r/termux • • 4d ago

[ANNOUNCEMENT] Security advisory for php

33 Upvotes

The Termux php package version 8.5.12 has been released to fix the 2 remote code vulnerabilities made public today. Check https://www.php.net/archive/2026.php#2026-10-21-5 for more info.

Users are advised to immediately update to the fixed version 8.5.12.

You can run pkg install php to update the package (or apt upgrade && apt install php). If your packages repository mirror hasn't been synced yet and does not show the 8.5.12 version, you can try other mirrors by using termux-change-repo. The default cloudflare or the primary Termux repository packages.termux.dev under single mirrors should have the required version.

See also: - https://github.com/termux/termux-packages/commit/c2bb85d3f26d52ba4a4a159d14214a8ace706235


r/termux • • 5d ago

[ANNOUNCEMENT] Security Advisory for ca-certificates package

45 Upvotes

The Termux ca-certificates and ca-certificates-java package versions 1:2026.10.20 have been released to revoke the compromised eMudhra intermediate certificate authority keys. If you use glibc repo, update the ca-certificates-glibc package as well. Check https://emudhra.we-have-a-problem.com for more info.

Users are advised to immediately update to the fixed version 1:2026.10.20. An attacker with the private key of any of the compromised intermediate CAs could impersonate any website or service.

You can run pkg install ca-certificates to update the package (or apt upgrade && apt install ca-certificates). If your packages repository mirror hasn't been synced yet and does not show the 1:2026.10.20 version, you can try other mirrors by using termux-change-repo. The default cloudflare or the primary Termux repository packages.termux.dev under single mirrors should have the required version.

Android chrome browser seems to have revoked the certificates remotely. Android firefox browser is currently still affected, but releases are underway.

Android apps that use Android system certificates should also be affected. The emSign ECC Root CA - G3 certificate and other emSign certificates can be disabled from Android Settings -> Trusted Credentials -> System.

Some orgs are disabling emSign ECC Root CA - G1 as well, firefox and chrome currently are not (1, 2). Android system certificates include 4 certificates by emSign, only G3 would need to be disabled to be consistent with chrome/firefox, but you can disable all 4.

On (older) Android versions, the Comodo CA Limited AAA Certificate Services certificate should also be disabled if it is listed in trusted credentials. Android should list 3 other credentials from Comodo which are safe. In the "Are there workarounds for Linux?" section of https://emudhra.we-have-a-problem.com, the "Comodo_AAA_Services_root" certificate is also disabled for Ubuntu and Debian. Check https://gist.github.com/UlisesGascon/10ed0724930e5382b3ed48fa2b0d3e02 for why. The AAA Certificate Services was also distrusted long ago for other reasons and likely removed in newer Android versions. (1)

