Pick your platform. Every binary is a static cross-compile out of the same Go module — no CGO, no runtime deps. Each download has a published SHA-256.
A menu-bar / system-tray app for macOS & Windows. Click to connect, watch the icon turn green. No commands to copy.
Pick your OS panel below. Each installer detects arch, fetches the matching binary, SHA-256-verifies against the signed manifest, and brings the tunnel up. Wintun driver is bundled into the Windows binary — no separate download.
Get your token from the dashboard after adding a device.
Ubuntu, Debian, Fedora, Arch, RHEL, macOS. Needs sudo to install to /usr/local/bin + bring up the WireGuard interface.
curl -fsSL https://wayangi.dalang.io/install.sh | sudo sh -s -- --token=<YOUR_TOKEN>Windows 10/11 on Intel/AMD or ARM64 — arch auto-detected. Two steps. Open a new PowerShell window between them so PATH updates apply.
irm https://wayangi.dalang.io/install.ps1 | iexwayangi --token=<YOUR_TOKEN>cmd.exe variant of the PowerShell installer above. Same two-step shape; open a new cmd.exe window between them.
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"wayangi --token=<YOUR_TOKEN>Servers, VPS, desktops. Static glibc-free build.
curl -fsSLO /downloads/wayangi-linux-amd64?v=b705e193140e
chmod +x wayangi-linux-amd64
sudo mv wayangi-linux-amd64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>sha256:b705e193140e1b26f3cc5892dfe572dda26b2f3131f6fb1b947a1b40c8b4d294
Raspberry Pi 4/5, AWS Graviton, ARM SBCs.
curl -fsSLO /downloads/wayangi-linux-arm64?v=59356dd73b35
chmod +x wayangi-linux-arm64
sudo mv wayangi-linux-arm64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>sha256:59356dd73b35e918ad7f8697db624a67e298cb28590a5956dd9d7635e15af72b
M-series Macs (arm64). Native build.
curl -fsSLO /downloads/wayangi-darwin-arm64?v=ea06c3831080
chmod +x wayangi-darwin-arm64
sudo mv wayangi-darwin-arm64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>sha256:ea06c38310809082d2ba610a2686a46d0efacaa9e5c414d3dac8d3b4f50eba4c
Pre-M Intel Macs (x86_64).
curl -fsSLO /downloads/wayangi-darwin-amd64?v=edcc2df368d6
chmod +x wayangi-darwin-amd64
sudo mv wayangi-darwin-amd64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>sha256:edcc2df368d6a6c07a595ad5f857aee9338f037d6c63b830ad8738795f8a10c7
Windows 10/11 on Intel or AMD CPUs. Wintun driver bundled.
# PowerShell
irm https://wayangi.dalang.io/install.ps1 | iex
wayangi --token=<YOUR_TOKEN>
# cmd.exe
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"
wayangi --token=<YOUR_TOKEN>sha256:7f903d2afb3bb28454d83ac9d6bedd5c8f816d429fa2e8cf1b2af823b1fe4574
Surface Pro X, Snapdragon Windows laptops. Same installer; arch auto-detected.
# PowerShell
irm https://wayangi.dalang.io/install.ps1 | iex
wayangi --token=<YOUR_TOKEN>
# cmd.exe
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"
wayangi --token=<YOUR_TOKEN>sha256:fb1ebddffa9bbbbd57b84ced53637209241fbb1f339c6a8ee1ef4807ce310ab2
Self-hosted APK · sideload, no Play Store needed.
Open this page on your phone, tap Install · 14.4 MB above, and approve the "Install unknown apps" prompt for your browser. The app asks for VPN permission on first connect — that's Android's system dialog for any WireGuard client.
One universal APK — works on every Android phone (64-bit and 32-bit) from Android 8 onward.
curl -fsSLO /downloads/wayangi.apk?v=128cb235364b
adb install wayangi.apksha256:128cb235364b7d3275d922497b085fdcd277b7f0ce139106bc7f342431d97264
TestFlight invite when the Apple review clears.
iOS doesn't allow self-hosted sideloading the way Android does. Distribution goes through Apple — we'll publish a TestFlight invite link here as soon as Apple approves the Network Extension entitlement. Existing customers will get an email; new visitors can bookmark /download.
Each binary verifies via the published SHA-256 above. If the install one-liner doesn't fit your environment, download the binary directly with the platform card and verify the hash before running:
shasum -a 256 wayangi-linux-amd64
# compare against the sha256: chip in this pageBrowser-downloaded binaries inherit the com.apple.quarantine attribute, and macOS Gatekeeper blocks unsigned binaries (we don't pay for Apple's Developer ID program — this is a free tool). Strip the attribute once after installing:
sudo xattr -dr com.apple.quarantine /usr/local/bin/wayangiThe curl … | sudo sh one-liner above this card avoids this entirely — curl doesn't set the quarantine bit. Use that if you can.
SmartScreen flags any unsigned .exe on first run. Click More info → Run anyway. The PowerShell installer auto-clears the Mark-of-the-Web on the installed file, so subsequent launches won't re-prompt. Corporate machines with WDAC / AppLocker may block unsigned binaries entirely — that needs an admin override we can't help with.
On Alpine / musl-based distros the kernel can't find the dynamic loader and reports the binary itself as missing. We ship a statically-linked Linux build that runs everywhere — make sure you downloaded from this page after May 2026. If older: apk add gcompat on Alpine, or rebuild from source with CGO_ENABLED=0 go build.
Questions or stuck? Email [email protected].