Skip to content

Install Jonot

Download all Jonot native apps from downloads.jonot.io. Each release has a versioned archive path that does not change and a latest/ path that updates with each release and has a short cache lifetime.

The Jonot Host app runs on a back-office Linux machine and keeps queues running through internet outages, syncing automatically when connectivity returns.

PackageLink
Debian / Ubuntu (.deb)jonot-host-linux.deb
Fedora / RHEL (.rpm)jonot-host-linux.rpm

Add the Jonot repository once, then use apt upgrade for future updates:

Terminal window
curl -fsSL https://downloads.jonot.io/host/latest/jonot-host-public.asc \
| sudo gpg --dearmor -o /usr/share/keyrings/jonot-host.gpg
echo "deb [signed-by=/usr/share/keyrings/jonot-host.gpg] https://downloads.jonot.io/host/apt stable main" \
| sudo tee /etc/apt/sources.list.d/jonot-host.list
sudo apt update && sudo apt install jonot-host

Add the Jonot repository once, then use dnf upgrade for future updates:

Terminal window
sudo rpm --import https://downloads.jonot.io/host/latest/jonot-host-public.asc
sudo tee /etc/yum.repos.d/jonot-host.repo <<'REPO'
[jonot-host]
name=Jonot Host
baseurl=https://downloads.jonot.io/host/rpm
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://downloads.jonot.io/host/latest/jonot-host-public.asc
REPO
sudo dnf install jonot-host
PackageLink
macOS (.dmg)JonotHost-latest.dmg
Windows (.msi)JonotHost-latest.msi

The macOS and Windows builds update themselves in place once installed: Sparkle on macOS, WinSparkle on Windows. The Linux .deb / .rpm packages update through the apt/dnf repository configured above.

Jonot Kiosk, Desk, and Display desktop clients

Section titled “Jonot Kiosk, Desk, and Display desktop clients”

The kiosk, desk, and display apps also run as native desktop clients on Windows, macOS, and Linux. They show the web app in an embedded Chromium-based browser engine, which downloads once during the first run. They support the same branding, languages, and live updates as the web apps.

The kiosk and desk clients can print tickets over TCP port 9100 and switch to an on-premises host during internet outages. These features are not available in a browser. The kiosk also runs in fullscreen mode, blocks common shortcuts, and requires a PIN to exit. The display is output-only. It does not print or require a PIN to exit, and it keeps the screen awake on macOS and Windows.

The desk and display clients automatically check for updates with Sparkle on macOS and WinSparkle on Windows. When an update is ready, the app asks you to install it. The kiosk shows this prompt in its PIN-protected manager menu because it runs in fullscreen mode. Linux .deb and .rpm files do not use a managed repository. Download and install a new package to update them.

PackageLink
macOS (.dmg)JonotKiosk-latest.dmg
Windows (.msi)JonotKiosk-latest.msi
Debian / Ubuntu (.deb, amd64)jonot-kiosk-linux-amd64.deb
Debian / Ubuntu (.deb, arm64)jonot-kiosk-linux-arm64.deb
Fedora / RHEL (.rpm, amd64)jonot-kiosk-linux-amd64.rpm
Fedora / RHEL (.rpm, arm64)jonot-kiosk-linux-arm64.rpm
PackageLink
macOS (.dmg)JonotDesk-latest.dmg
Windows (.msi)JonotDesk-latest.msi
Debian / Ubuntu (.deb, amd64)jonot-desk-linux-amd64.deb
Debian / Ubuntu (.deb, arm64)jonot-desk-linux-arm64.deb
Fedora / RHEL (.rpm, amd64)jonot-desk-linux-amd64.rpm
Fedora / RHEL (.rpm, arm64)jonot-desk-linux-arm64.rpm
PackageLink
macOS (.dmg)JonotDisplay-latest.dmg
Windows (.msi)JonotDisplay-latest.msi
Debian / Ubuntu (.deb, amd64)jonot-display-linux-amd64.deb
Debian / Ubuntu (.deb, arm64)jonot-display-linux-arm64.deb
Fedora / RHEL (.rpm, amd64)jonot-display-linux-amd64.rpm
Fedora / RHEL (.rpm, arm64)jonot-display-linux-arm64.rpm

For tamper-resistant public installs, layer an OS-level kiosk profile under the desktop kiosk — see Lock down the desktop kiosk.

Windows: getting past the security warnings

Section titled “Windows: getting past the security warnings”

The Windows .msi installers are not yet code-signed. Until they are, Windows shows “Unknown publisher”. Microsoft Edge and Microsoft Defender SmartScreen also block the file the first time you download and run it. These warnings appear because the installer is new and has few downloads. They do not mean that the download is damaged.

