Windows installer
QuartermasterCollectorSetup.exe is a guided Windows installer (NSIS, ~22 MB)
for the collector — the easiest way to keep a
Windows machine feeding your cloud registry. It bundles a portable Node
runtime, so the machine needs no Node install, no git clone, no terminal.
What the wizard does
Section titled “What the wizard does”- Welcome — explains exactly what will happen: pair with your Worker, scan with on-device redaction, register an hourly background task.
- Install location — defaults to
%LOCALAPPDATA%\Quartermaster. The install is per-user; no admin rights required. - Connect — asks for your Worker URL and the admin token. The admin token
is used once to pair and is never stored; only the revocable
device-scoped token lands on disk (
%USERPROFILE%\.quartermaster\, along with scan state). - Install — copies portable
node.exe+collector.cjs, pairs the machine, and registers an hourly Scheduled Task (“Quartermaster Collector”) that runs a silent scan + jobs pass with a log file. - Finish — optionally runs the first scan immediately in a console so you can watch the initial crawl.
From then on the machine scans itself every hour: new skills, agents, rules, and configs show up in your registry with secrets redacted before upload.
Get the installer
Section titled “Get the installer”- Releases: every
collector-v*tag builds the installer in CI and attaches it to the GitHub release. - CI artifact: the Build collector installer (Windows) workflow can be
dispatched manually; the
.exeis uploaded as a build artifact. - Build it yourself:
node installer/windows/build.mjs(needsmakensis; NSIS cross-compiles, so this works on Windows, Linux, and macOS).
CI-built installers are code-signed automatically when signing credentials
are configured (Azure Trusted Signing, with a classic OV-certificate fallback);
locally-built installers are always unsigned — treat CI as the source of
release binaries. The bundled node.exe is already signed by the OpenJS
Foundation.
Uninstall
Section titled “Uninstall”Settings → Apps (or Uninstall.exe in the install folder) removes the
scheduled task and program files. It deliberately leaves
%USERPROFILE%\.quartermaster so re-installing doesn’t need re-pairing —
revoke the device server-side to fully disconnect it.
macOS and Linux
Section titled “macOS and Linux”Both have their own self-contained installers — see the
macOS installer (.run, launchd user
agent, no sudo needed) and the
Linux installer (.run, systemd user
timer or cron, no root needed). On anything else, the
manual collector setup
works on every platform with Node ≥ 22.