OcaltQL Client Download

A cross-OS software that enables a vast amount of capabilities and orchestration.

The DIRECTIVE functionality sends commands to a registered remote machine running the OcaltQL Client enabling shell exec control, tunneling & peer to peer networks, self-hosted websites (hosted on your hardware), file transfers, content serving and streaming your local ports to a web accessible end-point, all this without a static IP address and no firewall limitations. To learn more about how the DIRECTIVE functionality works, visit the directive OcaltQL tutorial page.

Download

OS Download
Windows ocaltql-client.exe
macOS Not yet available
Linux — Debian / Ubuntu ocaltql-client.deb
Linux — RedHat / Fedora ocaltql-client.rpm
Linux — Universal ocaltql-client.AppImage
FreeBSD ocaltql-client-freebsd
Android ocaltql-client.apk
ChromeOS Enable the Linux environment in ChromeOS settings, then install the .deb
Android is a shell agent. The Android build runs the agent as a foreground service, so a phone or tablet becomes a remote machine you reach with DIRECTIVE — EXEC, DOWNLOAD, UPLOAD and SERVE all work, turning the device into a compute node with no static IP or open ports. Screen capture and input injection are the exception: Android reserves those for system apps, so SCREENSHOT and pointer or keyboard control return a “requires root” error. On a rooted device they work through the shell — DIRECTIVE "phone" EXEC "su -c screencap -p /sdcard/s.png" for a screenshot, su -c input tap X Y for a tap. On first launch the app opens its manager at http://localhost:12345/config to set the identity, alias and root, exactly like the desktop build.

Installing an unsigned build

The client is shipped unsigned. Code-signing certificates are issued per-vendor and tie a binary to a commercial identity; the agent is deliberately distributed without one, so every operating system will warn you the first time you run it. The warnings are about the absence of a certificate, not about the file. Each is cleared in a few seconds.

Windows — SmartScreen

Windows Defender SmartScreen blocks unrecognised applications with a blue dialog reading “Windows protected your PC”. There is no Run button visible — it is behind a link:

  1. Click More info in the dialog.
  2. Click Run anyway, which appears once More info is expanded.

If the browser blocked the download itself rather than the launch, open the browser’s downloads list and choose Keep on the file. Where the file has already been saved, right-click it, choose Properties, tick Unblock at the bottom of the General tab, and click OK — that clears the mark-of-the-web and SmartScreen will not ask again.

Linux — making the binary executable

Downloading a file does not make it runnable. The .deb and .rpm packages set their own permissions when installed, but the universal AppImage and the raw binaries have to be marked executable first:

AppImage
chmod +x ocaltql-client.AppImage
./ocaltql-client.AppImage
Package installs
sudo dpkg -i ocaltql-client.deb        # Debian, Ubuntu
sudo rpm -i ocaltql-client.rpm        # RedHat, Fedora
chmod +x adds the execute bit to a file you own. Without it the shell reports Permission denied even though the file downloaded correctly. The same applies to the FreeBSD binary: chmod +x ocaltql-client-freebsd before running it.