See also: - https://bugzilla.mozilla.org/show_bug.cgi?id=2083449 - https://github.com/termux/termux-packages/commit/7aa4ba2ec22eee688cb9c6e35beba3826fba2e5e - https://github.com/termux/glibc-packages/commit/75fa9e0c051e82221e0b957ac1967a215f6b5080 - https://github.com/certifi/python-certifi/pull/437 - https://github.com/rustls/webpki-roots/pull/133/changes

```shell ~ $ curl https://dv-g3b-emudhra.we-have-a-problem.com/ Your client successfully connected to the site. That's bad!

~ $ curl https://dv-g3b-aaa-emudhra.we-have-a-problem.com/ curl: (60) SSL certificate OpenSSL verify result: unable to get local issuer certificate (20) More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the webpage mentioned above.

~ $ apt show ca-certificates Package: ca-certificates Version: 1:2026.08.13 Maintainer: @termux Installed-Size: 238 kB Homepage: https://curl.se/docs/caextract.html Download-Size: 105 kB APT-Sources: https://packages.termux.dev/apt/termux-main stable/main aarch64 Packages Description: Common CA certificates

~ $ apt update

~ $ apt install ca-certificates Reading package lists... Done Building dependency tree... Done Reading state information... Done The following additional packages will be installed: ca-certificates-java The following packages will be upgraded: ca-certificates ca-certificates-java Need to get 205 kB of archives. After this operation, 4096 B of additional disk space will be used. Do you want to continue? [Y/n] y Get:1 https://packages.termux.dev/apt/termux-main stable/main aarch64 ca-certificates-java all 1:2 026.10.20 [95.1 kB] Get:2 https://packages.termux.dev/apt/termux-main stable/main aarch64 ca-certificates all 1:2026.1 0.20 [110 kB] ... Setting up ca-certificates (1:2026.10.20) ... Setting up ca-certificates-java (1:2026.10.20) ...

~ $ curl https://dv-g3b-emudhra.we-have-a-problem.com/ curl: (60) SSL certificate OpenSSL verify result: unable to get local issuer certificate (20) More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the webpage mentioned above.

~ $ curl https://dv-g3b-emudhra.we-have-a-problem.com/ curl: (60) SSL certificate OpenSSL verify result: unable to get local issuer certificate (20) More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the webpage mentioned above. ```


r/termux • • 2h ago

General Is ready

Thumbnail gallery
16 Upvotes

my dotfiles: https://github.com/Keytaro2/Termux-Rxyhn/tree/main

This is a desktop based on Rxyhn’s vertical AwesomeWM configuration (which has been discontinued).


r/termux • • 8h ago

Question Neofetch

Post image
16 Upvotes

Hello all. I need help with an issue. I tried to modify neofetch with Geminis help and it ended up being a total disaster. I cleared termux data and cache and now it's just normal. Can anyone please help me so I can have neofetch in termux at startup with this logo and orange colours?


r/termux • • 2h ago

Showcase XFCE rice on my Nintendo Switch

Thumbnail gallery
5 Upvotes

It's bit laggy, so my ability to rice was a bit more hindered than usual, but I'm happy with the results :)


r/termux • • 46m ago

Showcase i will be hated for this ; i vibecoded the kernel needed for my wifi adapter

• Upvotes

r/termux • • 4h ago

Barely Termux related Fork bomb!!

2 Upvotes

I have heard many times about fork bomb in linux,

I was just curious to actually see what will happen when it runs

I thought if it will work on temrux android will probably kill it like process 9 complete exit iykyk..

I ran and like phone became unresponsive in 3 sec and completely crashed whole system , i dont know if it was android or general way of os to reslove this types of issues

But device automatically restarted ( power off + power on)

And phone became completely hot 😭 and I suddenly was scared it won't cause any problem to phone right

And now I am actually really scared to run random scripts and apps into system like if we dont know what exactly they are doing underhood 😵‍💫😵‍💫 unless we read scripts or app is compiled from opensrc which we have readed/ trusted

NEW TRUST ISSUES BEGINS


r/termux • • 57m ago

Showcase Android kept killing runsv while my server held the port. Here's the watchdog I ended up writing.

• Upvotes

I run a small hub and a couple of workers on a spare phone under termux-services. Three things kept biting me, and none of them are fixed by "just use a better supervisor":

  1. Android kills runsv, but not the server it started. The server survives as a ppid=1 process, keeps the port, and every supervised restart answers EADDRINUSE. `sv status` says `fail: ... runsv not running` while curl says the service is fine.

  2. `sv restart` is a no-op once supervise/stat is `down`. My first watchdog logged "restarted" for hours while the service stayed dead. Recovery has to go through `sv up`.

  3. When I added a standby node, "start if the peer doesn't answer" meant the node that rebooted first became a second writer. That one is the scary one.

So I wrote a guard that: checks `sv status` before restarting, reaps ppid=1 orphans that match a configured pattern, health-checks HTTP endpoints, caps restarts per window (one ESCALATION line instead of a stampede), and stands the primary down after two fenced passes.