Step 1 — allow the download in Microsoft Edge

Section titled “Step 1 — allow the download in Microsoft Edge”

Edge refuses to keep the file at first, showing “JonotDesk-x.y.z.msi isn’t commonly downloaded. Make sure you trust it before you open it.” (The exact filename depends on the link you used — the latest/ links download as JonotDesk-latest.msi.)

Microsoft Edge download panel warning that the JonotDesk MSI isn't commonly downloaded

Open the Downloads panel (the ↓ icon in the toolbar), hover the blocked item, click the (more actions) button next to it, and choose Keep.

Edge downloads overflow menu showing the Keep option for the blocked installer

Edge asks for one more confirmation: “Make sure you trust JonotDesk-x.y.z.msi before you open it.” Click the Keep anyway button (you may need to expand the split Delete button to reveal it).

Edge confirmation dialog with the Keep anyway option highlighted

The download is now kept and an Open file link appears. Click it to launch the installer.

Edge downloads panel showing the kept installer with an Open file link

Step 2 — allow the app to run past SmartScreen

Section titled “Step 2 — allow the app to run past SmartScreen”

The first time the installer runs, Microsoft Defender SmartScreen stops it with the message “Windows protected your PC … prevented an unrecognised app from starting.” Click More info to show the hidden Run anyway button.

Microsoft Defender SmartScreen dialog with only a More info link and Don't run button

SmartScreen then shows the application name and publisher, and a Run anyway button appears next to Don’t run. Click Run anyway to start the installer.

SmartScreen dialog expanded to show the Run anyway button after clicking More info

The MSI installer then continues. These prompts appear when you download and first run an installer. The installed app opens without them. WinSparkle downloads updates outside the browser, so Edge does not warn about them. SmartScreen may still warn once for an updated installer. The prompts stop after the installers are code-signed and the signing certificate gains enough SmartScreen reputation.

Tablet self-check-in kiosk.

Install methodLink
Google Play (recommended)Get it on Google Play
Direct APK (on-premises / MDM)jonot-kiosk.apk

Staff desk app for calling and managing tickets.

Install methodLink
Google Play (recommended)Get it on Google Play
Direct APK (on-premises / MDM)jonot-desk.apk

Output-only queue display for TVs, monitors, and tablets, including Android TV and Fire TV.

Install methodLink
Google Play (recommended)Get it on Google Play
Direct APK (on-premises / MDM)jonot-display.apk

The desktop host, kiosk, desk, and display each publish their own SHA256SUMS, SHA256SUMS.asc, and Jonot<App>-public.asc files under their respective <app>/latest/ paths (e.g. host/latest/jonot-host-public.asc, kiosk/latest/JonotKiosk-public.asc, desk/latest/JonotDesk-public.asc, display/latest/JonotDisplay-public.asc). All four are signed by the same Jonot release GPG key (C2EF 70E9 7821 0056 C5C8 2F42 E588 CB26 8697 F7C3). The detached signature is in SHA256SUMS.asc. Verify the signature to confirm that Jonot published the checksum file. Then verify the checksum to confirm that your download matches the published file.

The .dmg is verified by macOS Gatekeeper and notarization rather than SHA256SUMS, so sha256sum -c --ignore-missing covers the .deb, .rpm, and .msi but not the .dmg.

The steps below use the host as the worked example. Substitute kiosk, desk, or display (and JonotKiosk-public.asc, JonotDesk-public.asc, or JonotDisplay-public.asc) for the other apps.

Step 1 — download the checksum file and public key

Section titled “Step 1 — download the checksum file and public key”
Terminal window
curl -fsSLO https://downloads.jonot.io/host/latest/SHA256SUMS
curl -fsSLO https://downloads.jonot.io/host/latest/SHA256SUMS.asc
curl -fsSLO https://downloads.jonot.io/host/latest/jonot-host-public.asc

Step 2 — import and verify the key fingerprint

Section titled “Step 2 — import and verify the key fingerprint”
Terminal window
gpg --import jonot-host-public.asc
gpg --fingerprint C2EF70E978210056C5C82F42E588CB268697F7C3

The fingerprint must match C2EF 70E9 7821 0056 C5C8 2F42 E588 CB26 8697 F7C3 exactly. If it does not, discard the download.

Step 3 — verify the checksum file signature

Section titled “Step 3 — verify the checksum file signature”
Terminal window
gpg --verify SHA256SUMS.asc SHA256SUMS

You should see Good signature from "Jonot Release <releases@jonot.io>".

Terminal window
sha256sum -c SHA256SUMS --ignore-missing

An OK result confirms the file is intact.

See the host changelog for per-version release notes. All native app releases are also listed on the GitHub Releases page.