Release v2.3.3

Downloads

macOS (Universal) - Supports both Apple Silicon and Intel

Option 1: Installation Script (Recommended)

Install with a single command (version v2.3.3):

curl -fsSL https://raw.githubusercontent.com/Leadaxe/singbox-launcher/develop/scripts/install-macos.sh | bash -s -- v2.3.3

The script will:

• Download the release archive
• Extract and install to /Applications/
• Fix macOS quarantine attributes and permissions
• Launch the application automatically

Option 2: Manual Installation

1. Download: singbox-launcher-v2.3.3-macos.zip
2. Extract the ZIP file
3. Remove quarantine attribute (required):

   xattr -cr "singbox-launcher.app" && chmod +x "singbox-launcher.app/Contents/MacOS/singbox-launcher"

4. Double-click singbox-launcher.app to run
   • If macOS blocks the app, go to System Settings → Privacy & Security and click "Open Anyway"
   • Alternatively, right-click the app and select "Open" (first time only)

Windows (amd64)

Option 1: Installer (Recommended)

1. Download: singbox-launcher-v2.3.3-win64-setup.exe
2. Run it and confirm the administrator prompt once. The launcher goes to C:\Program Files\singbox-launcher, your data to %LOCALAPPDATA%\singbox-launcher; sing-box.exe, wintun.dll, the config template and Mesa3D are included, nothing is downloaded on first launch
   • Tasks: desktop shortcut, Start with Windows, software OpenGL (Mesa3D) for RDP / VMs without a GPU
   • Installing over a previous version keeps your data; uninstall from Settings → Apps asks whether to remove the data too
   • The installer is not code-signed yet: if SmartScreen shows "Windows protected your PC", click More info → Run anyway

Option 2: Portable ZIP

1. Download: singbox-launcher-v2.3.3-win64.zip
   • or singbox-launcher-v2.3.3-win64-full.zip — full bundle: sing-box.exe, wintun.dll, the config template and Mesa3D (mesa3d/, used only when no hardware OpenGL — RDP, VMs) are already inside, nothing is downloaded on first launch
2. Extract the ZIP file to a folder your account can write to, for example D:\Tools\singbox-launcher\ — settings stay next to the program (portable.txt)
   • Under C:\Program Files\ the launcher keeps its data in %LOCALAPPDATA%\singbox-launcher instead
3. Run singbox-launcher.exe from that folder — no administrator rights, no UAC prompt
   • TUN needs administrator rights: Start offers Restart as administrator or Switch to proxy mode
   • The regular archive downloads sing-box and wintun.dll on first launch

Windows 7 (x86, legacy)

1. Download: singbox-launcher-v2.3.3-win7-32.zip
2. Extract the ZIP file to a folder and run singbox-launcher-win7-32.exe
   • For Windows 7 / 32-bit or legacy compatibility only
   • Runs as administrator (UAC prompt on every start), settings stay next to the program (portable.txt); no installer and no daemon service

Linux Support

⚠️ Linux build temporarily unavailable - мы ищем тестировщика для ручного тестирования перед включением автоматической сборки.

Checksums

See checksums.txt for SHA256 checksums of all files.

Release notes — v2.3.3 (2026-09-28)

EN

Hotfix on top of v2.3.2. Core sing-box-lx 1.14.2-lx.4, contract 1.1.84 — unchanged.

Fixed

• Windows, launcher run as administrator: a failed permission check no longer leaves you without VPN (#137). The core refused to start with “core log …\sing-box-lxd\logs\classic.log: C:\ProgramData: … is granted 0xd0040, must not be writable by a non-administrative account” when the system folder C:\ProgramData gave write access to everyone. For the core log the launcher now checks only C:\ProgramData\sing-box-lxd and its logs folder, the same way the core does.
• Permission checks of the elevated start warn instead of blocking. When the protected core copy or the log folder fails a check, the dialog names the rights in words, explains the risk, shows a command that fixes it (an icacls command when the problem is in a folder above ours) and offers Run anyway. Until the launcher is closed, Run anyway starts the launcher's own core and/or writes the core output to the launcher's own log. See SPEC 150.

RU

Хотфикс поверх v2.3.2. Ядро sing-box-lx 1.14.2-lx.4, контракт 1.1.84 — без изменений.

Исправлено

• Windows, лаунчер с правами администратора: неудачная проверка прав больше не оставляет без VPN (#137). Ядро не стартовало с ошибкой «core log …\sing-box-lxd\logs\classic.log: C:\ProgramData: … is granted 0xd0040, must not be writable by a non-administrative account», если системная папка C:\ProgramData давала всем право записи. Для лога ядра лаунчер теперь проверяет только C:\ProgramData\sing-box-lxd и его папку logs, так же как ядро.
• Проверки прав повышенного старта предупреждают, а не запрещают. Если защищённая копия ядра или папка лога не прошли проверку, диалог называет права словами, объясняет риск, показывает команду исправления (icacls, когда проблема в папке выше нашей) и даёт кнопку Run anyway. До закрытия лаунчера Run anyway запускает собственное ядро лаунчера и (или) пишет вывод ядра в собственный лог лаунчера. См. SPEC 150.