work just happens on a Mac elsewhere.
being upfront
docker commands work unchanged.