Pick your platform. Every binary is a static cross-compile out of the same Go module — no CGO, no runtime deps. Each download has a published SHA-256.
A menu-bar / system-tray app for macOS & Windows. Click to connect, watch the icon turn green. No commands to copy.
Pick your OS panel below. Each installer detects arch, fetches the matching binary, SHA-256-verifies against the signed manifest, and brings the tunnel up. Wintun driver is bundled into the Windows binary — no separate download.
Get your token from the dashboard after adding a device.
Ubuntu, Debian, Fedora, Arch, RHEL, macOS. Needs sudo to install to /usr/local/bin + bring up the WireGuard interface.
curl -fsSL https://wayangi.dalang.io/install.sh | sudo sh -s -- --token=<YOUR_TOKEN>Windows 10/11 on Intel/AMD or ARM64 — arch auto-detected. Two steps. Open a new PowerShell window between them so PATH updates apply.
irm https://wayangi.dalang.io/install.ps1 | iexwayangi --token=<YOUR_TOKEN>cmd.exe variant of the PowerShell installer above. Same two-step shape; open a new cmd.exe window between them.
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"wayangi --token=<YOUR_TOKEN>Servers, VPS, desktops. Static glibc-free build.
curl -fsSLO /downloads/wayangi-linux-amd64?v=2fc9ad752b23
chmod +x wayangi-linux-amd64
sudo mv wayangi-linux-amd64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>sha256:2fc9ad752b23c38e3bd4ec9a3f2d8503d02962d30a9ca8c06f0cdadd53ac4b45
Raspberry Pi 4/5, AWS Graviton, ARM SBCs.
curl -fsSLO /downloads/wayangi-linux-arm64?v=819ba0b48ed7
chmod +x wayangi-linux-arm64
sudo mv wayangi-linux-arm64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>sha256:819ba0b48ed7a15d26f58868076ecfdf6a6fbe0db8cab43ad190b7137fea1e34
M-series Macs (arm64). Native build.
curl -fsSLO /downloads/wayangi-darwin-arm64?v=712986c89fab
chmod +x wayangi-darwin-arm64
sudo mv wayangi-darwin-arm64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>sha256:712986c89fab1f24ed3adf2704fe1f11cf2a4625355404f18ef751248903ed5b
Pre-M Intel Macs (x86_64).
curl -fsSLO /downloads/wayangi-darwin-amd64?v=71c9f5c9d045
chmod +x wayangi-darwin-amd64
sudo mv wayangi-darwin-amd64 /usr/local/bin/wayangi
sudo wayangi --token=<YOUR_TOKEN>sha256:71c9f5c9d045bdb3557e6ccbd283da246860d6bed4c423b4859900129ee7966f
Windows 10/11 on Intel or AMD CPUs. Wintun driver bundled.
# PowerShell
irm https://wayangi.dalang.io/install.ps1 | iex
wayangi --token=<YOUR_TOKEN>
# cmd.exe
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"
wayangi --token=<YOUR_TOKEN>sha256:998dbe9411a4f2e1ad34e6297ab70f11398f5210a9dd4fe4eed9f1658a759c2f
Surface Pro X, Snapdragon Windows laptops. Same installer; arch auto-detected.
# PowerShell
irm https://wayangi.dalang.io/install.ps1 | iex
wayangi --token=<YOUR_TOKEN>
# cmd.exe
powershell -Command "irm https://wayangi.dalang.io/install.ps1 | iex"
wayangi --token=<YOUR_TOKEN>sha256:ee0a750bbc854030fa19ac8d71810bf8d01efcd5137966acc6fbc9fc5b394122
Self-hosted APK · sideload, no Play Store needed.
Open this page on your phone, tap Install · 7.9 MB above, and approve the "Install unknown apps" prompt for your browser. The app asks for VPN permission on first connect — that's Android's system dialog for any WireGuard client.
curl -fsSLO /downloads/wayangi.apk?v=9de2caa4e12b
adb install wayangi.apksha256:9de2caa4e12be18e2173b6cba24f9fd65b92ba6e3a67befe0011d51baa34756a
TestFlight invite when the Apple review clears.
iOS doesn't allow self-hosted sideloading the way Android does. Distribution goes through Apple — we'll publish a TestFlight invite link here as soon as Apple approves the Network Extension entitlement. Existing customers will get an email; new visitors can bookmark /download.
Each binary verifies via the published SHA-256 above. If the install one-liner doesn't fit your environment, download the binary directly with the platform card and verify the hash before running:
shasum -a 256 wayangi-linux-amd64
# compare against the sha256: chip in this pageBrowser-downloaded binaries inherit the com.apple.quarantine attribute, and macOS Gatekeeper blocks unsigned binaries (we don't pay for Apple's Developer ID program — this is a free tool). Strip the attribute once after installing:
sudo xattr -dr com.apple.quarantine /usr/local/bin/wayangiThe curl … | sudo sh one-liner above this card avoids this entirely — curl doesn't set the quarantine bit. Use that if you can.
SmartScreen flags any unsigned .exe on first run. Click More info → Run anyway. The PowerShell installer auto-clears the Mark-of-the-Web on the installed file, so subsequent launches won't re-prompt. Corporate machines with WDAC / AppLocker may block unsigned binaries entirely — that needs an admin override we can't help with.
On Alpine / musl-based distros the kernel can't find the dynamic loader and reports the binary itself as missing. We ship a statically-linked Linux build that runs everywhere — make sure you downloaded from this page after May 2026. If older: apk add gcompat on Alpine, or rebuild from source with CGO_ENABLED=0 go build.
Questions or stuck? Email [email protected].