Download PacketSpear

All binaries are built reproducibly from the official PacketSpear build pipeline. Checksums and provenance are provided with each release.

Linux — amd64

Core Server

packetspear-core

Policy and API server with embedded Command dashboard. Requires PostgreSQL 16+.

Download v1.0.2-beta

Node Agent

packetspear-node

Endpoint agent. Collects flow telemetry, enforces policy locally. mTLS to Core.

Download v1.0.2-beta

Gate CLI

packetspear-gate

Enforcement engine. Reads Core-signed policy bundles, applies native firewall rules. (Pro/Enterprise)

Download v1.0.2-beta

Relay Worker

packetspear-relay

Background worker for webhooks, JIT access grants, MFA challenges, and audit processing.

Download v1.0.2-beta

Process Probe

packetspear-process-probe

Kernel-level process probe for deep telemetry on Linux (kernel 5.15+).

Download v1.0.2-beta

macOS — arm64 (Apple Silicon)

Core Server

packetspear-core

Policy and API server with embedded Command dashboard. Requires PostgreSQL 16+.

Download v1.0.2-beta

Node Agent

packetspear-node

Endpoint agent. Visibility-only on macOS — collects flow telemetry, no enforcement.

Download v1.0.2-beta

Gate CLI

packetspear-gate

Gate CLI for macOS. Dry-run and policy inspection only — enforcement requires Linux.

Download v1.0.2-beta

Relay Worker

packetspear-relay

Background worker for webhooks, JIT access, MFA challenges, and audit processing.

Download v1.0.2-beta

Source Code & Containers

Go Source

Build from Source

Clone the repository and build with Go 1.21+. All binaries in cmd/.

GitHub

Docker

Docker Image

Container image with Core, Node, Gate, and Relay. See Dockerfile in repo.

View Docs

Terraform

Terraform Provider

Manage PacketSpear policies, accounts, and configuration as Terraform resources.

Provider Docs

One-Line Install

Install Script

Single-command install with DESTDIR support. Bundles all binaries + systemd/launchd units.

View Script

Quick Install

Linux (systemd)

# Download and install
curl -sSL https://download.packetspear.com/install.sh | bash

# Or install to a custom directory
DESTDIR=/opt/packetspear bash install.sh

# Start Core
systemctl enable --now packetspear-core

# Enroll a node
packetspear-node enroll --core-url https://core.internal:8443 --enrollment-token <token>

macOS (launchd)

# Download and install
curl -sSL https://download.packetspear.com/install.sh | bash

# Start Core
launchctl load ~/Library/LaunchAgents/com.packetspear.core.plist

Build from Source

# Clone and build
go build -o dist/ ./cmd/...

# Run migrations
psql "$PACKETSPEAR_DSN" -f migrations/00001_baseline.up.sql

# Start Core
PACKETSPEAR_DSN="postgres://..." ./dist/packetspear-core

Verify Downloads

All release artifacts include SHA-256 checksums and are built via the PacketSpear CI pipeline. Checksum files are published alongside each release.

# SHA-256 checksums for v1.0.2-beta (commit fd88f2d)
2396553a...  packetspear-1.0.2-SNAPSHOT-fd88f2d-linux-x86_64.tar.gz
fcf2e4d3...  packetspear-1.0.2-SNAPSHOT-fd88f2d-linux-aarch64.tar.gz
dcdb6b47...  packetspear-1.0.2-SNAPSHOT-fd88f2d-darwin-aarch64.tar.gz