FASTEST · ONE LINE

Auto-detect & install

Pick your OS panel below. Each installer detects arch, fetches the matching binary, SHA-256-verifies against the signed manifest, and brings the tunnel up. Wintun driver is bundled into the Windows binary — no separate download.

Get your token from the dashboard after adding a device.

Ubuntu, Debian, Fedora, Arch, RHEL, macOS. Needs sudo to install to /usr/local/bin + bring up the WireGuard interface.

1 command — installs + starts the agent (sudo)

curl -fsSL https://wayangi.dalang.io/install.sh | sudo sh -s -- --token=<YOUR_TOKEN>

Windows 10/11 on Intel/AMD or ARM64 — arch auto-detected. Two steps. Open a new PowerShell window between them so PATH updates apply.

Step 1 — installer (then OPEN A NEW PowerShell window)

irm https://wayangi.dalang.io/install.ps1 | iex

Step 2 — start the agent (in the new window)

wayangi --token=<YOUR_TOKEN>

cmd.exe variant of the PowerShell installer above. Same two-step shape; open a new cmd.exe window between them.

Step 1 — installer (then OPEN A NEW cmd.exe window)

powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"

Step 2 — start the agent (in the new window)

wayangi --token=<YOUR_TOKEN>

CLI agent · pick by platform

Linux · x86_64

Servers, VPS, desktops. Static glibc-free build.

Download · 6.6 MB

Manual install (advanced)

Run line by line — each is a separate command

curl -fsSLO /downloads/wayangi-linux-amd64?v=c676e9d48f44
chmod +x wayangi-linux-amd64
sudo mv wayangi-linux-amd64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>

sha256:c676e9d48f44e32a2699fc1d6907de723106080db90565a03a5ac3d6d81b2052

Linux · arm64

Raspberry Pi 4/5, AWS Graviton, ARM SBCs.

Download · 6.1 MB

Manual install (advanced)

Run line by line — each is a separate command

curl -fsSLO /downloads/wayangi-linux-arm64?v=befefa3da6ab
chmod +x wayangi-linux-arm64
sudo mv wayangi-linux-arm64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>

sha256:befefa3da6aba3ab4561e077f01fcb899dc23db52793db6e05dc4b250e8918a3

macOS · Apple Silicon

M-series Macs (arm64). Native build.

Download · 6.2 MB

Manual install (advanced)

Run line by line — each is a separate command

curl -fsSLO /downloads/wayangi-darwin-arm64?v=41b9218c9c96
chmod +x wayangi-darwin-arm64
sudo mv wayangi-darwin-arm64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>

sha256:41b9218c9c961d5bc11a63c23c9f2a3fe10c242367bc2b655c7c986905a75a9c

macOS · Intel

Pre-M Intel Macs (x86_64).

Download · 6.6 MB

Manual install (advanced)

Run line by line — each is a separate command

curl -fsSLO /downloads/wayangi-darwin-amd64?v=2ea99c99018b
chmod +x wayangi-darwin-amd64
sudo mv wayangi-darwin-amd64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>

sha256:2ea99c99018b21fa03836161d67d3dbd4960cb19ef0c199cdd2dbd9ab4920404

Windows · x86_64 (Intel / AMD)

Windows 10/11 on Intel or AMD CPUs. Wintun driver bundled.

Download · 7.5 MB

Manual install (advanced)

Run line by line — each is a separate command

# PowerShell
irm https://wayangi.dalang.io/install.ps1 | iex
wayangi --token=<YOUR_TOKEN>

# cmd.exe
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"
wayangi --token=<YOUR_TOKEN>

sha256:be84c9a9428733d75dff5cc62c2a9b59d4f95e8749b5c8157d28f4f8e04ac670

Windows · ARM64

Surface Pro X, Snapdragon Windows laptops. Same installer; arch auto-detected.

Download · 6.9 MB

Manual install (advanced)

Run line by line — each is a separate command

# PowerShell
irm https://wayangi.dalang.io/install.ps1 | iex
wayangi --token=<YOUR_TOKEN>

# cmd.exe
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"
wayangi --token=<YOUR_TOKEN>

sha256:c4bfc399dc4732977417546bd1374fdcf75d953fc7617cde7a055b99645fa5c9

Mobile apps

Android — native app

Self-hosted APK · sideload, no Play Store needed.

Install · 7.9 MB

Open this page on your phone, tap Install · 7.9 MB above, and approve the "Install unknown apps" prompt for your browser. The app asks for VPN permission on first connect — that's Android's system dialog for any WireGuard client.

CLI install (adb)

curl -fsSLO /downloads/wayangi.apk?v=9de2caa4e12b
adb install wayangi.apk

sha256:9de2caa4e12be18e2173b6cba24f9fd65b92ba6e3a67befe0011d51baa34756a

iOS — native app

TestFlight invite when the Apple review clears.

coming soon

iOS doesn't allow self-hosted sideloading the way Android does. Distribution goes through Apple — we'll publish a TestFlight invite link here as soon as Apple approves the Network Extension entitlement. Existing customers will get an email; new visitors can bookmark /download.

Need help installing?

Each binary verifies via the published SHA-256 above. If the install one-liner doesn't fit your environment, download the binary directly with the platform card and verify the hash before running:

shasum -a 256 wayangi-linux-amd64
# compare against the sha256: chip in this page

macOS: "can't be opened because Apple cannot check it…"

Browser-downloaded binaries inherit the com.apple.quarantine attribute, and macOS Gatekeeper blocks unsigned binaries (we don't pay for Apple's Developer ID program — this is a free tool). Strip the attribute once after installing:

macOS — clear quarantine + allow execution

sudo xattr -dr com.apple.quarantine /usr/local/bin/wayangi

The curl … | sudo sh one-liner above this card avoids this entirely — curl doesn't set the quarantine bit. Use that if you can.

Windows: "Windows protected your PC" (SmartScreen)

SmartScreen flags any unsigned .exe on first run. Click More info → Run anyway. The PowerShell installer auto-clears the Mark-of-the-Web on the installed file, so subsequent launches won't re-prompt. Corporate machines with WDAC / AppLocker may block unsigned binaries entirely — that needs an admin override we can't help with.

Linux: "No such file or directory" (it IS there)

On Alpine / musl-based distros the kernel can't find the dynamic loader and reports the binary itself as missing. We ship a statically-linked Linux build that runs everywhere — make sure you downloaded from this page after May 2026. If older: apk add gcompat on Alpine, or rebuild from source with CGO_ENABLED=0 go build.

Questions or stuck? Email [email protected].