FASTEST · ONE LINE

Auto-detect & install

Pick your OS panel below. Each installer detects arch, fetches the matching binary, SHA-256-verifies against the signed manifest, and brings the tunnel up. Wintun driver is bundled into the Windows binary — no separate download.

Get your token from the dashboard after adding a device.

Ubuntu, Debian, Fedora, Arch, RHEL, macOS. Needs sudo to install to /usr/local/bin + bring up the WireGuard interface.

1 command — installs + starts the agent (sudo)

curl -fsSL https://wayangi.dalang.io/install.sh | sudo sh -s -- --token=<YOUR_TOKEN>

Windows 10/11 on Intel/AMD or ARM64 — arch auto-detected. Two steps. Open a new PowerShell window between them so PATH updates apply.

Step 1 — installer (then OPEN A NEW PowerShell window)

irm https://wayangi.dalang.io/install.ps1 | iex

Step 2 — start the agent (in the new window)

wayangi --token=<YOUR_TOKEN>

cmd.exe variant of the PowerShell installer above. Same two-step shape; open a new cmd.exe window between them.

Step 1 — installer (then OPEN A NEW cmd.exe window)

powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"

Step 2 — start the agent (in the new window)

wayangi --token=<YOUR_TOKEN>

CLI agent · pick by platform

Linux · x86_64

Servers, VPS, desktops. Static glibc-free build.

Download · 6.6 MB

Manual install (advanced)

Run line by line — each is a separate command

curl -fsSLO /downloads/wayangi-linux-amd64?v=32607b9a783f
chmod +x wayangi-linux-amd64
sudo mv wayangi-linux-amd64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>

sha256:32607b9a783fc52cbd7c9ed7432ca0a9c9e23376f445db74af30ef52444add30

Linux · arm64

Raspberry Pi 4/5, AWS Graviton, ARM SBCs.

Download · 6.1 MB

Manual install (advanced)

Run line by line — each is a separate command

curl -fsSLO /downloads/wayangi-linux-arm64?v=50b8ec93be40
chmod +x wayangi-linux-arm64
sudo mv wayangi-linux-arm64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>

sha256:50b8ec93be40cd3eb3134581d1f8cb86a463cddc518e357a909407ddc9af20dd

macOS · Apple Silicon

M-series Macs (arm64). Native build.

Download · 6.1 MB

Manual install (advanced)

Run line by line — each is a separate command

curl -fsSLO /downloads/wayangi-darwin-arm64?v=c2e6119b6647
chmod +x wayangi-darwin-arm64
sudo mv wayangi-darwin-arm64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>

sha256:c2e6119b6647bd320c41cbc31fb37fec26045ea6f93b3294018443623eebe710

macOS · Intel

Pre-M Intel Macs (x86_64).

Download · 6.6 MB

Manual install (advanced)

Run line by line — each is a separate command

curl -fsSLO /downloads/wayangi-darwin-amd64?v=f4e9480fd050
chmod +x wayangi-darwin-amd64
sudo mv wayangi-darwin-amd64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>

sha256:f4e9480fd05016680a54aaa7a65319404d6c6211a6e2e5aeff07b608410c267b

Windows · x86_64 (Intel / AMD)

Windows 10/11 on Intel or AMD CPUs. Wintun driver bundled.

Download · 7.4 MB

Manual install (advanced)

Run line by line — each is a separate command

# PowerShell
irm https://wayangi.dalang.io/install.ps1 | iex
wayangi --token=<YOUR_TOKEN>

# cmd.exe
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"
wayangi --token=<YOUR_TOKEN>

sha256:a5222e922a38efd22d1d18dfceb8f67cd1db9da051a268143d2b1ef08e63fc2f

Windows · ARM64

Surface Pro X, Snapdragon Windows laptops. Same installer; arch auto-detected.

Download · 6.8 MB

Manual install (advanced)

Run line by line — each is a separate command

# PowerShell
irm https://wayangi.dalang.io/install.ps1 | iex
wayangi --token=<YOUR_TOKEN>

# cmd.exe
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"
wayangi --token=<YOUR_TOKEN>

sha256:d5c4b6f44ffebf8ff7095e3bfe9a4b81a4f55f41d0c57ac21823a7605e098d63

Mobile apps

Android — native app

Self-hosted APK · sideload, no Play Store needed.

Install · 7.8 MB

Open this page on your phone, tap Install · 7.8 MB above, and approve the "Install unknown apps" prompt for your browser. The app asks for VPN permission on first connect — that's Android's system dialog for any WireGuard client.

CLI install (adb)

curl -fsSLO /downloads/wayangi.apk?v=cf8664d92d0a
adb install wayangi.apk

sha256:cf8664d92d0aaa13988ab6f0b3eafbac8d0506392d355d49913e4165b167a4b7

iOS — native app

TestFlight invite when the Apple review clears.

coming soon

iOS doesn't allow self-hosted sideloading the way Android does. Distribution goes through Apple — we'll publish a TestFlight invite link here as soon as Apple approves the Network Extension entitlement. Existing customers will get an email; new visitors can bookmark /download.

Need help installing?

Each binary verifies via the published SHA-256 above. If the install one-liner doesn't fit your environment, download the binary directly with the platform card and verify the hash before running:

shasum -a 256 wayangi-linux-amd64
# compare against the sha256: chip in this page

macOS: "can't be opened because Apple cannot check it…"

Browser-downloaded binaries inherit the com.apple.quarantine attribute, and macOS Gatekeeper blocks unsigned binaries (we don't pay for Apple's Developer ID program — this is a free tool). Strip the attribute once after installing:

macOS — clear quarantine + allow execution

sudo xattr -dr com.apple.quarantine /usr/local/bin/wayangi

The curl … | sudo sh one-liner above this card avoids this entirely — curl doesn't set the quarantine bit. Use that if you can.

Windows: "Windows protected your PC" (SmartScreen)

SmartScreen flags any unsigned .exe on first run. Click More info → Run anyway. The PowerShell installer auto-clears the Mark-of-the-Web on the installed file, so subsequent launches won't re-prompt. Corporate machines with WDAC / AppLocker may block unsigned binaries entirely — that needs an admin override we can't help with.

Linux: "No such file or directory" (it IS there)

On Alpine / musl-based distros the kernel can't find the dynamic loader and reports the binary itself as missing. We ship a statically-linked Linux build that runs everywhere — make sure you downloaded from this page after May 2026. If older: apk add gcompat on Alpine, or rebuild from source with CGO_ENABLED=0 go build.

Questions or stuck? Email [email protected].