OVA appliance
The standard OVF appliance. Import it, answer the first-boot prompts, and the whole container stack comes up on its own.
VMware ESXi · vSphere · Workstation · Fusion · VirtualBox
Download
Download
Taranac virtual appliance
A ready-made VM with the full Taranac stack already inside — TACACS+, RADIUS, 802.1X, MFA and the captive portal. Nothing to pull, nothing to compile: boot it and log in. Free, self-hosted, no account required.
Version 1.1.1
QCOW2 disk image
The same appliance as a raw KVM disk, for hosts where OVF import is awkward. Attach it as the boot disk of a new VM.
Proxmox VE · libvirt / KVM · QEMU
One file, one boot, a running stack
Import the image, and a console wizard asks for the hostname, network, timezone and a login password. Choose Install Taranac and it builds the whole stack from the container images already inside the file — no registry, no internet, nothing to pull. Every secret is generated on your box, at install time.
Read the appliance guide → taranac.ova hypervisor images inside
- hostname
- network10.20.0.201/24
- timezone
- password
Install Taranac offline · no registry
stack up https://10.20.0.201
Before it sees production traffic
These images ship with SSH host keys baked in, so every appliance deployed from the same
file presents the same fingerprint. Regenerate them once, right after the wizard finishes,
and set a real password for the taranac user rather than skipping that step.
sudo rm /etc/ssh/ssh_host_*
sudo ssh-keygen -A
sudo systemctl restart sshVerify what you downloaded
This image gets root on the box that authenticates your network. Check the hash before
you boot it — all sums are also published at
SHA256SUMS.
sha256sum taranac-1.1.1.ova # Linux
shasum -a 256 taranac-1.1.1.ova # macOSPrefer to install on your own host?
The appliance is a convenience, not the only path. On any Linux box with Docker, the deployment bundle installs the same stack with two scripts and generates every secret for you.
Install with the Docker bundle →Fully offline / air-gapped
The installer already supports mirrored images — point IMAGE_PREFIX at
your own registry and nothing reaches the internet. If you'd rather not build that
mirror yourself, we'll prepare and walk through an offline install for your
environment as part of support.
Booted it? The appliance guide covers importing on each hypervisor, first-boot setup, resizing the disk, and installing your own TLS certificate.
Know when the next build lands
Downloading a release is a moment in time. Create a free account and opt in to release notes — a short email when the next build ships, and whether it’s worth the upgrade. Same account gets you support and licensing.