Skip to content

Windows installer

QuartermasterCollectorSetup.exe is a guided Windows installer (NSIS, ~22 MB) for the collector — the easiest way to keep a Windows machine feeding your cloud registry. It bundles a portable Node runtime, so the machine needs no Node install, no git clone, no terminal.

  1. Welcome — explains exactly what will happen: pair with your Worker, scan with on-device redaction, register an hourly background task.
  2. Install location — defaults to %LOCALAPPDATA%\Quartermaster. The install is per-user; no admin rights required.
  3. Connect — asks for your Worker URL and the admin token. The admin token is used once to pair and is never stored; only the revocable device-scoped token lands on disk (%USERPROFILE%\.quartermaster\, along with scan state).
  4. Install — copies portable node.exe + collector.cjs, pairs the machine, and registers an hourly Scheduled Task (“Quartermaster Collector”) that runs a silent scan + jobs pass with a log file.
  5. Finish — optionally runs the first scan immediately in a console so you can watch the initial crawl.

From then on the machine scans itself every hour: new skills, agents, rules, and configs show up in your registry with secrets redacted before upload.

  • Releases: every collector-v* tag builds the installer in CI and attaches it to the GitHub release.
  • CI artifact: the Build collector installer (Windows) workflow can be dispatched manually; the .exe is uploaded as a build artifact.
  • Build it yourself: node installer/windows/build.mjs (needs makensis; NSIS cross-compiles, so this works on Windows, Linux, and macOS).

CI-built installers are code-signed automatically when signing credentials are configured (Azure Trusted Signing, with a classic OV-certificate fallback); locally-built installers are always unsigned — treat CI as the source of release binaries. The bundled node.exe is already signed by the OpenJS Foundation.

Settings → Apps (or Uninstall.exe in the install folder) removes the scheduled task and program files. It deliberately leaves %USERPROFILE%\.quartermaster so re-installing doesn’t need re-pairing — revoke the device server-side to fully disconnect it.

Both have their own self-contained installers — see the macOS installer (.run, launchd user agent, no sudo needed) and the Linux installer (.run, systemd user timer or cron, no root needed). On anything else, the manual collector setup works on every platform with Node ≥ 22.