Installing the Daemon

Install the Lockwave daemon on your Linux or Unix host in one command.

Last updated:

Installing the Daemon

The Lockwave daemon (lockwaved) runs on your hosts and enforces SSH key state. It uses outbound-only HTTPS - no inbound ports required.

Quick Install

curl -fsSL https://get.lockwave.io/install.sh | sudo bash -s -- \
  --token YOUR_ENROLLMENT_TOKEN \
  --api-url https://lockwave.io \
  --os-user deploy

What Happens

  1. The script downloads the latest lockwaved binary for your architecture
  2. Creates a systemd service unit
  3. Registers the host with the control plane using the enrollment token
  4. Starts polling for desired SSH key state

Supported Platforms

  • Linux (amd64, arm64)
  • macOS / Darwin (amd64, arm64)
  • FreeBSD (amd64)