APK Ref Injector Quick Start

Before you start

You need:

a Linux x86_64 host with systemd;
the apk-ref-injector executable;
your license.zip;
sudo access for installation and service management.

Choose a domain or address that users will use to download APKs, for example https://apk.example.com.

Install

sudo ./apk-ref-injector install \
  --license ./license.zip \
  --public-url https://apk.example.com \
  --bind 0.0.0.0:8080

The first install creates the configuration and a random Console password, prints the password once, and does not start the service automatically. Existing configuration and data are never overwritten.

If you access the service by IP address instead of a domain, use that address for --public-url, for example http://203.0.113.10:8080.

Start

sudo apk-ref-injector start
sudo apk-ref-injector status

Open:

https://apk.example.com/console/

Upload and download

Open Applications in the Console.
Upload a V2/V3-signed base APK.
Open the app and create a download link with the channel value you need.

The download URL has this shape:

https://apk.example.com/d/{app_id}/{filename}.apk?referer=channel-a

referer is a query parameter. It is not the HTTP Referer header.

Verify the signature

The downloaded APK should pass the same signature check as the original:

apksigner verify --verbose downloaded.apk

The service does not re-sign the APK. The download keeps the original V2/V3 signature.