Install Smaht Edge

<!-- order: 1 -->

Smaht Edge runs on a small Linux computer in your home and sets itself up: a name on your network, its own certificates, its database and its message broker. You only need a terminal for the installation itself.

What you need

  • A Raspberry Pi 4 or 5 with 4 GB of memory and 64-bit Raspberry Pi OS or Debian 12 or 13, or a 64-bit PC or mini PC with Debian 12 or 13 (amd64).
  • A wired or Wi-Fi network connection, and a few minutes. The installer adds Docker Engine and a few system packages if they are missing.

1. Download and check the bundle

Download the bundle for your computer from Downloads: arm64 for a Raspberry Pi, amd64 for a PC. Then compare its SHA-256 with the one on the downloads page:

sha256sum smaht-bundle-<version>-arm64.tar.gz

2. Run the installer

Unpack the bundle and run its installer with sudo. It checks everything first and changes nothing until every check passes; --dry-run shows what it would do without doing it.

tar -xzf smaht-bundle-<version>-arm64.tar.gz
sudo smaht-bundle-<version>-arm64/install/install.sh --bundle smaht-bundle-<version>-arm64 --dry-run
sudo smaht-bundle-<version>-arm64/install/install.sh --bundle smaht-bundle-<version>-arm64

At the end it shows a setup code on the terminal (it is never written to a log). Open the address it shows — https://smaht-xxxx.local — and create the owner's account with that code.

3. Trust your installation's certificate

Each installation makes its own certificate authority. Download it from the start page and install it on your phones and computers, so browsers trust https://smaht-xxxx.local without warnings.

Useful options

Option What it does
--dry-run checks and shows every change without making any
--alongside-pihole shares the machine with Pi-hole: the web app on ports 8443 and 8080, the host name kept, Pi-hole's time server
--host-name NAME a host name of your choice instead of the automatic smaht-xxxx
--https-port, --http-port other ports for the web app
--no-cloud switches the Smaht Cloud link off: linking is refused and nothing is ever sent
--require-signature refuses a bundle not signed by a release key this installation trusts
--uninstall stops and removes the services, keeps your settings and data
--purge removes everything, including your data (asks for the host name to confirm)

Running the installer again is safe: it repairs what is missing and keeps your data, secrets and settings.