Download and install Tunnelry
Installing takes a few minutes on a fresh server. Every release is signed: you check it before you run anything.
First public release. See the changelog on https://tunnelry.com.
Files of this release
Normally you do not need these links: the commands in step 1 download all of them on the server. Use the links to look at the files first, or when the server has no internet access (then copy them into one directory on the server, for example with scp). The files are signed; step 2 shows how to check the key.
- tunnelry-0.1.0.tar.gz (10.7 MB; the program)
- SHA256SUMS (1 KB; checksum of the archive)
- SHA256SUMS.sig (1 KB; its signature)
- install.sh (14 KB; the installer)
- uninstall.sh (3 KB; the uninstaller)
- release-key.pub.pem (1 KB; the public signing key)
What you need
- A server with a fresh installation of Debian 13 or Ubuntu 24.04 (64-bit). A small virtual server is enough.
- Root access (sudo) and a little free disk space (the setup check asks for at least 500 MB). A fresh Debian has no curl yet: sudo apt install -y curl.
- A way for people to reach it: a public IP address or a DNS name, with UDP 1194 (the VPN) and TCP 8443 (this web interface) open in any router or cloud firewall in front of it.
Install
- 1
Download the release
On the server, download the archive, its checksum list and signature, the installer and the public key:
mkdir tunnelry && cd tunnelry BASE=https://updates.tunnelry.com/releases/0.1.0 for f in tunnelry-0.1.0.tar.gz SHA256SUMS SHA256SUMS.sig install.sh uninstall.sh release-key.pub.pem; do curl -fsSL -O "$BASE/$f" done - 2
Check the key
Compare this fingerprint with the one printed on this page, so you know the key is the project’s:
openssl pkey -pubin -in release-key.pub.pem -outform DER | sha256sumSigning key fingerprint (SHA-256):
b0ffe30a6fa3cbb8af441a06c805bcd38e93a810dc4d63470306e136a1009259 - 3
Run the installer
The installer verifies the signature of the archive before it unpacks anything, installs what it needs and prints the address of the web interface and a one-time setup token:
sudo bash install.sh --archive tunnelry-0.1.0.tar.gz - 4
Open the address
Open the printed address in your browser (it uses a self-signed certificate at first: compare the fingerprint the installer printed before you accept it), enter the setup token and follow the wizard.
- 5
Connect a device
Create a profile in the VPN profiles page, download the file once, and import it into an OpenVPN app on your phone or laptop.
Next steps
- The setup wizard, step by step
- Everyday use: profiles, roles, DNS
- Backups, so you never lose your certificate authority
To remove it again: sudo bash uninstall.sh --yes (add --purge to delete the certificate authority too).