This release is a pre-release and may not be stable for production use.
Trustmux
A mobile companion for tmux / Byobu sessions. Run a lightweight daemon on your workstation; monitor and interact with your terminal sessions from your phone over your Tailscale network. No relay server — terminal data stays between your devices.
Works with plain tmux and with byobu. Byobu users get the live status bar chips; plain tmux users get everything else.
Two tiers:
- Free — PWA. Install one icon per machine directly from the browser.
- Paid — Native Flutter app with full ANSI colors, multi-machine management, and biometric auth.
Requirements
- tmux (byobu optional but recommended)
- Python 3.10+
- Tailscale installed, running, and connected
Install
Homebrew (macOS / Linux)
brew tap dustinkirkland/trustmux
brew install trustmux
trustmux enable # configure tailscale serve + start daemon
trustmux pair # generate pairing code; enter on phone
pip (PyPI)
pip install trustmux
trustmux enable
trustmux pair
Debian / Ubuntu (.deb)
Trustmux is bundled with byobu — installing byobu brings trustmux along:
sudo apt install byobu
trustmux enable
trustmux pair
Or with the PPA for the latest release:
sudo add-apt-repository ppa:dustinkirkland/byobu
sudo apt install byobu
trustmux enable
trustmux pair
Daily use
trustmux start # start daemon
trustmux stop # stop daemon
trustmux restart # restart daemon
trustmux status # show URL and running status
trustmux log # tail the daemon log
trustmux pair # generate a pairing code for a new device
trustmux unpair # list paired devices and remove them
Setup from source
cd mobile/
python3 -m venv .venv
.venv/bin/pip install -r requirements.txt
trustmux enable
trustmux pair
Configuration
| Path | Purpose |
|---|---|
~/.config/trustmux/tokens.json |
Paired device session tokens (mode 0600) |
~/.config/trustmux/trustmux.sock |
Admin Unix socket (mode 0600) |
~/.config/trustmux/trustmux.log |
Daemon log (mode 0600) |
~/.config/trustmux/machines.json |
Optional: sibling machines for the machine selector |
Multiple machines
[
{ "name": "work", "url": "https://work-machine.tail1234.ts.net" },
{ "name": "personal", "url": "https://personal.tail1234.ts.net" }
]
Security
- Daemon binds to
127.0.0.1:7432only — not reachable from the network - All traffic encrypted by Tailscale WireGuard; HTTPS via
tailscale serve - No relay server — terminal data never leaves your Tailscale mesh
- Pairing codes: 6-digit, 5-minute TTL, single-use, max 10 attempts
- Session tokens: 256-bit random, stored at mode 0600
Tests
cd mobile/
python3 -m unittest tests.test_daemon -v
Troubleshooting
502 Bad Gateway — tailscale serve is running but daemon isn't: trustmux start
"Serve not enabled" — visit the URL printed by tailscale serve --bg 7432
Phone can't reach URL — ensure Tailscale is active on the phone
Need to re-pair — run trustmux pair and enter the new code on the device
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file trustmux-7.16rc4.tar.gz.
File metadata
- Download URL: trustmux-7.16rc4.tar.gz
- Upload date:
- Size: 75.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
48eec5a17e51be4722218b5e982abdefc5ba3f9732e5cad099f2db6d2db71227
|
|
| MD5 |
fc68ef1db45ae895be77f24519b0f333
|
|
| BLAKE2b-256 |
5496f554eed651962f29638670adb8df58815fecc597fcb2ab20cbd4a6308bd6
|
Provenance
The following attestation bundles were made for trustmux-7.16rc4.tar.gz:
Publisher:
pypi-publish.yml on dustinkirkland/byobu
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
trustmux-7.16rc4.tar.gz -
Subject digest:
48eec5a17e51be4722218b5e982abdefc5ba3f9732e5cad099f2db6d2db71227 - Sigstore transparency entry: 2190573825
- Sigstore integration time:
-
Permalink:
dustinkirkland/byobu@c58b3075d1bc4bf0d65e46825528ae4ebbbf867b -
Branch / Tag:
refs/tags/trustmux-v7.16rc4 - Owner: https://github.com/dustinkirkland
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
pypi-publish.yml@c58b3075d1bc4bf0d65e46825528ae4ebbbf867b -
Trigger Event:
push
-
Statement type:
File details
Details for the file trustmux-7.16rc4-py3-none-any.whl.
File metadata
- Download URL: trustmux-7.16rc4-py3-none-any.whl
- Upload date:
- Size: 63.7 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
109c11916b6423f91c3594142c86234bab40d93a3e1ef74e4a4762151be78f81
|
|
| MD5 |
447546d71ed376f037e4a7cea7c61595
|
|
| BLAKE2b-256 |
2ae13755da465353932ed4c67951b5bab224b5e4a74cdd51c7fa4749139dd6c2
|
Provenance
The following attestation bundles were made for trustmux-7.16rc4-py3-none-any.whl:
Publisher:
pypi-publish.yml on dustinkirkland/byobu
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
trustmux-7.16rc4-py3-none-any.whl -
Subject digest:
109c11916b6423f91c3594142c86234bab40d93a3e1ef74e4a4762151be78f81 - Sigstore transparency entry: 2190573842
- Sigstore integration time:
-
Permalink:
dustinkirkland/byobu@c58b3075d1bc4bf0d65e46825528ae4ebbbf867b -
Branch / Tag:
refs/tags/trustmux-v7.16rc4 - Owner: https://github.com/dustinkirkland
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
pypi-publish.yml@c58b3075d1bc4bf0d65e46825528ae4ebbbf867b -
Trigger Event:
push
-
Statement type:
