Windows kiosk software

Get the latest build.

Self-contained Windows installer. .NET 8 desktop runtime included — no prereqs on the kiosk PC. FFmpeg (essentials build with libx264) bundled.

Production installer

Velopack-packaged installer (.exe) from the latest tagged release.

Latest release →

CI build (latest commit)

Self-contained build from the most recent commit on the active branch — useful for testing in-flight work before tagging.

GitHub Actions →

Heads-up

First-boot checklist.

  1. Install. Auto-launches into the Admin console.
  2. Set an Admin PIN when prompted. The PIN gates re-entry to Admin after every cold start.
  3. Open Manage API keys if you'll use AI modes. Keys land DPAPI-encrypted in %LOCALAPPDATA%\MochiBooth\.
  4. Open Cloud credentials in any event's Cloud Gallery section. Paste your R2 access key + secret + endpoint + bucket.
  5. Load Default → walk Attract → Selection → Capture → Print. The webcam fallback runs without hardware.

For the full operator guide see docs/ADMIN.md. Production deployment hardening lives in docs/KIOSK-HARDENING.md.

Signed?

Authenticode signing is in the pipeline.

The release workflow auto-signs once WINDOWS_SIGN_CERT_PFX_BASE64 + WINDOWS_SIGN_CERT_PASSWORD secrets are configured in GitHub. Until then builds run unsigned — Windows SmartScreen will show the standard "Windows protected your PC" dialog. Fine for internal kiosks; clients usually want a signed build before shipping to their venue.