Browse documentation

Install the CLI

wardkey is a single signed binary. All artifacts are published to packages.wardkey.app and to GitHub releases at wardkeyapp/cli.

Linux

Works on Debian / Ubuntu / Mint / Pop!_OS / RHEL / Fedora / Rocky / Alma. The script detects your package manager, adds the Wardkey repo + GPG key, and installs the wardkey package.

curl -fsSL https://packages.wardkey.app/install.sh | sudo sh

Inspect the script before piping it to a shell:

curl -fsSL https://packages.wardkey.app/install.sh | less

Manual APT setup

sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://packages.wardkey.app/wardkey.gpg \
  | sudo tee /etc/apt/keyrings/wardkey.gpg >/dev/null
sudo chmod 0644 /etc/apt/keyrings/wardkey.gpg
echo "deb [signed-by=/etc/apt/keyrings/wardkey.gpg] https://packages.wardkey.app/apt stable main" \
  | sudo tee /etc/apt/sources.list.d/wardkey.list
sudo apt-get update
sudo apt-get install -y wardkey

Manual YUM / DNF setup

sudo tee /etc/yum.repos.d/wardkey.repo >/dev/null <<'EOF'
[wardkey]
name=Wardkey Package Repository
baseurl=https://packages.wardkey.app/yum/stable
enabled=1
gpgcheck=1
gpgkey=https://packages.wardkey.app/wardkey.gpg
EOF
sudo dnf install -y wardkey

Windows

Download from the latest release:

  • wardkey_<version>_windows_amd64.msi — double-click to install (recommended). Adds wardkey.exe to the system PATH.
  • wardkey_<version>_windows_amd64.exe — standalone binary. Drop it on your PATH.

Both artifacts are signed by Bitspire via Azure Trusted Signing.

Silent install:

msiexec /i wardkey_<version>_windows_amd64.msi /quiet

macOS

From source

You need Go 1.26+ and a checkout of wardkeyapp/cli alongside its sibling SDK repo (the CLI's go.mod carries a replace directive that resolves the SDK from ../sdk-go).

cd cli
go install ./cmd/wardkey

The binary lands in $(go env GOBIN) (or $(go env GOPATH)/bin). Make sure that directory is on your PATH.

Verify

wardkey --version
wardkey --help

Next: authenticate the CLI →