Downloads

Install the spane agent

The agent enrolls into your spane server with a one-time token, gets a unique mTLS client certificate, and pushes metrics outbound — no inbound ports. Generate a token in Settings → Agents, then run the command for your platform.

GitHub releases Enrollment guide

Linux

amd64 & arm64 · hardened systemd service · stdlib-only core build

linux/amd64 linux/arm64

one-line install · run with sudo

curl -fsSL https://YOUR_SPANE/agent/install | sudo bash -s -- \
  --server https://YOUR_SPANE \
  --token YOUR_ENROLLMENT_TOKEN

Self-signed server certificate

add -k / --insecure

curl -fsSL -k https://YOUR_SPANE/agent/install | sudo bash -s -- \
  --server https://YOUR_SPANE \
  --token YOUR_ENROLLMENT_TOKEN \
  --insecure

Manual install (download binary + enroll)

manual

# match your server arch: linux-amd64 or linux-arm64
sudo curl -fsSL https://YOUR_SPANE/agent/download/linux-amd64 \
  -o /usr/local/bin/netpulse-agent
sudo chmod +x /usr/local/bin/netpulse-agent

sudo netpulse-agent --enroll YOUR_TOKEN --server https://YOUR_SPANE \
  --config /etc/netpulse-agent/config.json
sudo systemctl enable --now netpulse-agent

Installs and starts a low-privilege netpulse-agent systemd unit.
Re-running is safe — it re-enrolls in place and rotates the certificate.
Verify: systemctl status netpulse-agent and check Servers → All Servers.

Windows

amd64 · runs as a Windows Service

windows/amd64

PowerShell · run as Administrator

# download the binary, then enroll + install the service
Invoke-WebRequest -Uri "https://YOUR_SPANE/agent/download/windows-amd64" `
  -OutFile "$env:ProgramFiles\spane\netpulse-agent.exe"

& "$env:ProgramFiles\spane\netpulse-agent.exe" --enroll YOUR_TOKEN `
  --server "https://YOUR_SPANE" --config "$env:ProgramData\spane\config.json"

& "$env:ProgramFiles\spane\netpulse-agent.exe" --install-service

The /agent/install.ps1 one-liner endpoint is not wired up yet — install Windows agents manually with the commands above. Add -Insecure for a self-signed server certificate.

Requires an elevated (Administrator) PowerShell session.
Runs as a Windows Service; collects CPU / memory / disk / network and role health.

Release binaries

Pinned versions & checksums

The installer pulls the matching binary straight from your spane server, so it always matches your deployment. For air-gapped installs or to pin a specific version, download signed binaries and checksums from GitHub releases.

View releases on GitHub

Verifying signed binaries? See Security → code signing.