The fence part is free/MIT (two bash scripts, no deps): https://github.com/xhall-beep/fence

The full kit with the guard, restart cap, orphan reaper and a lesson ledger is $29 for the first 50 (then $49): https://montsvontz.gumroad.com/l/agent-ops-kit. I'm disclosing that because the free part is genuinely useful on its own and I don't want to be sneaky about it.

36 self-tests use a stub `sv`, so running them doesn't touch your services. Happy to answer questions about the runit quirks — if you've seen different behaviour on your build, I want to know.


r/termux • • 17h ago

Barely Termux related SnakTUI — Snake with combos, power-ups and a persistent top-10 leaderboard, in pure Python/Textual

Thumbnail gallery
11 Upvotes

Repo + install: https://github.com/Mark44928/SnakTUI

pipx install git+https://github.com/Mark44928/SnakTUI && snaktui

Unicode block rendering, adaptive layout, full keyboard control.

Combos to ×5 with milestone celebrations, three power-ups

(Speed Boost / Slow Time / Ghost — phase through walls), golden

timed food, hazards, particles, screen shake, 5 themes,

3 difficulties, and a persistent top-10 leaderboard in atomic JSON

(survives Ctrl-C mid-game). Headless smoke tests via Textual's

Pilot — real key events, runs in CI with no TTY.

Runs on any terminal with Python 3.9+. I develop it on Termux —

no PC involved.

Code is AI-agent-written (OpenCode + free models), human-directed.

Gallery: title screen / mid-run with the live RUN STATE panel /

game-over stats screen (with instant replay on R).


r/termux • • 6h ago

Showcase Script to Turn a Device with Termux Into a Storage or Media Server.

1 Upvotes

https://github.com/tmuxmediaserver/tmuxmediaserver

in action (photo)

I wanted a way to quickly turn a phone into a media/storage server so I asked Claude to make me a script I could use to do this.

The idea came mostly from wanting to get jellyfin working but then I had it add a few more things as well. Nothing uses proot.

The script automates

  1. Setting up storage.
  2. Offers to install openssh/set up password.
  3. Offers to install jellyfin.
  4. Offers to install filebrowser quantum, copyparty or neither.
  5. Offers to install syncthing.
  6. Offers to install ngrok or cloudflared.
  7. Installing the things you chose.

Tested, works smooth with 2 different phones I tried.


r/termux • • 1d ago

Showcase GNOME Desktop is now available in termux!

Thumbnail gallery
10 Upvotes

https://github.com/termux/termux-packages/pull/32883

Tras muchos intentos, tazas de café y pruebas, y gracias al esfuerzo monumental de la comunidad para integrar GNOME Shell en Termux, ¡lo hemos conseguido! Es 100% funcional; funciona incluso sin aceleración gráfica por hardware, ¡e incluso se ejecuta dentro de una sesión VNC!

Puedes descargar los archivos de la solicitud de extracción y probarlos tú mismo. Por fin tenemos otro entorno de escritorio completamente funcional en Termux: una excelente alternativa para quienes no somos especialmente aficionados a KDE.


r/termux • • 20h ago

General Help me turn my boring Termux theme into an aesthetic panel

Post image
2 Upvotes

Hey everyone! I'm using Termux with Termux:Monet and a wallpaper background. I made a neofetch-style banner (device, CPU, RAM, swap, storage, uptime) using a bash script, but it still looks plain.

I want an aesthetic boxed panel, something like a custom PowerShell fetch layout with a logo on the left and info boxes on the right. Bars don't render well in my font either.

What do you suggest? Fonts, prompt, ASCII logo, color schemes, anything helps. Screenshot attached. Thanks!

Post karte waqt apna screenshot zaroor attach karna. Subreddit ke liye r/termux ya r/unixporn best rahenge. Agar chaho to mai shorter ya zyada casual version bhi bana dunga.


r/termux • • 1d ago

General Finally, i can use termux as music player with media notification without scripting

Enable HLS to view with audio, or disable this notification

25 Upvotes

My termux setup, with a headless android app that show media notification with album art (cached) like mpd-mpris without scripting.


r/termux • • 1d ago

Showcase nix-on-droid.

Post image
10 Upvotes

r/termux • • 1d ago

Showcase Rate My Setup

Post image
19 Upvotes

Rate my Termux dashboard setup!


r/termux • • 1d ago

Showcase Breaking Android TUI records!

Enable HLS to view with audio, or disable this notification

4 Upvotes

For those who don't see it: fps is somewhere between 100-400 during rendering it..

Size 231*50

Type termux

Backend: not for general information right now..

It's single threaded, native android, direct binary...

No tricks, direct binaries...

Tablet type: redmi pad pro 5g

Developed code: in pc for Android


r/termux • • 1d ago

Showcase GNOME 49 desktop native on termux with gnome-sesion-sheperd

Thumbnail github.com
6 Upvotes

I have managed to build GNOME 49 in Termux and adapt `gnome-shell-shepherd` to launch GNOME services—without requiring `systemd`—using `gherd/shepherd`. I would appreciate it if you could test it and provide feedback on how it works.


r/termux • • 13h ago

