Tunneling on Debian GNU/Linux

Installing the Debian Package

1. Select an OS to see the appropriate steps.

Ubuntu

Ubuntu

Packages are available for all Ubuntu releases since 18.04 (Bionic).

Architectures available:

• x86_64
• arm64

note

Please read this script to ensure it is safe before running it.

curl -sSLf https://get.openziti.io/tun/scripts/install-ubuntu.bash | bash

Debian GNU/Linux

Debian GNU/Linux

Debian	UBUNTU_LTS	Archs
13 Trixie	jammy	x86_64, arm64
12 Bookworm	jammy	x86_64, arm64
11 Bullseye	focal	x86_64, arm64
10 Buster	bionic	x86_64
9 Stretch	xenial	x86_64

1. Refer to the table to find the Ubuntu release name that is the contemporary of the Debian release. Substitute the Ubuntu release name for jammy in the /etc/apt/sources.list.d/openziti.list file.

   UBUNTU_LTS=jammy

2. Subscribe the system to the OpenZiti package repository for the UBUNTU_LTS specified above.

   echo "deb [signed-by=/usr/share/keyrings/openziti.gpg] https://packages.openziti.org/zitipax-openziti-deb-stable $UBUNTU_LTS main" \
   | sudo tee /etc/apt/sources.list.d/openziti.list >/dev/null

3. Install the package signing pubkey.

   curl -sSLf https://get.openziti.io/tun/package-repos.gpg \
   | sudo gpg --dearmor --output /usr/share/keyrings/openziti.gpg

4. Ensure the pubkey is readable by all.

   sudo chmod -c +r /usr/share/keyrings/openziti.gpg

5. Refresh the package list and install ziti-edge-tunnel.

   sudo apt update
   sudo apt install ziti-edge-tunnel

6. Replace resolveconf with systemd-resolved and delegate management of /etc/resolv.conf to systemd-resolved.

   Debian ships without systemd-resolved, which is the only resolver that can be automatically configured by the tunnel service. You must choose between installing and enabling systemd-resolved (preferred for security and performance) or run the tunneler as root to enable legacy resolver configurations, e.g., resolveconf.

   sudo apt install systemd-resolved

7. Reboot to ensure the new resolver configuration is in full effect.

2. Enable and start the service

   sudo systemctl enable --now ziti-edge-tunnel.service

3. Add an Identity