Download Ferrum Edge v0.9.17
Published October 10, 2026. Edge remains pre-1.0 — pin the same explicit version tag for binaries, checksums, and container images rather than tracking a moving target. Linux binaries require glibc 2.34 or newer.
Looking for Ferrum Anvil? v0.1.5 is an unsigned preview with downloadable installers and CLI archives. Ferrum Anvil preview downloads ↓
Platform Downloads
| Platform | Architecture | Format | v0.9.17 size (approx.) | Download |
|---|---|---|---|---|
| 🐧 Linux | x86_64 (Intel/AMD) | Binary (GNU/glibc) | 110.22 MB | Download |
| 🐧 Linux | ARM64 (Graviton, RPi) | Binary (GNU/glibc) | 91.96 MB | Download |
| macOS | x86_64 (Intel) | Binary | 96.10 MB | Download |
| macOS | ARM64 (Apple Silicon) | Binary | 80.79 MB | Download |
| 💎 Windows | x86_64 | Binary (.exe) | 97.09 MB | Download |
CNI Plugin Binaries
The v0.9.17 release also ships the Linux CNI plugin used for mesh pod traffic capture. These are separate artifacts from the gateway binary above — install them on nodes alongside the gateway, not instead of it.
| Platform | Architecture | Format | v0.9.17 size (approx.) | Download |
|---|---|---|---|---|
| 🐧 Linux CNI plugin | x86_64 (Intel/AMD) | Binary (GNU/glibc) | 4.16 MB | Download |
| 🐧 Linux CNI plugin | ARM64 (Graviton, RPi) | Binary (GNU/glibc) | 3.59 MB | Download |
.sha256 asset. Sizes above use decimal MB. Linux also requires libgcc_s and may require libz; Alpine/musl is not a supported runtime for these GNU binaries.
Container Images
docker pull ferrumedge/ferrum-edge:v0.9.17Image variants
The default image above ships a no-op mock eBPF capture backend. Real ambient mesh capture needs one of the Linux-only variants below. All three families are published on Docker Hub and GHCR for the same version tag.
| Tag | Use it for | Notes |
|---|---|---|
v0.9.17 |
Gateway proxying on any platform | Default. Mock eBPF capture backend — not real capture. Docker Hub index: sha256:f8942bed8d3b77c257d7266c9227450dd3d8c139759a07c47d060521a5fd41d1. |
v0.9.17-ebpf |
Real ambient / node-waypoint eBPF capture | Linux only; kernel ≥ 5.7 with cgroup v2 + bpffs. Distroless — no /bin/sh, no iptables. Exits rather than degrading when the node probe fails. Docker Hub index: sha256:83f751b11dff885663e4d0a4d04fcc10af25d6e339c3d92b6dd7170fba3cbb4a. |
v0.9.17-ebpf-tools |
iptables fallback and Ambient host-network UDP lifecycle | Same eBPF build on Debian slim, carrying sh, iptables, ip6tables, and ip. The mesh Helm chart auto-selects it for the Ambient UDP lifecycle. Docker Hub index: sha256:841f40f168a83a8ba3b2a3c2065ffbdff84c4c521123cda558f03b5108cf1bf5. |
# Real eBPF capture (Linux only, distroless)
docker pull ferrumedge/ferrum-edge:v0.9.17-ebpf
# eBPF plus iptables/shell fallback tooling
docker pull ferrumedge/ferrum-edge:v0.9.17-ebpf-toolsAll three families are Cosign-signed on their immutable multi-arch digests in both registries and carry SLSA provenance plus per-platform SPDX SBOM attestations. See artifact publication and verification and node agent security for the required kernel capabilities.
GHCR is a private package and requires authentication; Docker Hub supports public pulls.
From Source
Build from source to include custom plugins or optional features. Use the repository’s stable Rust toolchain and bootstrap script for protoc, sccache, linker tools, CMake, and curl headers.
# Install Rust with rustup first; bootstrap supports Homebrew, apt, or dnf
git clone https://github.com/ferrum-edge/ferrum-edge.git
cd ferrum-edge
git checkout v0.9.17
./scripts/install-build-deps.sh
cargo build --release
# Binary at: ./target/release/ferrum-edge
./target/release/ferrum-edge versionVerify Your Download
Verify the SHA256 checksum of your downloaded binary against the checksums published in the GitHub release notes.
# Set ASSET to the exact file you downloaded and keep its original filename:
# ferrum-edge-linux-x86_64 ferrum-edge-linux-aarch64
# ferrum-edge-macos-aarch64 ferrum-edge-macos-x86_64
# ferrum-cni-linux-x86_64 ferrum-cni-linux-aarch64
ASSET=ferrum-edge-linux-x86_64
curl -fsSLO "https://github.com/ferrum-edge/ferrum-edge/releases/download/v0.9.17/$ASSET.sha256"
# Linux
sha256sum -c "$ASSET.sha256"
# macOS
shasum -a 256 -c "$ASSET.sha256"
# Expected: : OK. On FAILED, delete the file and download it again. Downloaded? Now install it.
Ferrum Anvil
Anvil is a separate product from the Ferrum Edge gateway. Nothing on this page above is an Anvil download.
SHA256SUMS. macOS installers are not Developer ID signed or notarized and Windows installers have no code-signing certificate. In-app updates use verified minisign signatures; this does not code-sign the installers.
Gatekeeper and SmartScreen may block or warn about these installers. Read the release notes before running them.
Published October 9, 2026 as anvil-v0.1.5, a compatibility release that adopts Ferrum Edge v0.9.15; it is not a security release.
The preceding v0.1.4 fixes five published advisories, and v0.1.2 and v0.1.3 were also security releases; see the Anvil security advisories.
Since v0.1.3 the profile database uses schema 3, which earlier builds cannot open; v0.1.5 keeps it. Close earlier builds and read the
changelog's Breaking sections for
0.1.2 through 0.1.4 before upgrading. It works without an Edge gateway or an account, under the
PolyForm Noncommercial license; commercial use requires a commercial license.