JITStreamer-2.0

This is a JIT Enabler for iOS 17.4+ over VPN (Wi-Fi only) or over Local Network / USB

Requirements

• A Mac, Linux or Windows Computer (You can also do this with a Server but a host computer is needed to pair your device)
• A VPN such as Tailscale (Wireguard based VPNs are the only ones that have been tested)
• Python 3.10+ (with pip / pip3 installed)
• git (on Windows you can get it here)

Setup

Open Terminal (on Windows Administrator Powershell) and run these commands (not the ones with the #)

# Setup venv
python3 -m venv venv

# Activate venv 

# macOS / Linux
. ./venv/bin/activate

# Windows but using Powershell
.\venv\Scripts\Activate.ps1

# Windows but using Command Prompt/CMD 
.\venv\Scripts\Activate.bat

# Clone the Repository
git clone https://github.com/stossy11/JITStreamer-2.0.git

# cd into directory
cd JITStreamer-2.0

# Install JITStreamer
pip3 install -U -e .
(if that doesnt work try pip install -U -e . )

How to use JITStreamer?

• Make sure your device is connected to a computer.
• You will need the IP of your Server / Computer from the VPN
• JITStreamer will need to be installed on that computer (if you are using a server you still need JITStreamer installed on your computer)

Jitterbugpair paring files are not supported

First you will need to get the pairing file from JITStreamer. This will need to be run on your host computer as your device needs to be plugged in

# Run this (in the terminal from before)
JITStreamer --pair

# macOS
open ~/.pymobiledevice3/ 

on Windows you will need to go to your user folder and find the .pymobiledevice3 folder

You should now find the file that should be a .plist file (example: 00001111-000A1100A11101A.plist ignore the _remote plist file)

Send this file to your iDevice over AirDrop or Emailing it to yourself (Please compress the file before sending it to your iDevice)

Now you will need to connect to the VPN from before (Number 2 in Requirements) and download this shortcut on your phone: https://www.icloud.com/shortcuts/a463b0f216cc445f8d0e5f355a7e7666

The UDID of your device will be the name of your pairing file and the address will be the ip of your server with http:// infront (example: "http://100.97.35.58") You will need to input your Pairing file into the shortcut.

You Will need to now launch JITStreamer on your server or Computer (make sure you are connected to the VPN on both your Server / Computer and iDevice)

# macOS / Linux
sudo JITStreamer

# Windows (make sure you are in an Administrator Powershell or CMD Window
JITStreamer

Now Run the Shortcut and you will need to press the "Upload Your Pairing File" Button and then when its done it should say {"OK":"File uploaded"}

Finally run the shortcut again and Enable JIT (the first time may take a while as it would be mounting your Personalised Disk Image)

How to use JITStreamer with Docker

This is somewhat still a work in progress, but it has been tested and works as it's currently is made. Improvements like a smaller image and less privileges are planned as TODO.

Make sure port 8080 is free first; then you can get the container with:

docker run -it --rm -v ${PWD}/:/root/.pymobiledevice3/ -v /var/run:/var/run --cap-add=NET_ADMIN --network=host ghcr.io/stossy11/jitstreamer-2.0 --pair

In the directory you've started this command you'll find your .plist file aswell as the Xcode_iOS_DDI_Personalized directory JITStreamer uses. Don't remove those but copy the .plist to you're device (and copy it's name while you're at it).

Once you've gone through the shortcut and got it working, you can close by doing: CRLT + C. You're container get's cleaned up but you can start it in the background and on boot this time by using:

docker run -d --name jitstreamer-2.0 --restart=always -v ${PWD}/:/root/.pymobiledevice3/ -v /var/run:/var/run --cap-add=NET_ADMIN --network=host ghcr.io/stossy11/jitstreamer-2.0

Use JITStreamer with Wireguard (docker-compose)

This chapter resumes from the chapter above, this will make it possible to quickly get a VPN container which you can use to reach your JITStreamer-2.0 server to enable JIT everywhere.

Make sure to stop your current JITStreamer-2.0 container. You can stop and remove it with: docker stop jitstreamer-2.0 and docker rm jitstreamer-2.0.

Download the docker-compose.yml file to your current directory (where you also have the Xcode_iOS_DDI_Personalized folder and the .plist file):

wget https://raw.githubusercontent.com/stossy11/JITStreamer-2.0/refs/heads/main/docker-compose.yml

Next you need to create hash for the password you'll need to log into the wireguard dashboard:

docker run -it ghcr.io/wg-easy/wg-easy wgpw YOUR_PASSWORD

Change YOUR_PASSWORD with a password of your choosing.

The output of this command should look something like this: PASSWORD_HASH='$2a$12$LZzYTKWwblEwpdF66R9pfemHlEbTJd9D9ishWYXTtdR812sjd0H8u'

Copy and edit this line to remove the single quote's (') and for each dollar sign ($) add a second after it ($$). You're line should look something like this: PASSWORD_HASH=$$2a$$12$$LZzYTKWwblEwpdF66R9pfemHlEbTJd9D9ishWYXTtdR812sjd0H8u

Copy this line and edit the docker-compose.yml file. Replace the PASSWORD_HASH=replaceme field with yours.

Next fill in the WG_HOST variable with your public IP. You can find this by visiting or running this command:

curl -s https://ipv4.icanhazip.com/

Lastly, fill in the WG_ALLOWED_IPS variable with your host IP. You can find this by running this command:

hostname -I | cut -f1 -d' ' 

or look for your host IP with the command: ip a.

Now that's all filled in, you can save and exit.

To run your containers in a detached state, run the following command:

docker-compose up -d

If you don't have docker-compose, you can get it by installing this package with your package manager (apt/dnf/apk install): docker-compose-plugin .

Now you can visit your host IP on port 51821. Log into wireguard with your password, create a new client and install wireguard on your iDevice if you haven't already. Add a config within your Wireguard app and use the scan QR option to transfer the config to your iDevice.

Turn on the vpn and you should be able to enable JIT everywhere. You can test this by disconnecting from your home Wi-Fi and enabeling an app with JIT.

Containers are pre-configured to start on boot. You're wireguard config is stored in: ~/.wg-easy/ with root permissions.

Credits

• nythepegasus for SideJITServer
• Jawshoeadan for the modified pymobiledevice3 version
• doronz88 for pymobiledevice3
• Stossy11 for this project
• The rest of the SideStore team for encouraging me and the others working to make pymobiledevice3 better