OVA appliance
The standard OVF appliance. Import it, answer the first-boot prompts, and the whole container stack comes up on its own.
VMware ESXi · vSphere · Workstation · Fusion · VirtualBox
Download
Download
Taranac virtual appliance
A ready-made VM with the full Taranac stack already inside — TACACS+, RADIUS, 802.1X, MFA and the captive portal. Nothing to pull, nothing to compile: boot it and log in. Free, self-hosted, no account required.
Version 1.3.3 535 downloads across all releases
3,299 pulls of the taranac/api
image on GitHub
QCOW2 disk image
The same appliance as a raw KVM disk, for hosts where OVF import is awkward. Attach it as the boot disk of a new VM.
Proxmox VE · libvirt / KVM · QEMU
Offline installer ISO
For sites that cannot import a VM image. Boot it like any install disk: it asks only which disk to use, then installs the same appliance with no network at all.
Any hypervisor that boots an ISO · BIOS or UEFI
One file, one boot, a running stack
Import the image, and a console wizard asks for the hostname, network, timezone, time servers and a login password. Choose Install Taranac and it builds the whole stack from the container images already inside the file — no registry, no internet, nothing to pull. Every secret is generated on your box, at install time.
Read the appliance guide → Installing from the ISO → taranac.ova hypervisor images inside
- hostname
- network10.20.0.201/24
- timezone
- time servers
- password
Install Taranac offline · no registry
stack up https://10.20.0.201
Verify what you downloaded
This image gets root on the box that authenticates your network. Check the hash before
you boot it — all sums are also published at
SHA256SUMS.
sha256sum taranac-1.3.3.ova # Linux
shasum -a 256 taranac-1.3.3.ova # macOS
Running a pilot on the previous release? 1.2.3 stays
available —
taranac-1.2.3.ova · taranac-1.2.3.qcow2 — with its sums in the same
SHA256SUMS. New installations should
start on 1.3.3.
Prefer to install on your own host?
The appliance is a convenience, not the only path. On any Linux box with Docker, the deployment bundle installs the same stack with two scripts and generates every secret for you.
Install with the Docker bundle →Air-gapped, on a host you already run
The ISO covers a new machine with no network at all. To install on a Linux host you
already operate, the bundle installer takes mirrored images — point
IMAGE_PREFIX at your own registry and nothing reaches the internet. If
you'd rather not build that mirror yourself, we'll walk through it with you as part
of support.
Booted it? The appliance guide covers importing on each hypervisor, first-boot setup, resizing the disk, and installing your own TLS certificate. Installing from the ISO? Its guide covers the part before that wizard.
Know when the next build lands
Downloading a release is a moment in time. Create a free account and opt in to release notes — a short email when the next build ships, and whether it’s worth the upgrade. Same account gets you support and licensing.