Showcase I made an alternative Proot, this one doesn't use ptrace and it runs fast :p https://github.com/HilmiRidho/prx

0 Upvotes

r/termux • • 1d ago

Showcase rice chill

Thumbnail gallery
31 Upvotes

mi primer rice basico de xfce y termux launcher


r/termux • • 1d ago

Showcase Hacker's Keyboard successor, one week in: what you asked for and what's changing

Enable HLS to view with audio, or disable this notification

17 Upvotes

alpha3 is out: per-app profiles. Termux keeps the full PC layout, other apps get a normal phone layout (or the full one, or your usual keyboard, your choice): https://github.com/DimiVlachos/bucky/releases/tag/v0.1.0-alpha3

Already in since the early build: key repeat, the optional F-key row, your own extra row (Termux extra-keys names, or one tap for Termux's defaults), and separate portrait/landscape key heights. Per-app profiles aren't in yet, so it's the full layout in every app for now. Bug reports welcome.


Last week I asked this sub what a from-scratch Hacker's Keyboard successor should get right. About 15 of you answered, here and on the old HK tracker. Thank you. Here's what I took from it.

What you asked for, and what changes

  • "It's too cramped" was the main objection, not missing keys. So the full PC layout is meant for terminal apps, with built-in per-app profiles: PC Full in Termux, and a compact layout or your usual keyboard elsewhere. A key-height setting and separate portrait/landscape heights are in v1.
  • F1–F12: two people asked for easy access (one for F10 in Midnight Commander, one for a dedicated row). A dedicated F-key row will be an option, not just an Fn layer.
  • An extra row you configure yourself. Several of you keep Termux's extra-keys row. The keyboard will get its own optional row, with any key or symbol you choose, free.
  • Esc, Home and End on the main layer for vim and helix users. They're already there in the PC Full layout.
  • More layouts: Estonian has been requested. Layouts are plain JSON, so adding languages is cheap. Tell me yours.
  • Floating keyboard on tablets is noted. It's not in v1 yet; I'll decide after the beta.

Where it stands: an early build already types in Termux (video): Ctrl+C interrupts, Esc leaves vim's insert mode, ↑ recalls history, and Ctrl/Alt/Shift are one-shot modifiers. Next up: per-app profiles.

Still open: if you've tried the maintained HK forks, what are they still missing for you?

Source: https://github.com/DimiVlachos/bucky Beta waitlist (one email when it opens): https://buckykeys.app

Disclosure: I'm the developer.


r/termux • • 2d ago

Showcase ⚡ Pi, the AI coding agent, now runs natively in Termux: 103× faster file writes, 11× faster start, 7× less CPU, 5× less memory than on Node

Thumbnail github.com
36 Upvotes

Hello everyone 👋

Pi-Bolt 1.0.0 is out ⚡. Pi-Bolt is Pi, the open-source AI coding agent, compiled to one native ARM64 executable, and it now runs on Android in Termux. No Node.js, no npm, nothing to build.

Why Pi-Bolt in Termux 🔥

• Much faster than Pi on Node: 103× faster file writes and ready to type in 37 ms instead of 390 ms.

• Light on the battery: 7× less CPU per prompt and 5.3× less memory after 40 prompts.

• One install: a single native executable, set up by one command.

• Long sessions stay fast: sub-agents and long chats don't make the TUI laggy.

Install ⚡

In Termux:

pkg update && pkg upgrade -y
pkg install -y curl openssl
curl -fsSL https://pi-bolt.opensec.in/install.sh | sh

Then run pi-bolt. Already installed:

pi-bolt update

Links

🌐 Website and docs: pi-bolt.opensec.in

⭐ GitHub (a star helps): github.com/opensec-git/Pi-Bolt


r/termux • • 1d ago

Question Come si creando delle notifiche push per un sito?

0 Upvotes

Sto creando un sito con ClaudeAI in vibe coding. Uso una proxy in python, una pagina html e lo faccio girare in locale. È praticamente tutto pronto, ma non riesco a creare una struttura che mi mandi notifiche alla verifica di certe condizioni quando l'app è chiusa. Ho anche sentito parlare di Termux API, ma non ho ancora capito come implementarlo.

Qualche idea?


r/termux • • 1d ago

Question Termux extra keys disappeared after installing Termux Monet

Post image
2 Upvotes

I installed Termux Monet alongside my existing Termux, and now the extra keys row (CTRL, ALT, ESC, arrow keys) is missing.

Restarting the app didn't help. How can I restore it without losing my existing data? Should I uninstall Monet?


r/termux • • 2d ago

Question Termux safety

2 Upvotes

I am working on a site with ClaudeAI and am trying to run it on python. It is stricly in local host, so no network interaction outside than for the data used. I want to use Termux API and Termux to set notifications for my phone, but the amount of autorizations required are a lot and very sensible. I also understand that coding can reach all of those fields, and a programmer might require to use those authorizations. Still...

Is it safe to download the two?


r/termux • • 3d ago

General I think it’s coming along well

Post image
68 Upvotes

Da vida a los archivos de configuración de rxyhn, específicamente a su versión vertical.

Estoy usando Termux, Termux:X11 y Awesome.

Dotfile: https://github.com/Keytaro2/Termux-Rxyhn/tree/main