RyukSign

RyukSign is an on-device app signer and installer for iOS, derived from Feather. It installs and manages applications using certificate pairs and various installation techniques, entirely on-device using built-in features. RyukSign extends Feather with a Tweak Manager, a built-in File Transfer server, an enhanced download manager, and curated repository support.

RyukSign is a fork of Feather by claration. All upstream work and attribution is preserved; see Acknowledgements and Credits.

Features

Inherited from Feather:

• User-friendly, clean UI.
• Sign and install applications using a .p12 / .mobileprovision pair (via Zsign).
• Supports AltStore repositories.
• View detailed information about apps and certificates.
• Configurable signing options (appearance, Files-app support, compatibility patching, Liquid Glass).
• No tracking or analytics.
• Open source and free.

Added by RyukSign:

• Tweak Manager — import, organize, and inject .dylib, .deb, .framework, .bundle, and .appex tweaks. Multi-file tweaks, per-file configuration, a file-info/dependency inspector, and ElleKit/CydiaSubstrate detection.
• Live Activities & Dynamic Island — watch download progress live from the Lock Screen and Dynamic Island, plus an in-app download overlay.
• Enhanced download manager — fast background downloads that keep running while you use other apps.
• File Transfer server — upload IPAs and tweaks over HTTP (drag-and-drop browser page) or WebDAV (mount in Finder / the Files app), with optional password protection.
• App update checker — flags installed apps that have a newer version available in your sources, with per-app ignore/skip.
• Curated repositories and a fully configurable tab bar.

How does it work?

How Feather works is a bit complicated, with multiple ways to install, app management, tweaks, etc. The important pieces:

To start, we need a validly signed IPA, achieved with Zsign using a provided IPA plus a .p12 and .mobileprovision pair.

Install (Server)

• Use a locally hosted server for the IPA files used for installation (and assets such as icons).
  • On iOS 18, a few entitlements are needed: Associated Domains, Custom Network Protocol, MDM Managed Associated Domains, Network Extensions.
• Include valid HTTPS SSL certificates (we use *.backloop.dev).
• Then itms-services://?action=download-manifest&url=<PLIST_URL> initiates the install via UIApplication.open.

Due to iOS 18 entitlement changes, an alternative is needed: either install fully locally via the local server (above), or use an external HTTPS server as a middle-man for PLIST_URL while keeping the files local — for the latter, a plain insecure local server plus plistserver for the PLIST_URL, and a Safari webview redirect to the itms-services:// URL.

Install (Pairing)

• Establish a heartbeat with a TCP provider, requiring a pairing file and a VPN.
• Connect to the socket routed to 10.7.0.1, establish an AFC connection, create /PublicStaging/, upload the IPA, and install it directly — similar to ideviceinstaller, but fully on-device.

This path needs both a VPN and a lockdownd pairing file (so a computer for initial setup); otherwise use the server install method.

Download

Visit RyukSign releases and get the latest .ipa.

Building from source

RyukSign uses Xcode 16 (synchronized groups, objectVersion 77) and Swift Package Manager plus git submodules. See CONTRIBUTING.md. In short:

git clone --recursive https://github.com/faroukbmiled/RyukSign.git
cd RyukSign
make deps          # fetches the backloop.dev SSL pack used by the local install server
open RyukSign.xcworkspace

Signing identity is not committed in a usable form — set your own team / enable automatic signing in Xcode, or build the unsigned CLI path via make.

Contributing

Read the contribution requirements for more information.

Acknowledgements

• claration — author of Feather, the project RyukSign is derived from.
• idevice — backend used for communication with installd.
• *.backloop.dev — localhost with a public-CA-signed SSL certificate.
• Vapor — server-side Swift HTTP web framework.
• Zsign — on-device signing, reimplemented for iOS.
• ElleKit — tweak injection.
• LiveContainer — fixes / help.
• Nuke — image caching.
• Asspp — HTTP server setup reference.
• plistserver — hosted on https://api.palera.in.

License

This project is licensed under the GPL-3.0 license — see LICENSE for the full text. As a derivative of Feather (also GPL-3.0), RyukSign preserves that license. The complete corresponding source for every distributed binary is this repository: https://github.com/faroukbmiled/RyukSign.

By contributing, you agree to license your code under GPL-3.0 (including agreeing to license exceptions), ensuring your work remains freely accessible and open.

Disclaimer

RyukSign is maintained here, on GitHub, and releases are distributed here, on GitHub. Avoid any other sites hosting this software — they are often malicious and exist to mislead users.

Credits

• Feather — the upstream project RyukSign is based on.