Installing the Daemon

Install the Lockwave daemon on your Linux or Unix host in one command.

Installing the Daemon

The Lockwave daemon (lockwaved) runs on your hosts and enforces SSH key state. It uses outbound-only HTTPS — no inbound ports required.

Quick Install

curl -fsSL https://lockwave.io/install.sh | sudo bash -s -- \\
  --token YOUR_ENROLLMENT_TOKEN \\
  --api-url https://lockwave.io \\
  --os-user deploy

What Happens

  1. The script downloads the latest lockwaved binary for your architecture
  2. Creates a systemd service unit
  3. Registers the host with the control plane using the enrollment token
  4. Starts polling for desired SSH key state

Supported Platforms

  • Linux (amd64, arm64)
  • macOS / Darwin (amd64, arm64)
  • FreeBSD (amd64)
Back to Getting Started Still need help?