Files
XC_VM/docs/en
Claude 5e1cef37ce fix(install): keep SSH credentials off argv and disk; pin the node host key
server:install received the root username and password as positional
arguments, visible in ps and /proc/<pid>/cmdline for the whole install, and
LbInstallFlow/ProxyInstallFlow saved them in a plaintext
bin/install/<id>.json for reinstalls. Any SSH host key was accepted.

- The panel writes a 0600 bin/install/<id>.cred and runs
  `server:install <type> <id> <port> - - … --cred-file=<path>`; the command
  reads and deletes the file before connecting (InstallCredentials). Only
  <id>.cred files in bin/install/ are accepted.
- <id>.json keeps the non-secret parameters only; reinstall_server now needs
  root_password in the request. cron:cleanup (MAIN) scrubs root_password from
  files written by earlier releases.
- The node's SSH host key (SHA-1) must match the optional Expected SSH Host
  Key (hex or `ssh-keygen -l -E sha1` output), else the key stored by the
  first install (new servers.ssh_hostkey_sha1, migration 026), else it is
  trusted on first use and stored.
- New install-form field and strings in all eight languages; cli-tools docs.

Phase 0 stop-gap of the MAIN <-> LB API plan.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Es8UhyPS8MNjuYTagqfGWi
2026-09-25 09:10:04 +00:00
..

XC_VM IPTV Panel

Vateron Media Logo

A modern, open-source IPTV panel inspired by Xtream Codes. Lightweight, fast, and community-driven.


What Is It?

XC_VM is a modern IPTV panel built on PHP, Nginx, FFmpeg, and MariaDB.

XC_VM helps you deploy a full IPTV infrastructure:

  • Management of Live TV, Movies, and Series
  • Reseller and user management
  • Load Balancing
  • EPG and VOD system
  • Monitoring tools and API

💡 Completely free. No licenses. No server locks.


Features

  • 🚀 Modern IPTV panel architecture
  • 🔀 Built-in load balancer support
  • 🎥 Management of VOD and live streams
  • 🧩 API compatible with Xtream Codes
  • 🔐 Enhanced security fixes
  • 📦 Fast FFmpeg-based transcoding
  • 🌍 Multi-language documentation
  • 🧭 Simple and intuitive interface
  • 🛠 Modular extension system

Technologies

  • Nginx — reverse proxy & web server
  • PHP 8.1 — core backend
  • MariaDB — database
  • KeyDB — cache/session engine
  • FFmpeg 8.0 — transcoding
  • yt-dlp — media acquiring

XC_VM officially supports Ubuntu 22.04 and is tested on 24.04.


Community

XC_VM is a fully community-driven project.

  • 💬 Issues
  • ⭐ GitHub Stars: support the project by giving it a star
  • 🔧 Pull Requests: welcome

If you want to contribute, read the:
Contributing Guide


Installation

Installation on Ubuntu 22.04+:

sudo apt update && sudo apt full-upgrade -y
sudo apt install -y python3-pip unzip

latest_version=$(curl -s https://api.github.com/repos/Vateron-Media/XC_VM/releases/latest | grep '"tag_name":' | cut -d '"' -f 4)
wget "https://github.com/Vateron-Media/XC_VM/releases/download/${latest_version}/XC_VM.zip"

unzip XC_VM.zip
sudo python3 install

Disclaimer

You are fully responsible for your own use of this software.